windows has detected a spyware infection+ CIDRésolu/Fermé

Question

Bonjour,
j'aimerais avoir votre aide concernant deux problèmes que j'ai avec mon pc.
Tout d'abord j'ai une bulle "windows antivirus has detected a spyware infection...".
Et secondement j'ai des fenêtres CID internet explorer qui s'ouvre de façon intempestive.
J'ai fait une analyse avec avast et spybot mais rien y fait.
J'ai vu que des problèmes similaires ont été résolus et j'aimerais que vous me guidiez pour les éliminer.
Merci.

jlpjlp · Answer

slt,


Télécharge ceci: (by Moe) : 

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! 
Une rapport sera alors crée, à copie/colle en entier sur le forum.

______________


Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) 

_______________________

colle un rapport hijackthis 
 

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo. 

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste 

Ensuite avec Explorer créer un dossier c:\hijackthis 
Décompresser Hijackthis dans ce dossier. 
C'est important pour les sauvegardes."

Blackbeard78 · Answer

Tout d'abord merci beaucoup de m'avoir répondu et en plus si rapidement.
En attendant le rapport de lopxp voici le rapport hijack this:
Logfile of HijackThis v1.99.1
Scan saved at 17:49:46, on 16/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\system32\BtUsrBdg.exe
C:\WINDOWS\system32\BTSetBootKey.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.exe
C:\WINDOWS	snp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
C:\Program Files\Canal\Canal Widget\Canal Widget.exe
C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe
C:\PROGRA~1\Cacheman\Cacheman.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\java.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Extended Systems\XTNDConnect Blue Manager\btprot.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\mIRC\mirc.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\hijackthis\HijackThis.exe
C:\WINDOWS\system32\cscript.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://bar.baidu.com/sobar/defaultsearch.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {16457CD6-5D57-5CF3-D6C4-9EF62FC73911} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [EasyMod] C:\Program Files\EasyBox\EasyMod.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [rundll] C:\Program Files\Common Filesundll.exe
O4 - HKLM\..\Run: [BTUSRBDG] BtUsrBdg.exe
O4 - HKLM\..\Run: [BTSETBOOTKEY] BTSetBootKey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [FreeBrowser] C:\Program Files\freeBrowser_0.9_2007-01-15\FreeBrowser\freebrowser.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Rapget] C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS	snp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Canal Widget] "C:\Program Files\Canal\Canal Widget\Launcher.exe"
O4 - HKLM\..\Run: [bend logo clock film] C:\Documents and Settings\All Users\Application Data\Frag great bend logo\bolt sign.exe
O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\AdobeR.exe
O4 - HKLM\..\Run: [MSDisp32] rundll32.exe C:\WINDOWS\system32\drvhig.dll,startup
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [AntiSpyware7] "C:\Program Files\Steganos AntiSpyware 7\aspy7.exe" /0
O4 - HKCU\..\Run: [PLAY HOLE] C:\DOCUME~1\COMPAQ~1\APPLIC~1\STOREL~1emote fast.exe
O4 - HKCU\..\Run: [Cacheman] C:\PROGRA~1\Cacheman\Cacheman.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
O4 - HKCU\..\Run: [SFS6] "C:\Program Files\Steganos Secure FileSharing 6\sfs.exe" /booting
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [LanceurEasyBox] "C:\Program Files\EasyBox\EasyBox.exe" -AutoStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download with Rapget - C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Chinese Navigation - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra 'Tools' menuitem: Chinese Navigation - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm (file missing)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.canal-plus.com (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - 
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} - 
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} - 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - 
O16 - DPF: {39D420B3-E0EB-424C-89AA-C24F8DE7EF79} (KooPlayer Control) - http://www.tvkoo.com/update/KooPlayer.ocx
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E2D6932-3885-4FA2-8DD4-DB63FFE33797} - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9BF607E0-4CC1-4099-9A07-362C9E4FB090} (WStarter Control) - http://live.pdbox.co.kr:8057/WStarter.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - 
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - 
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: winmmt32 - C:\WINDOWS\SYSTEM32\winmmt32.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
O23 - Service: EasyModApache - Unknown owner - C:\Program Files\EasyBox\apache\apache.exe" -k runservice (file missing)
O23 - Service: Freenet 0.7 darknet-8888 (freenet-darknet-8888) - Unknown owner - C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe" -s "C:\Program Files\Freenet\wrapper.conf (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcappcapd.exe" -d -f "%ProgramFiles%\WinPcappcapd.ini (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\Fsk\SonySCSIHelperService.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

jlpjlp · Answer

refais hijackthis avec la version que j'ai donné qui est plus recente puis 1/ # Télécharge RavAntivirus d'Evosla : http://ww25.evosla.com/compteur.php?soft=rav_antivirus # Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX # Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau # Doucle-clique sur >> RAV.exe << afin de lancer l'outil. # Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles) # Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain . # Retire tes disques amovibles et redémarrez votre ordinateur. # Poste le rapport, si infection! 2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe Double-clique sur l’icône. Les icônes vont disparaître. C’est normal. Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite Redémarre ensuite le PC. _____________ Télécharge ceci: (by Moe) : http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe Double clic sur Lopxpsetup.exe pour lancer l'installation Au menu, choisir l'option 1 Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! Une rapport sera alors crée, à copie/colle en entier sur le forum. ______________ Fais un clic droit sur ce lien : (IL-MAFIOSO) http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. Ensuite double clique sur navilog1.exe pour lancer l'installation. Une fois l'installation terminée, le fix s'exécutera automatiquement. (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). Laisse-toi guider. Au menu principal, choisis 1 et valides. (ne fais pas le choix 2,3 ou 4 sans notre avis/accord) Patiente jusqu'au message : *** Analyse Termine le ..... *** Appuie sur une touche comme demandé, le blocnote va s'ouvrir. Copie-colle l'intégralité dans une réponse. Referme le blocnote. Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Blackbeard78 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:20:52, on 16/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\WINDOWS\system32\BtUsrBdg.exe
C:\WINDOWS\system32\BTSetBootKey.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.exe
C:\WINDOWS	snp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
C:\Program Files\Canal\Canal Widget\Canal Widget.exe
C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe
C:\PROGRA~1\Cacheman\Cacheman.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\java.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Extended Systems\XTNDConnect Blue Manager\btprot.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\mIRC\mirc.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\FileZilla FTP Client\filezilla.exe
C:\Program Files\Navilog1\catchme.exe
C:\hijackthis\eden(2).exe
C:\WINDOWS\system32\wuauclt.exe
C:\hijackthis\eden.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://bar.baidu.com/sobar/defaultsearch.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {16457CD6-5D57-5CF3-D6C4-9EF62FC73911} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France	bMul1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [EasyMod] C:\Program Files\EasyBox\EasyMod.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [rundll] C:\Program Files\Common Filesundll.exe
O4 - HKLM\..\Run: [BTUSRBDG] BtUsrBdg.exe
O4 - HKLM\..\Run: [BTSETBOOTKEY] BTSetBootKey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [FreeBrowser] C:\Program Files\freeBrowser_0.9_2007-01-15\FreeBrowser\freebrowser.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Rapget] C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS	snp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Canal Widget] "C:\Program Files\Canal\Canal Widget\Launcher.exe"
O4 - HKLM\..\Run: [bend logo clock film] C:\Documents and Settings\All Users\Application Data\Frag great bend logo\bolt sign.exe
O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\AdobeR.exe
O4 - HKLM\..\Run: [MSDisp32] rundll32.exe C:\WINDOWS\system32\drvhig.dll,startup
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [AntiSpyware7] "C:\Program Files\Steganos AntiSpyware 7\aspy7.exe" /0
O4 - HKCU\..\Run: [PLAY HOLE] C:\DOCUME~1\COMPAQ~1\APPLIC~1\STOREL~1emote fast.exe
O4 - HKCU\..\Run: [Cacheman] C:\PROGRA~1\Cacheman\Cacheman.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
O4 - HKCU\..\Run: [SFS6] "C:\Program Files\Steganos Secure FileSharing 6\sfs.exe" /booting
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [LanceurEasyBox] "C:\Program Files\EasyBox\EasyBox.exe" -AutoStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download with Rapget - C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapgetapget.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Chinese Navigation - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra 'Tools' menuitem: Chinese Navigation - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm (file missing)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.canal-plus.com (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - 
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} - 
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} - 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - 
O16 - DPF: {39D420B3-E0EB-424C-89AA-C24F8DE7EF79} (KooPlayer Control) - http://www.tvkoo.com/update/KooPlayer.ocx
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E2D6932-3885-4FA2-8DD4-DB63FFE33797} - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9BF607E0-4CC1-4099-9A07-362C9E4FB090} (WStarter Control) - http://live.pdbox.co.kr:8057/WStarter.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - 
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - 
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: winmmt32 - C:\WINDOWS\SYSTEM32\winmmt32.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
O23 - Service: EasyModApache - Apache Software Foundation - C:\Program Files\EasyBox\apache\apache.exe
O23 - Service: Freenet 0.7 darknet-8888 (freenet-darknet-8888) - Unknown owner - C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\Fsk\SonySCSIHelperService.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

jlpjlp · Answer

1/ # Télécharge RavAntivirus d'Evosla : http://ww25.evosla.com/compteur.php?soft=rav_antivirus # Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX # Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau # Doucle-clique sur >> RAV.exe << afin de lancer l'outil. # Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles) # Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain . # Retire tes disques amovibles et redémarrez votre ordinateur. # Poste le rapport, si infection! 2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe Double-clique sur l’icône. Les icônes vont disparaître. C’est normal. Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite Redémarre ensuite le PC. _____________ Télécharge ceci: (by Moe) : http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe Double clic sur Lopxpsetup.exe pour lancer l'installation Au menu, choisir l'option 1 Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! Une rapport sera alors crée, à copie/colle en entier sur le forum. ______________ Fais un clic droit sur ce lien : (IL-MAFIOSO) http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. Ensuite double clique sur navilog1.exe pour lancer l'installation. Une fois l'installation terminée, le fix s'exécutera automatiquement. (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). Laisse-toi guider. Au menu principal, choisis 1 et valides. (ne fais pas le choix 2,3 ou 4 sans notre avis/accord) Patiente jusqu'au message : *** Analyse Termine le ..... *** Appuie sur une touche comme demandé, le blocnote va s'ouvrir. Copie-colle l'intégralité dans une réponse. Referme le blocnote. Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Blackbeard78 · Answer

j'ai posté le rapport lopxp mais il n'apparrait pas.
cela fait plus de 30 minutes que Navilog fait son scan.Est-ce normal?

jlpjlp · Answer

recolle un scan lop xp 

et attends pour navilog encore

Blackbeard78 · Answer

je viens de le recoller, j'ai eu la fenêtre de confirmation du message et message toujours invisible.
Je vais essayer de le poster en plusieurs morceaux.
# Rapport Lopxp fait le 16/05/2008 à 17:42:40
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008

  Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\iexplore.exe" (2192)
"C:\Program Files\Internet Explorer\iexplore.exe" (2600)

========== Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

 2008-04-25 à 15:52:26 - Adobe 
 2005-05-31 à 10:21:30 - AOL 
 2008-01-06 à 12:41:19 - Apple 
 2008-01-06 à 12:43:52 - Apple Computer
 2006-07-10 à 21:47:22 - Bibforupname 
 2005-09-25 à 08:11:28 - Bluebeam Software
 2007-09-03 à 17:48:22 - Downloaded Installations
 2008-01-18 à 23:25:23 - DVD Shrink
 2007-02-19 à 15:24:49 - ESTsoft 
 2008-04-29 à 18:10:54 - Frag great bend logo
 2005-09-21 à 16:43:46 - FreeTest 
 2008-01-25 à 12:05:04 - Google 
 2007-03-18 à 17:45:38 - GRETECH 
 2007-01-06 à 16:32:13 - HP 
 2004-01-01 à 23:55:39 - InterVideo 
 2006-04-12 à 16:45:28 - logo rdr setup sixth
 2005-03-29 à 12:54:19 - Macrovision 
 2007-02-15 à 12:32:02 - Messenger Plus!
 2007-09-02 à 22:03:22 - Microsoft 
 2004-01-02 à 00:13:38 - Motive 
 2006-12-24 à 12:35:11 - Nero 
 2007-09-03 à 18:04:30 - PC Suite
 2004-01-02 à 00:03:50 - QuickTime 
 2004-01-01 à 21:56:55 - SBSI 
 2007-11-22 à 16:13:24 - Skype 
 2006-02-04 à 16:50:13 - Sony Corporation
 2007-11-03 à 20:43:45 - Sony Ericsson
 2006-04-08 à 09:37:40 - Spybot - Search & Destroy
 2006-02-12 à 00:22:14 - Symantec 
 2007-05-04 à 23:24:52 - TEMP 
 2008-04-13 à 08:19:13 - TVU Networks
 2005-01-23 à 19:43:44 - UDL 
 2005-01-23 à 19:29:02 - Viewpoint 
 2006-12-08 à 10:06:16 - Windows Genuine Advantage
 2006-11-12 à 14:09:46 - Windows Live Toolbar
 2007-12-17 à 21:39:41 - WLInstaller 

+- C:\Documents and Settings\Compaq_Propri‚taire\Application Data

 2008-04-25 à 15:52:26 - Adobe 
 2008-05-06 à 23:10:21 - AdobeUM 
 2006-04-29 à 09:23:27 - Ahead 
 2005-05-31 à 10:21:16 - AOL 
 2008-01-12 à 13:26:50 - Apple Computer
 2008-02-25 à 10:48:06 - Datalayer 
 2008-05-16 à 14:32:00 - DMCache 
 2007-02-19 à 15:24:49 - ESTsoft 
 2008-05-16 à 14:09:02 - FileZilla 
 2006-09-16 à 23:49:24 - Google 
 2007-03-18 à 17:44:37 - GRETECH 
 2005-01-29 à 21:40:44 - Help 
 2007-01-22 à 11:40:09 - HP 
 2004-01-01 à 21:51:54 - Identities 
 2008-04-29 à 13:15:52 - IDM 
 2008-04-18 à 16:50:24 - Image Zone Express
 2006-02-11 à 23:41:35 - Intervideo 
 2005-03-11 à 15:51:19 - Leadertech 
 2007-08-05 à 14:39:10 - Macromedia 
 2005-04-25 à 21:30:23 - Media Player Classic
 2007-09-12 à 21:31:17 - Microsoft 
 2005-02-27 à 15:37:31 - Microsoft Web Folders
 2005-04-02 à 09:41:52 - Motive 
 2005-05-14 à 14:47:50 - Mozilla 
 2005-04-03 à 11:14:47 - MSNInstaller 
 2007-09-03 à 19:00:01 - Nokia 
 2007-09-03 à 18:33:34 - Nokia Multimedia Player
 2008-02-26 à 10:24:23 - OpenOffice.org2 
 2007-09-03 à 18:04:33 - PC Suite
 2006-10-06 à 22:05:07 - PPLive 
 2006-10-25 à 18:59:27 - PPMate 
 2008-01-15 à 11:13:29 - ppStream 
 2007-10-31 à 11:36:16 - Printer Info Cache
 2008-04-19 à 08:52:03 - Real 
 2004-01-02 à 00:38:38 - SampleView 
 2007-06-02 à 13:31:22 - Screenshot Sender
 2008-05-16 à 15:34:17 - Skype 
 2008-05-16 à 14:07:00 - skypePM 
 2005-04-01 à 19:08:27 - SolidWorks 
 2007-04-23 à 16:08:05 - SolidWorksExplorer 
 2005-03-11 à 15:51:38 - Sonic 
 2006-02-19 à 15:25:37 - Sony Corporation
 2008-01-01 à 14:54:30 - SopCast 
 2005-04-28 à 16:25:06 - Steganos 
 2006-09-21 à 12:12:13 - STOIK 
 2008-04-29 à 18:11:59 - Storelogokay 
 2004-01-01 à 23:08:38 - Sun 
 2004-01-01 à 20:38:47 - Symantec 
 2005-09-25 à 20:07:19 - Talkback 
 2005-01-25 à 21:40:33 - Template 
 2007-10-27 à 15:00:14 - TVU networks
 2008-05-11 à 11:41:34 - U3 
 2007-02-18 à 19:57:49 - UseNeXT 
 2008-05-13 à 20:14:48 - uTorrent 
 2007-09-19 à 16:16:16 - vlc 
 2006-10-12 à 11:10:17 - XTND_BTUIObjects 
 2005-01-23 à 19:29:08 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Application Data

 2005-04-04 à 15:02:45 - Adobe 
 2006-04-29 à 09:14:30 - Ahead 
 2008-01-06 à 12:42:29 - Apple 
 2008-01-06 à 12:40:19 - Apple Computer
 2007-11-28 à 12:09:54 - ApplicationHistory 
 2006-10-21 à 17:40:46 - Baidu 
 2008-04-25 à 15:52:29 - Downloaded Installations
 2008-01-25 à 09:14:07 - Google 
 2005-01-25 à 21:14:00 - Help 
 2005-03-18 à 23:04:12 - Identities 
 2006-02-04 à 17:06:54 - kinoma 
 2008-04-27 à 20:48:04 - Microsoft 
 2006-07-15 à 21:21:10 - Mozilla 
 2007-06-19 à 14:05:32 - Multi_Media_France 
 2006-03-10 à 18:41:14 - Pando 
 2006-07-24 à 13:50:09 - PCHealth 
 2008-05-12 à 15:41:48 - QuickPar 
 2007-09-15 à 09:56:30 - Steam 
 2008-04-13 à 08:19:13 - TVU Networks
 2005-06-14 à 10:15:54 - WMTools Downloaded Files
 2006-07-11 à 11:19:53 - {3248F0A6-6813-11D6-A77B-00B0D0150060} 
 2006-07-12 à 10:56:30 - {3248F0A6-6813-11D6-A77B-00B0D0150070} 
 2006-02-11 à 23:44:15 - {7148F0A6-6813-11D6-A77B-00B0D0142030} 

+- C:\Documents and Settings\Compaq_Propriétaire\Application Data

 2006-07-15 à 21:03:55 - Mozilla 

========== Listing du dossier Program Files

+- C:\Program Files

 2006-03-03 à 20:10:55 - AC3Filter 
 2006-07-15 à 15:14:31 - ActiveX Control Pad
 2007-10-27 à 17:47:33 - Adobe 
 2008-05-13 à 18:06:19 - adslTV 
 2006-02-12 à 11:32:46 - Ahead 
 2005-08-14 à 13:50:34 - Alwil Software
 2006-01-14 à 00:39:07 - AnalogX 
 2007-03-21 à 17:00:49 - Apache Software Foundation
 2008-05-05 à 11:20:14 - Apple Software Update
 2007-09-03 à 19:05:46 - Audacity 
 2007-01-06 à 18:38:32 - AVIcodec 
 2007-04-05 à 21:28:33 - AviSynth 2.5
 2006-10-21 à 10:20:56 - baidu 
 2007-12-28 à 19:33:28 - Bdz Explorer
 2006-12-08 à 19:30:30 - BitSpirit 
 2005-09-25 à 08:11:29 - Bluebeam Software
 2007-02-19 à 15:23:09 - Bobdown 
 2008-02-02 à 12:11:15 - Bonjour 
 2006-02-26 à 01:29:01 - Cacheman 
 2007-02-19 à 15:29:29 - CachemanXP 
 2008-04-25 à 15:53:13 - Canal 
 2006-01-18 à 15:00:46 - Canon 
 2007-12-30 à 21:31:21 - CDisplay 
 2008-04-21 à 10:34:53 - Circle Developement
 2006-09-24 à 13:25:25 - CNNIC 
 2007-06-08 à 16:22:31 - Common Files
 2004-01-01 à 21:49:29 - ComPlus Applications
 2007-09-03 à 17:55:50 - DIFX 
 2007-12-13 à 18:16:09 - DivX 
 2008-01-18 à 23:01:39 - DVD Shrink
 2007-01-14 à 16:15:01 - Easy Internet signup
 2005-10-17 à 22:06:49 - EasyAudioEdit 
 2007-03-21 à 17:47:19 - EasyBox 
 2008-05-11 à 10:20:57 - eMule 
 2007-01-06 à 18:19:59 - EPSON 
 2007-02-19 à 15:24:48 - ESTsoft 
 2006-10-10 à 10:36:11 - Extended Systems
 2007-03-20 à 17:56:28 - ffdshow 
 2008-04-25 à 15:51:54 - Fichiers communs
 2006-06-23 à 15:17:28 - FileZilla 
 2008-05-12 à 13:34:03 - FileZilla FTP Client
 2006-06-23 à 15:17:50 - FlashFXP 
 2008-04-28 à 09:31:34 - FlashGet 
 2007-02-21 à 15:35:38 - FpTest 
 2008-03-21 à 08:37:32 - Free 
 2005-04-02 à 18:32:52 - Free.fr 
 2007-02-21 à 16:59:41 - FreeGo 
 2008-05-16 à 15:44:06 - Freenet 
 2008-04-03 à 15:46:39 - Freeplayer 
 2007-05-06 à 00:04:38 - FreeUndelete 
 2005-04-10 à 20:08:18 - Gabest 
 2006-10-05 à 13:34:26 - GAOV 
 2006-09-15 à 22:03:50 - Giganology 
 2007-02-19 à 15:25:40 - GNU 
 2008-01-26 à 08:15:24 - Google 
 2007-02-06 à 17:01:30 - GordianKnot 
 2007-09-18 à 20:58:29 - GrabIt 
 2007-03-18 à 17:44:15 - GRETECH 
 2004-01-02 à 00:13:38 - Help and Support Additions
 2007-01-06 à 16:22:49 - Hewlett-Packard 
 2007-11-13 à 17:58:48 - Hide IP Platinum
 2007-06-07 à 11:44:03 - Home Jukebox
 2008-02-09 à 20:46:38 - HomePlayer1.5.4 
 2007-01-06 à 16:31:33 - HP 
 2005-07-27 à 13:31:22 - Illustrate 
 2006-05-20 à 12:22:17 - InfinaDyne 
 2008-01-25 à 12:13:57 - InstallShield Installation Information
 2008-04-18 à 23:16:12 - Internet Download Manager
 2008-04-10 à 09:23:07 - Internet Explorer
 2004-01-01 à 23:55:28 - InterVideo 
 2008-04-07 à 11:29:50 - iPod 
 2008-04-07 à 11:30:05 - iTunes 
 2006-10-11 à 11:22:22 - IVT Corporation
 2008-03-23 à 09:46:52 - Java 
 2006-07-11 à 11:04:04 - JavaSoft 
 2007-05-13 à 09:26:33 - K-Lite Codec Pack
 2005-08-15 à 09:41:12 - Kerio 
 2006-04-03 à 08:42:38 - Konvertor 
 2006-09-24 à 13:25:37 - KooWo 
 2005-01-23 à 19:29:08 - Learn2.com 
 2008-05-16 à 15:42:53 - Lopxp 
 2008-01-25 à 12:17:47 - MaxSoftware 
 2008-01-25 à 12:17:47 - MaxTV 
 2007-02-04 à 15:15:14 - MaxTV Online
 2006-02-02 à 16:58:17 - Media Player Classic
 2006-10-09 à 12:06:50 - Messenger 
 2008-04-08 à 10:44:58 - Messenger Plus! Live
 2005-03-31 à 08:34:26 - Micro Application
 2004-01-01 à 21:51:56 - microsoft frontpage
 2006-11-08 à 17:59:13 - Microsoft Office
 2007-12-09 à 18:53:29 - Microsoft SQL Server Compact Edition
 2006-03-01 à 13:34:08 - Microsoft Works
 2006-11-08 à 17:58:03 - Microsoft.NET 
 2006-02-12 à 11:08:58 - Mirage-Team Encoder Pack
 2008-05-16 à 14:41:35 - mIRC 
 2006-03-03 à 20:11:02 - Morgan 
 2004-01-01 à 21:49:45 - Movie Maker
 2008-05-16 à 14:33:15 - Mozilla Firefox
 2008-01-25 à 12:00:34 - MSN 
 2004-01-01 à 21:48:48 - MSN Gaming Zone
 2007-12-17 à 16:32:19 - MSN Messenger
 2006-11-13 à 00:07:17 - MSXML 4.0
 2008-04-25 à 15:50:41 - MSXML 6.0
 2007-10-26 à 19:27:33 - MultiMedia France Toolbar
 2007-05-28 à 20:47:29 - Multi_Media_France 
 2007-02-21 à 15:46:10 - MyFreeTV 
 2006-12-24 à 12:35:11 - Nero 
 2006-08-12 à 12:53:58 - NetMeeting 
 2007-09-03 à 17:54:32 - Nokia 
 2007-07-17 à 09:39:12 - Nowcom 
 2004-01-01 à 21:48:54 - Online Services
 2006-10-03 à 08:11:20 - Ontrack 
 2006-10-23 à 16:51:45 - OpenOffice.org 2.0
 2007-06-14 à 00:09:52 - Outlook Express
 2007-02-19 à 21:56:13 - Pando Networks
 2005-08-31 à 20:20:48 - PC Camera
 2007-09-03 à 17:55:25 - PC Connectivity Solution
 2007-05-06 à 00:20:17 - PC Inspector File Recovery
 2006-04-06 à 16:53:28 - PeerGuardian pr14
 2006-07-11 à 22:31:14 - PhotoFiltre 
 2007-02-21 à 09:01:37 - PPLive 
 2006-08-08 à 12:00:51 - PPLive TV
 2007-10-27 à 15:24:51 - PPMate 
 2008-04-01 à 13:27:55 - ppStream 
 2007-04-05 à 21:05:10 - pspvideo9 
 2005-10-01 à 16:49:14 - QO Labs
 2007-04-13 à 19:24:32 - QuickPar 
 2008-04-07 à 11:26:57 - QuickTime 
 2005-05-28 à 18:40:33 - Real 
 2008-02-22 à 19:24:19 - Samsung 
 2006-12-26 à 11:20:19 - Satsuki Decoder Pack
 2005-07-25 à 16:17:03 - Secure Surfing Engine
 2004-01-02 à 00:20:59 - Services en ligne
 2005-03-04 à 17:37:06 - Sierra On-Line
 2004-01-01 à 19:33:53 - SiS VGA Utilities V3.59e
 2007-11-22 à 16:13:27 - Skype 
 2006-05-20 à 14:13:08 - Smart Projects
 2006-11-30 à 21:50:33 - SolidWorks 
 2004-01-01 à 23:53:39 - Sonic 
 2004-01-01 à 23:53:41 - Sonic RecordNow!
 2007-11-03 à 20:43:35 - Sony Ericsson
 2008-04-13 à 08:14:53 - SopCast 
 2006-09-15 à 15:56:25 - Spybot - Search & Destroy
 2008-04-21 à 11:17:21 - Sqirlz Morph
 2008-05-16 à 14:29:43 - Steam 
 2005-07-25 à 16:17:03 - Steganos Internet Anonym Pro 7
 2005-07-25 à 10:17:19 - Steganos Safe 8
 2008-04-29 à 18:08:16 - Storelogokay 
 2007-06-02 à 09:24:05 - Sunbelt Software
 2007-11-16 à 15:17:16 - The KMPlayer FR
 2007-10-17 à 09:10:13 - TI Education
 2007-09-17 à 08:28:37 - TomTom HOME
 2007-02-19 à 20:09:12 - TooX 
 2008-04-19 à 15:22:39 - TVAnts 
 2007-10-27 à 15:04:57 - TVU Player
 2008-04-13 à 08:19:09 - TVUPlayer 
 2004-01-01 à 21:54:47 - Uninstall Information
 2006-05-27 à 14:15:14 - URUSoft 
 2008-03-04 à 13:26:16 - uTorrent 
 2005-05-11 à 21:21:38 - VideoLAN 
 2005-01-23 à 19:29:02 - Viewpoint 
 2007-09-15 à 12:35:32 - VTTV 
 2006-10-22 à 19:08:27 - WIDCOMM 
 2008-04-06 à 11:49:42 - Winamp 
 2007-02-21 à 08:59:07 - Winamp Desk Band
 2006-11-24 à 17:14:40 - WinAVIVideoConverter 
 2006-01-14 à 01:17:41 - Windows Journal Viewer
 2008-02-28 à 10:11:27 - Windows Live
 2007-12-01 à 02:01:46 - Windows Live Favorites
 2008-05-08 à 13:17:05 - Windows Live Safety Center
 2007-12-01 à 02:02:21 - Windows Live Toolbar
 2006-12-08 à 09:55:08 - Windows Media Connect 2
 2006-12-08 à 10:01:08 - Windows Media Player
 2006-11-08 à 17:58:02 - Windows Messaging
 2006-02-12 à 07:20:04 - Windows NT
 2004-01-01 à 21:50:05 - WindowsUpdate 
 2007-02-21 à 15:29:31 - WinPcap 
 2007-07-13 à 18:33:00 - WinRAR 
 2006-11-02 à 20:09:12 - WinRoute Lite
 2004-01-01 à 21:51:56 - xerox 
 2006-03-03 à 20:10:46 - XviD 
 2005-05-28 à 18:38:24 - _ArcadeDownloadFolder 

========== Tâches planifiées

9EC2D31090714634.job: c:\docume~1\compaq~1\applic~1\storel~1\Bone Rect Site.exe 
AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
Vérifier les mises à jour de Windows Live Toolbar.job: C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 

========== Clés registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bend logo clock film"="C:\Documents and Settings\All Users\Application Data\Frag great bend logo\bolt sign.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLAY HOLE"="C:\DOCUME~1\COMPAQ~1\APPLIC~1\STOREL~1emote fast.exe"


========== Bloqueur popups Internet Explorer

 searchweb2.com
 www.searchweb2.com
 www.vente-privee.com
 host-domain-lookup.com
 www.host-domain-lookup.com
 mysearchnow.com
 www.mysearchnow.com

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\All Users\Application Data\Bibforupname
C:\Documents and Settings\All Users\Application Data\Frag great bend logo
C:\Documents and Settings\All Users\Application Data\FreeTest
C:\Documents and Settings\Compaq_Propriétaire\Application Data\Storelogokay
C:\Program Files\Circle Developement
C:\Program Files\Storelogokay
C:\WINDOWS	asks\9EC2D31090714634.job
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Multi_Media_France
C:\Program Files\MultiMedia France Toolbar
C:\Program Files\Multi_Media_France

+- Registre:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bend logo clock film"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLAY HOLE"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
"searchweb2.com"=-
"www.searchweb2.com"=-
"host-domain-lookup.com"=-
"www.host-domain-lookup.com"=-
"mysearchnow.com"=-
"www.mysearchnow.com"=-



- Fin du rapport -

jlpjlp · Answer

va dans : Démarrer > Exécuter puis copie/colle la ligne suivante  :

"%programfiles%\Lopxp\Lopxp.bat" /Fixme


puis valide, accepte toutes les demandes de suppression et poste le rapport stp

_______________

colle navilog 

si impossible:

télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le bureau. 



déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Blackbeard78 · Answer

voila le rapport lopxp:
# Rapport Lopxp fait le 16/05/2008 à 19:46:48
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008


========== FixLog ==========


+- C:\Documents and Settings\All Users\Application Data\Bibforupname
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\All Users\Application Data\Frag great bend logo
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\All Users\Application Data\FreeTest
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Storelogokay
Choix utilisateur : Suppression acceptée.
/!\ Opération annulée, le fichier ou dossier selectionné n'exite pas.

+- C:\Program Files\Circle Developement
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Program Files\Storelogokay
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\WINDOWS	asks\9EC2D31090714634.job
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

Supprimé: C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Multi_Media_France
Supprimé: C:\Program Files\MultiMedia France Toolbar
/!\ C:\Program Files\Multi_Media_France 

+- Registre :
Nettoyage effectué.

+- Fichiers temporaires :
Nettoyage effectué.


========== Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

 2008-04-25 à 15:52:26 - Adobe 
 2005-05-31 à 10:21:30 - AOL 
 2008-01-06 à 12:41:19 - Apple 
 2008-01-06 à 12:43:52 - Apple Computer
 2005-09-25 à 08:11:28 - Bluebeam Software
 2007-09-03 à 17:48:22 - Downloaded Installations
 2008-01-18 à 23:25:23 - DVD Shrink
 2007-02-19 à 15:24:49 - ESTsoft 
 2008-01-25 à 12:05:04 - Google 
 2007-03-18 à 17:45:38 - GRETECH 
 2007-01-06 à 16:32:13 - HP 
 2004-01-01 à 23:55:39 - InterVideo 
 2006-04-12 à 16:45:28 - logo rdr setup sixth
 2005-03-29 à 12:54:19 - Macrovision 
 2007-02-15 à 12:32:02 - Messenger Plus!
 2007-09-02 à 22:03:22 - Microsoft 
 2004-01-02 à 00:13:38 - Motive 
 2006-12-24 à 12:35:11 - Nero 
 2007-09-03 à 18:04:30 - PC Suite
 2004-01-02 à 00:03:50 - QuickTime 
 2004-01-01 à 21:56:55 - SBSI 
 2007-11-22 à 16:13:24 - Skype 
 2006-02-04 à 16:50:13 - Sony Corporation
 2007-11-03 à 20:43:45 - Sony Ericsson
 2006-04-08 à 09:37:40 - Spybot - Search & Destroy
 2006-02-12 à 00:22:14 - Symantec 
 2007-05-04 à 23:24:52 - TEMP 
 2008-04-13 à 08:19:13 - TVU Networks
 2005-01-23 à 19:43:44 - UDL 
 2005-01-23 à 19:29:02 - Viewpoint 
 2006-12-08 à 10:06:16 - Windows Genuine Advantage
 2006-11-12 à 14:09:46 - Windows Live Toolbar
 2007-12-17 à 21:39:41 - WLInstaller 

+- C:\Documents and Settings\Compaq_Propri‚taire\Application Data

 2008-04-25 à 15:52:26 - Adobe 
 2008-05-06 à 23:10:21 - AdobeUM 
 2006-04-29 à 09:23:27 - Ahead 
 2005-05-31 à 10:21:16 - AOL 
 2008-01-12 à 13:26:50 - Apple Computer
 2008-02-25 à 10:48:06 - Datalayer 
 2008-05-16 à 14:32:00 - DMCache 
 2007-02-19 à 15:24:49 - ESTsoft 
 2008-05-16 à 16:23:39 - FileZilla 
 2006-09-16 à 23:49:24 - Google 
 2007-03-18 à 17:44:37 - GRETECH 
 2005-01-29 à 21:40:44 - Help 
 2007-01-22 à 11:40:09 - HP 
 2004-01-01 à 21:51:54 - Identities 
 2008-04-29 à 13:15:52 - IDM 
 2008-04-18 à 16:50:24 - Image Zone Express
 2006-02-11 à 23:41:35 - Intervideo 
 2005-03-11 à 15:51:19 - Leadertech 
 2007-08-05 à 14:39:10 - Macromedia 
 2005-04-25 à 21:30:23 - Media Player Classic
 2007-09-12 à 21:31:17 - Microsoft 
 2005-02-27 à 15:37:31 - Microsoft Web Folders
 2005-04-02 à 09:41:52 - Motive 
 2005-05-14 à 14:47:50 - Mozilla 
 2005-04-03 à 11:14:47 - MSNInstaller 
 2007-09-03 à 19:00:01 - Nokia 
 2007-09-03 à 18:33:34 - Nokia Multimedia Player
 2008-02-26 à 10:24:23 - OpenOffice.org2 
 2007-09-03 à 18:04:33 - PC Suite
 2006-10-06 à 22:05:07 - PPLive 
 2006-10-25 à 18:59:27 - PPMate 
 2008-01-15 à 11:13:29 - ppStream 
 2007-10-31 à 11:36:16 - Printer Info Cache
 2008-04-19 à 08:52:03 - Real 
 2004-01-02 à 00:38:38 - SampleView 
 2007-06-02 à 13:31:22 - Screenshot Sender
 2008-05-16 à 17:50:53 - Skype 
 2008-05-16 à 14:07:00 - skypePM 
 2005-04-01 à 19:08:27 - SolidWorks 
 2007-04-23 à 16:08:05 - SolidWorksExplorer 
 2005-03-11 à 15:51:38 - Sonic 
 2006-02-19 à 15:25:37 - Sony Corporation
 2008-01-01 à 14:54:30 - SopCast 
 2005-04-28 à 16:25:06 - Steganos 
 2006-09-21 à 12:12:13 - STOIK 
 2008-04-29 à 18:11:59 - Storelogokay 
 2004-01-01 à 23:08:38 - Sun 
 2004-01-01 à 20:38:47 - Symantec 
 2005-09-25 à 20:07:19 - Talkback 
 2005-01-25 à 21:40:33 - Template 
 2007-10-27 à 15:00:14 - TVU networks
 2008-05-11 à 11:41:34 - U3 
 2007-02-18 à 19:57:49 - UseNeXT 
 2008-05-13 à 20:14:48 - uTorrent 
 2007-09-19 à 16:16:16 - vlc 
 2006-10-12 à 11:10:17 - XTND_BTUIObjects 
 2005-01-23 à 19:29:08 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Application Data

 2005-04-04 à 15:02:45 - Adobe 
 2006-04-29 à 09:14:30 - Ahead 
 2008-01-06 à 12:42:29 - Apple 
 2008-01-06 à 12:40:19 - Apple Computer
 2007-11-28 à 12:09:54 - ApplicationHistory 
 2006-10-21 à 17:40:46 - Baidu 
 2008-04-25 à 15:52:29 - Downloaded Installations
 2008-01-25 à 09:14:07 - Google 
 2005-01-25 à 21:14:00 - Help 
 2005-03-18 à 23:04:12 - Identities 
 2006-02-04 à 17:06:54 - kinoma 
 2008-04-27 à 20:48:04 - Microsoft 
 2006-07-15 à 21:21:10 - Mozilla 
 2007-06-19 à 14:05:32 - Multi_Media_France 
 2006-03-10 à 18:41:14 - Pando 
 2006-07-24 à 13:50:09 - PCHealth 
 2008-05-12 à 15:41:48 - QuickPar 
 2007-09-15 à 09:56:30 - Steam 
 2008-04-13 à 08:19:13 - TVU Networks
 2005-06-14 à 10:15:54 - WMTools Downloaded Files
 2006-07-11 à 11:19:53 - {3248F0A6-6813-11D6-A77B-00B0D0150060} 
 2006-07-12 à 10:56:30 - {3248F0A6-6813-11D6-A77B-00B0D0150070} 
 2006-02-11 à 23:44:15 - {7148F0A6-6813-11D6-A77B-00B0D0142030} 

+- C:\Documents and Settings\Compaq_Propriétaire\Application Data

 2006-07-15 à 21:03:55 - Mozilla 

========== Listing du dossier Program Files

+- C:\Program Files

 2006-03-03 à 20:10:55 - AC3Filter 
 2006-07-15 à 15:14:31 - ActiveX Control Pad
 2007-10-27 à 17:47:33 - Adobe 
 2008-05-13 à 18:06:19 - adslTV 
 2006-02-12 à 11:32:46 - Ahead 
 2005-08-14 à 13:50:34 - Alwil Software
 2006-01-14 à 00:39:07 - AnalogX 
 2007-03-21 à 17:00:49 - Apache Software Foundation
 2008-05-05 à 11:20:14 - Apple Software Update
 2007-09-03 à 19:05:46 - Audacity 
 2007-01-06 à 18:38:32 - AVIcodec 
 2007-04-05 à 21:28:33 - AviSynth 2.5
 2006-10-21 à 10:20:56 - baidu 
 2007-12-28 à 19:33:28 - Bdz Explorer
 2006-12-08 à 19:30:30 - BitSpirit 
 2005-09-25 à 08:11:29 - Bluebeam Software
 2007-02-19 à 15:23:09 - Bobdown 
 2008-02-02 à 12:11:15 - Bonjour 
 2006-02-26 à 01:29:01 - Cacheman 
 2007-02-19 à 15:29:29 - CachemanXP 
 2008-04-25 à 15:53:13 - Canal 
 2006-01-18 à 15:00:46 - Canon 
 2007-12-30 à 21:31:21 - CDisplay 
 2006-09-24 à 13:25:25 - CNNIC 
 2007-06-08 à 16:22:31 - Common Files
 2004-01-01 à 21:49:29 - ComPlus Applications
 2007-09-03 à 17:55:50 - DIFX 
 2007-12-13 à 18:16:09 - DivX 
 2008-01-18 à 23:01:39 - DVD Shrink
 2007-01-14 à 16:15:01 - Easy Internet signup
 2005-10-17 à 22:06:49 - EasyAudioEdit 
 2007-03-21 à 17:47:19 - EasyBox 
 2008-05-11 à 10:20:57 - eMule 
 2007-01-06 à 18:19:59 - EPSON 
 2007-02-19 à 15:24:48 - ESTsoft 
 2006-10-10 à 10:36:11 - Extended Systems
 2007-03-20 à 17:56:28 - ffdshow 
 2008-04-25 à 15:51:54 - Fichiers communs
 2006-06-23 à 15:17:28 - FileZilla 
 2008-05-12 à 13:34:03 - FileZilla FTP Client
 2006-06-23 à 15:17:50 - FlashFXP 
 2008-04-28 à 09:31:34 - FlashGet 
 2007-02-21 à 15:35:38 - FpTest 
 2008-03-21 à 08:37:32 - Free 
 2005-04-02 à 18:32:52 - Free.fr 
 2007-02-21 à 16:59:41 - FreeGo 
 2008-05-16 à 17:54:44 - Freenet 
 2008-04-03 à 15:46:39 - Freeplayer 
 2007-05-06 à 00:04:38 - FreeUndelete 
 2005-04-10 à 20:08:18 - Gabest 
 2006-10-05 à 13:34:26 - GAOV 
 2006-09-15 à 22:03:50 - Giganology 
 2007-02-19 à 15:25:40 - GNU 
 2008-01-26 à 08:15:24 - Google 
 2007-02-06 à 17:01:30 - GordianKnot 
 2007-09-18 à 20:58:29 - GrabIt 
 2007-03-18 à 17:44:15 - GRETECH 
 2004-01-02 à 00:13:38 - Help and Support Additions
 2007-01-06 à 16:22:49 - Hewlett-Packard 
 2007-11-13 à 17:58:48 - Hide IP Platinum
 2007-06-07 à 11:44:03 - Home Jukebox
 2008-02-09 à 20:46:38 - HomePlayer1.5.4 
 2007-01-06 à 16:31:33 - HP 
 2005-07-27 à 13:31:22 - Illustrate 
 2006-05-20 à 12:22:17 - InfinaDyne 
 2008-01-25 à 12:13:57 - InstallShield Installation Information
 2008-04-18 à 23:16:12 - Internet Download Manager
 2008-04-10 à 09:23:07 - Internet Explorer
 2004-01-01 à 23:55:28 - InterVideo 
 2008-04-07 à 11:29:50 - iPod 
 2008-04-07 à 11:30:05 - iTunes 
 2006-10-11 à 11:22:22 - IVT Corporation
 2008-03-23 à 09:46:52 - Java 
 2006-07-11 à 11:04:04 - JavaSoft 
 2007-05-13 à 09:26:33 - K-Lite Codec Pack
 2005-08-15 à 09:41:12 - Kerio 
 2006-04-03 à 08:42:38 - Konvertor 
 2006-09-24 à 13:25:37 - KooWo 
 2005-01-23 à 19:29:08 - Learn2.com 
 2008-05-16 à 17:54:32 - Lopxp 
 2008-01-25 à 12:17:47 - MaxSoftware 
 2008-01-25 à 12:17:47 - MaxTV 
 2007-02-04 à 15:15:14 - MaxTV Online
 2006-02-02 à 16:58:17 - Media Player Classic
 2006-10-09 à 12:06:50 - Messenger 
 2008-04-08 à 10:44:58 - Messenger Plus! Live
 2005-03-31 à 08:34:26 - Micro Application
 2004-01-01 à 21:51:56 - microsoft frontpage
 2006-11-08 à 17:59:13 - Microsoft Office
 2007-12-09 à 18:53:29 - Microsoft SQL Server Compact Edition
 2006-03-01 à 13:34:08 - Microsoft Works
 2006-11-08 à 17:58:03 - Microsoft.NET 
 2006-02-12 à 11:08:58 - Mirage-Team Encoder Pack
 2008-05-16 à 14:41:35 - mIRC 
 2006-03-03 à 20:11:02 - Morgan 
 2004-01-01 à 21:49:45 - Movie Maker
 2008-05-16 à 16:03:29 - Mozilla Firefox
 2008-01-25 à 12:00:34 - MSN 
 2004-01-01 à 21:48:48 - MSN Gaming Zone
 2007-12-17 à 16:32:19 - MSN Messenger
 2006-11-13 à 00:07:17 - MSXML 4.0
 2008-04-25 à 15:50:41 - MSXML 6.0
 2008-05-16 à 17:49:02 - Multi_Media_France 
 2007-02-21 à 15:46:10 - MyFreeTV 
 2008-05-16 à 16:06:25 - Navilog1 
 2006-12-24 à 12:35:11 - Nero 
 2006-08-12 à 12:53:58 - NetMeeting 
 2007-09-03 à 17:54:32 - Nokia 
 2007-07-17 à 09:39:12 - Nowcom 
 2004-01-01 à 21:48:54 - Online Services
 2006-10-03 à 08:11:20 - Ontrack 
 2006-10-23 à 16:51:45 - OpenOffice.org 2.0
 2007-06-14 à 00:09:52 - Outlook Express
 2007-02-19 à 21:56:13 - Pando Networks
 2005-08-31 à 20:20:48 - PC Camera
 2007-09-03 à 17:55:25 - PC Connectivity Solution
 2007-05-06 à 00:20:17 - PC Inspector File Recovery
 2006-04-06 à 16:53:28 - PeerGuardian pr14
 2006-07-11 à 22:31:14 - PhotoFiltre 
 2007-02-21 à 09:01:37 - PPLive 
 2006-08-08 à 12:00:51 - PPLive TV
 2007-10-27 à 15:24:51 - PPMate 
 2008-04-01 à 13:27:55 - ppStream 
 2007-04-05 à 21:05:10 - pspvideo9 
 2005-10-01 à 16:49:14 - QO Labs
 2007-04-13 à 19:24:32 - QuickPar 
 2008-04-07 à 11:26:57 - QuickTime 
 2005-05-28 à 18:40:33 - Real 
 2008-02-22 à 19:24:19 - Samsung 
 2006-12-26 à 11:20:19 - Satsuki Decoder Pack
 2005-07-25 à 16:17:03 - Secure Surfing Engine
 2004-01-02 à 00:20:59 - Services en ligne
 2005-03-04 à 17:37:06 - Sierra On-Line
 2004-01-01 à 19:33:53 - SiS VGA Utilities V3.59e
 2007-11-22 à 16:13:27 - Skype 
 2006-05-20 à 14:13:08 - Smart Projects
 2006-11-30 à 21:50:33 - SolidWorks 
 2004-01-01 à 23:53:39 - Sonic 
 2004-01-01 à 23:53:41 - Sonic RecordNow!
 2007-11-03 à 20:43:35 - Sony Ericsson
 2008-04-13 à 08:14:53 - SopCast 
 2006-09-15 à 15:56:25 - Spybot - Search & Destroy
 2008-04-21 à 11:17:21 - Sqirlz Morph
 2008-05-16 à 14:29:43 - Steam 
 2005-07-25 à 16:17:03 - Steganos Internet Anonym Pro 7
 2005-07-25 à 10:17:19 - Steganos Safe 8
 2007-06-02 à 09:24:05 - Sunbelt Software
 2007-11-16 à 15:17:16 - The KMPlayer FR
 2007-10-17 à 09:10:13 - TI Education
 2007-09-17 à 08:28:37 - TomTom HOME
 2007-02-19 à 20:09:12 - TooX 
 2008-04-19 à 15:22:39 - TVAnts 
 2007-10-27 à 15:04:57 - TVU Player
 2008-04-13 à 08:19:09 - TVUPlayer 
 2004-01-01 à 21:54:47 - Uninstall Information
 2006-05-27 à 14:15:14 - URUSoft 
 2008-03-04 à 13:26:16 - uTorrent 
 2005-05-11 à 21:21:38 - VideoLAN 
 2005-01-23 à 19:29:02 - Viewpoint 
 2007-09-15 à 12:35:32 - VTTV 
 2006-10-22 à 19:08:27 - WIDCOMM 
 2008-04-06 à 11:49:42 - Winamp 
 2007-02-21 à 08:59:07 - Winamp Desk Band
 2006-11-24 à 17:14:40 - WinAVIVideoConverter 
 2006-01-14 à 01:17:41 - Windows Journal Viewer
 2008-02-28 à 10:11:27 - Windows Live
 2007-12-01 à 02:01:46 - Windows Live Favorites
 2008-05-08 à 13:17:05 - Windows Live Safety Center
 2007-12-01 à 02:02:21 - Windows Live Toolbar
 2006-12-08 à 09:55:08 - Windows Media Connect 2
 2006-12-08 à 10:01:08 - Windows Media Player
 2006-11-08 à 17:58:02 - Windows Messaging
 2006-02-12 à 07:20:04 - Windows NT
 2004-01-01 à 21:50:05 - WindowsUpdate 
 2007-02-21 à 15:29:31 - WinPcap 
 2007-07-13 à 18:33:00 - WinRAR 
 2006-11-02 à 20:09:12 - WinRoute Lite
 2004-01-01 à 21:51:56 - xerox 
 2006-03-03 à 20:10:46 - XviD 
 2005-05-28 à 18:38:24 - _ArcadeDownloadFolder 

========== Tâches planifiées

AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
Vérifier les mises à jour de Windows Live Toolbar.job: C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE 

========== Clés registre


========== Bloqueur popups Internet Explorer

 www.vente-privee.com

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\Compaq_Propriétaire\Application Data\Storelogokay
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Multi_Media_France
C:\Program Files\Multi_Media_France

+- Registre : Aucune suggestion.


- Fin du rapport -

jlpjlp · Answer

colle navilog

si impossible:

télécharge combofix (par sUBs) ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et enregistre le sur le bureau.



déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)


double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Blackbeard78 · Answer

j'ai éteins navilog avant qu'il ne finisee.Voila le fichier Combofix.txt: ComboFix 08-05-15.3 - Compaq_Propriétaire 2008-05-16 20:43:43.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.473 [GMT 2:00] Endroit: C:\Documents and Settings\Compaq_Propriétaire\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\baidu C:\Documents and Settings\Compaq_Propriétaire ew.txt C:\Program Files\baidu C:\Program Files\cnnic C:\Program Files\cnnic\Cdn\cdnacs.dat C:\Program Files\cnnic\Cdn\cdnbl.dat C:\Program Files\cnnic\Cdn\cdncol.dll C:\Program Files\cnnic\Cdn\cdndet.dat C:\Program Files\cnnic\Cdn\cdndisp.dat C:\Program Files\cnnic\Cdn\cdnforie.dll C:\Program Files\cnnic\Cdn\cdnhint.dat C:\Program Files\cnnic\Cdn\cdnprev.dat C:\Program Files\cnnic\Cdn\cdnprh.dll C:\Program Files\cnnic\Cdn\cdnrepl.dat C:\Program Files\cnnic\Cdn\cdnrereg.dat C:\Program Files\cnnic\Cdn\cdnswp.exe C:\Program Files\cnnic\Cdn\cdntran.dat C:\Program Files\cnnic\Cdn\cdnuc.exe C:\Program Files\cnnic\Cdn\cdnunins.exe C:\Program Files\cnnic\Cdn\cdnvers.dat C:\Program Files\cnnic\Cdn\imadom.dat C:\Program Files\cnnic\Cdn\Images\enter.ico C:\Program Files\cnnic\Cdn\Images ews.ico C:\Program Files\cnnic\Cdn\Images\popup.bmp C:\Program Files\cnnic\Cdn\Images\soft.ico C:\Program Files\cnnic\Cdn btnhtm.cab C:\Program Files\cnnic\Cdn\spkw.dat C:\Program Files\cnnic\Cdn\src.dat C:\Program Files\cnnic\Cdn\Update\cdnacs.dat C:\Program Files\cnnic\Cdn\Update\cdnbl.dat C:\Program Files\cnnic\Cdn\Update\cdncol.dll C:\Program Files\cnnic\Cdn\Update\cdncrc.dat C:\Program Files\cnnic\Cdn\Update\cdndet.dat C:\Program Files\cnnic\Cdn\Update\cdndisp.dat C:\Program Files\cnnic\Cdn\Update\cdnforie.dll C:\Program Files\cnnic\Cdn\Update\cdnhint.dat C:\Program Files\cnnic\Cdn\Update\cdnprev.dat C:\Program Files\cnnic\Cdn\Update\cdnprh.dll C:\Program Files\cnnic\Cdn\Update\cdnprot.dat C:\Program Files\cnnic\Cdn\Update\cdnswp.exe C:\Program Files\cnnic\Cdn\Update\cdntran.dat C:\Program Files\cnnic\Cdn\Update\cdnuc.exe C:\Program Files\cnnic\Cdn\Update\cdnunins.exe C:\Program Files\cnnic\Cdn\Update\cdnvers.dat C:\Program Files\cnnic\Cdn\Update\enter.ico C:\Program Files\cnnic\Cdn\Update\imadom.dat C:\Program Files\cnnic\Cdn\Update ews.ico C:\Program Files\cnnic\Cdn\Update\popup.bmp C:\Program Files\cnnic\Cdn\Update btnhtm.cab C:\Program Files\cnnic\Cdn\Update\soft.ico C:\Program Files\cnnic\Cdn\Update\spkw.dat C:\Program Files\koowo C:\Program Files\koowo\Lyric\conf.ini C:\Program Files\koowo\Lyric\config\gbk-big5.txt C:\Program Files\koowo\Lyric\config\RealMiniConfig.ini C:\Program Files\koowo\Lyric\config\SongLrc.txt C:\Program Files\koowo\Lyric\config\StringConfig.ini C:\Program Files\koowo\Lyric\config\StringConfigBig5.ini C:\Program Files\koowo\Lyric\config ag.dat C:\Program Files\koowo\Lyric\config aginfo.dat C:\Program Files\koowo\Lyric\config\WinampMainConfig.ini C:\Program Files\koowo\Lyric\config\WinampMainConfigModern.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfig.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfigModern.ini C:\Program Files\koowo\Lyric\config\WMPMiniConfig.ini C:\Program Files\koowo\Lyric\dotag.exe C:\Program Files\koowo\Lyric\dump.ax C:\Program Files\koowo\Lyric\face\hand-close.cur C:\Program Files\koowo\Lyric\face\hand-open.cur C:\Program Files\koowo\Lyric\face\kwc.img C:\Program Files\koowo\Lyric\face eal\bk.bmp C:\Program Files\koowo\Lyric\face eal\close-hover.bmp C:\Program Files\koowo\Lyric\face eal\close-normal.bmp C:\Program Files\koowo\Lyric\face eal\close-pressed.bmp C:\Program Files\koowo\Lyric\face eal\full-hover.bmp C:\Program Files\koowo\Lyric\face eal\full-normal.bmp C:\Program Files\koowo\Lyric\face eal\full-pressed.bmp C:\Program Files\koowo\Lyric\face eal\mini-hover.bmp C:\Program Files\koowo\Lyric\face eal\mini-normal.bmp C:\Program Files\koowo\Lyric\face eal\mini-pressed.bmp C:\Program Files\koowo\Lyric\face eal\pause-hover.bmp C:\Program Files\koowo\Lyric\face eal\pause-normal.bmp C:\Program Files\koowo\Lyric\face eal\pause-pressed.bmp C:\Program Files\koowo\Lyric\face eal\play-hover-y.bmp C:\Program Files\koowo\Lyric\face eal\play-hover.bmp C:\Program Files\koowo\Lyric\face eal\play-normal-y.bmp C:\Program Files\koowo\Lyric\face eal\play-normal.bmp C:\Program Files\koowo\Lyric\face eal\play-pressed.bmp C:\Program Files\koowo\Lyric\face eal\stop-disable.bmp C:\Program Files\koowo\Lyric\face eal\stop-hover.bmp C:\Program Files\koowo\Lyric\face eal\stop-normal.bmp C:\Program Files\koowo\Lyric\face eal\stop-pressed.bmp C:\Program Files\koowo\Lyric\face eal\Thumbs.db C:\Program Files\koowo\Lyric\face\svr.img C:\Program Files\koowo\Lyric\face\winamp\classic\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\classic\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\classic\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ext-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ext-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic esize.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\classic op-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\modern\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\modern\last-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern esize.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\switch.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\modern op-middle.bmp C:\Program Files\koowo\Lyric\face\wmp\bk.bmp C:\Program Files\koowo\Lyric\face\wmp\bk2.bmp C:\Program Files\koowo\Lyric\face\wmp\close.bmp C:\Program Files\koowo\Lyric\face\wmp\full-screen.bmp C:\Program Files\koowo\Lyric\face\wmp\last-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\last-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\last-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\last-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\mini.bmp C:\Program Files\koowo\Lyric\face\wmp ext-disable.bmp C:\Program Files\koowo\Lyric\face\wmp ext-hover.bmp C:\Program Files\koowo\Lyric\face\wmp ext-normal.bmp C:\Program Files\koowo\Lyric\face\wmp ext-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\play-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\play-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\play-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\switch.bmp C:\Program Files\koowo\Lyric\fp.tmp C:\Program Files\koowo\Lyric\gen_WMP.dll C:\Program Files\koowo\Lyric\KWLyric_wmp.dll C:\Program Files\koowo\Lyric\log\act.log C:\Program Files\koowo\Lyric\lyric\Justin Timberlake - SexyBack.lrc C:\Program Files\koowo\Lyric\lyric eadme.txt C:\Program Files\koowo\Lyric ecoEngine.exe C:\Program Files\koowo\Lyric\RMSplt.ax C:\Program Files\koowo\Lyric\update\KUpdate.exe C:\Program Files\koowo\Lyric\update ewup_silent.zip C:\Program Files\koowo\Lyric\update\Update.dll C:\WINDOWS\photos.zip C:\WINDOWS\system32\cdnprot.dat C:\WINDOWS\system32\lylk.dat C:\WINDOWS\system32\plugin.ini C:\WINDOWS\system32\webflag.ocx C:\WINDOWS\system32\winmmt32.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BDGUARD -------\Service_cdnprot -------\Service_poof ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-16 to 2008-05-16 )))))))))))))))))))))))))))))))))))) . 2008-05-16 17:59 . 2008-05-16 18:06 d-------- C:\Program Files\Navilog1 2008-05-16 17:38 . 2008-05-16 19:54 d-------- C:\Program Files\Lopxp 2008-05-16 16:46 . 2008-05-16 16:46 11,599,512 --a------ C:\upload_moi_NOM-47D5A5B94AD.tar.gz 2008-05-16 03:59 . 2008-05-16 03:59 17,920 --a------ C:\WINDOWS\system32\drvhig.dll 2008-05-12 15:33 . 2008-05-12 15:34 d-------- C:\Program Files\FileZilla FTP Client 2008-05-05 13:20 . 2008-05-05 13:20 d-------- C:\Program Files\Apple Software Update 2008-04-25 17:53 . 2008-04-25 17:53 d-------- C:\Program Files\Canal 2008-04-25 17:51 . 2008-04-25 17:51 d-------- C:\Program Files\Fichiers communs\Adobe AIR 2008-04-25 17:50 . 2008-04-25 17:50 d-------- C:\Program Files\MSXML 6.0 2008-04-19 01:15 . 2008-04-19 01:16 d-------- C:\Program Files\Internet Download Manager . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-16 19:05 --------- d-----w C:\Program Files\Freenet 2008-05-16 19:04 --------- d-----w C:\Program Files\Steam 2008-05-16 18:33 --------- d-----w C:\Program Files\mIRC 2008-05-16 17:49 --------- d-----w C:\Program Files\Multi_Media_France 2008-05-13 18:06 --------- d-----w C:\Program Files\adslTV 2008-05-11 10:20 --------- d-----w C:\Program Files\eMule 2008-05-08 13:17 --------- d-----w C:\Program Files\Windows Live Safety Center 2008-04-28 09:31 --------- d-----w C:\Program Files\FlashGet 2008-04-21 11:17 --------- d-----w C:\Program Files\Sqirlz Morph 2008-04-19 15:22 --------- d-----w C:\Program Files\TVAnts 2008-04-15 16:40 51,051 ----a-w C:\WINDOWS\system32\drivers\fwdrv.err 2008-04-13 08:19 --------- d-----w C:\Program Files\TVUPlayer 2008-04-13 08:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\TVU Networks 2008-04-13 08:14 --------- d-----w C:\Program Files\SopCast 2008-04-08 10:44 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-04-07 11:30 --------- d-----w C:\Program Files\iTunes 2008-04-07 11:29 --------- d-----w C:\Program Files\iPod 2008-04-07 11:26 --------- d-----w C:\Program Files\QuickTime 2008-04-06 11:49 --------- d-----w C:\Program Files\Winamp 2008-04-03 15:46 --------- d-----w C:\Program Files\Freeplayer 2008-04-01 13:27 --------- d-----w C:\Program Files\ppStream 2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll 2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll 2008-03-23 09:46 --------- d-----w C:\Program Files\Java 2008-03-21 08:37 --------- d-----w C:\Program Files\Free 2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys 2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll 2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll 2007-11-22 16:16 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-03-01 14:52 25,766,528 ----a-w C:\Program Files\freeBrowser_0.9_2007-01-15.zip 2007-02-19 20:09 54 ----a-w C:\Program Files\delir.gio 2006-11-08 20:41 1,280 ----a-w C:\Program Files\SolidWorksswxJRNL.BAK 2005-05-28 18:40 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2004-06-18 09:05 45,056 ----a-w C:\WINDOWS\inf\Slntinst.exe 2003-08-22 09:09 45,056 ----a-w C:\WINDOWS\inf\slntinst_staticW2k.exe 1998-08-24 10:09 10,000 ----a-w C:\WINDOWS\inf\unregpn.exe 2007-06-17 10:14 2,735,104 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll 2005-08-15 20:25 0 --sha-w C:\WINDOWS\SMINST\HPCD.sys 2006-03-03 20:10 56 --sh--r C:\WINDOWS\system32\AA66E3A345.sys 2006-03-03 20:10 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="c:\program files\steam\steam.exe" [2008-03-28 11:08 1271032] "Unilex2k"="" [] "Acme.PCHButton"="C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe" [2004-01-02 02:12 159744] "AntiSpyware7"="C:\Program Files\Steganos AntiSpyware 7\aspy7.exe" [ ] "Cacheman"="C:\PROGRA~1\Cacheman\Cacheman.exe" [2003-07-31 15:13 1290752] "NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-07-14 22:35 1961984] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 20:04 139264] "Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe" [ ] "Hide IP Platinum"="C:\Program Files\Hide IP Platinum\hideippla.exe" [2006-06-05 16:25 1470464] "SFS6"="C:\Program Files\Steganos Secure FileSharing 6\sfs.exe" [ ] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 12:00 15360] "Pando"="C:\Program Files\Pando Networks\Pando\Pando.exe" [2007-02-08 13:19 3511888] "LanceurEasyBox"="C:\Program Files\EasyBox\EasyBox.exe" [ ] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 18:22 21898024] "IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [2008-04-19 01:17 2594224] "updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45 313472] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 17:04 52736] "KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 17:44 61440] "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 21:43 233472] "VTTimer"="VTTimer.exe" [2004-03-26 22:07 49152 C:\WINDOWS\system32\VTTimer.exe] "SiS Windows KeyHook"="C:\WINDOWS\system32\keyhook.exe" [2004-05-20 10:47 249856] "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 88363 C:\WINDOWS\AGRSMMSG.exe] "PS2"="C:\WINDOWS\system32\ps2.exe" [2003-09-12 21:13 98304] "AlcxMonitor"="ALCXMNTR.EXE" [2003-04-04 03:21 50176 C:\WINDOWS\ALCXMNTR.EXE] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648] "WooCnxMon"="C:\PROGRA~1\Wanadoo\CnxMon.exe" [ ] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [ ] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" [ ] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-05 12:00 110592 C:\WINDOWS\system32\bthprops.cpl] "DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [ ] "F-Secure TNB"="C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" [ ] "SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [ ] "F-Secure Manager"="C:\Program Files\F-Secure Internet Security\Common\FSM32.exe" [ ] "EasyMod"="C:\Program Files\EasyBox\EasyMod.exe" [ ] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2005-03-22 09:39 167936] "DataLayer"="C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-03-31 09:30 1106944] "BTUSRBDG"="BtUsrBdg.exe" [2003-11-05 22:21 53248 C:\WINDOWS\system32\BtUsrBdg.exe] "BTSETBOOTKEY"="BTSetBootKey.exe" [2003-04-15 10:48 36864 C:\WINDOWS\system32\BTSetBootKey.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784] "PSPVideo9"="C:\Program Files\pspvideo9\pspVideo9.exe" [2005-10-30 02:56 606208] "FreeBrowser"="C:\Program Files\freeBrowser_0.9_2007-01-15\FreeBrowser\freebrowser.exe" [ ] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 03:41 49152] "Rapget"="C:\Documents and Settings\Compaq_Propriétaire\Bureau\Rapget apget.exe" [ ] "tsnp2std"="C:\WINDOWS snp2std.exe" [2006-05-22 10:37 262144] "snp2std"="C:\WINDOWS\vsnp2std.exe" [2006-05-15 15:52 675840] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [ ] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" [2008-04-23 10:28 185896] "Canal Widget"="C:\Program Files\Canal\Canal Widget\Launcher.exe" [2008-03-05 21:20 94720] "MSDisp32"="C:\WINDOWS\system32\drvhig.dll" [2008-05-16 03:59 17920] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "AllowLegacyWebView"= 1 (0x1) "AllowUnhashedWebView"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.HFYU"= huffyuv.dll "VIDC.YV12"= yv12vfw.dll "vidc.DIV3"= DivXc32.dll "vidc.DIV4"= DivXc32f.dll "msacm.divxa32"= msaud32_divx.acm "MSACM.MSNAUDIO"= msnaudio.acm [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "C:\Program Files\ppStream\PPStream.exe"= "C:\Program Files\PPMate\PPMate\ppmate.exe"= "C:\Program Files\TVUPlayer\TVUPlayer.exe"= "C:\Program Files\Pando Networks\Pando\pando.exe"= "C:\Program Files\uTorrent\utorrent.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"= "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"= "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"= "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"= "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"= "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"= "C:\Program Files\PPLive\PPLive.exe"= "C:\Program Files\Nowcom\afreeca\Uninstall.exe"= "C:\Program Files\PPMate\ppmate.exe"= "C:\Program Files\PPMate\ppmnet.exe"= "C:\Program Files\PPMate\ppamnet.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Bonjour\mDNSResponder.exe"= "C:\Program Files\iTunes\iTunes.exe"= "C:\WINDOWS\system32\winver.exe"= "C:\Program Files\Skype\Phone\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "5840:TCP"= 5840:TCP:ppLive "6451:UDP"= 6451:UDP:ppLive "17861:TCP"= 17861:TCP:NortonAV "18520:TCP"= 18520:TCP:NortonAV "13350:TCP"= 13350:TCP:NortonAV "13431:TCP"= 13431:TCP:NortonAV "18801:TCP"= 18801:TCP:NortonAV "14417:TCP"= 14417:TCP:NortonAV "12666:TCP"= 12666:TCP:NortonAV "18296:TCP"= 18296:TCP:NortonAV "16580:TCP"= 16580:TCP:NortonAV "18174:TCP"= 18174:TCP:NortonAV "13471:TCP"= 13471:TCP:NortonAV "17911:TCP"= 17911:TCP:NortonAV "14919:TCP"= 14919:TCP:NortonAV "12912:TCP"= 12912:TCP:NortonAV "12935:TCP"= 12935:TCP:NortonAV "12607:TCP"= 12607:TCP:NortonAV "15137:TCP"= 15137:TCP:NortonAV "14424:TCP"= 14424:TCP:NortonAV "16630:TCP"= 16630:TCP:NortonAV "16693:TCP"= 16693:TCP:NortonAV "12984:TCP"= 12984:TCP:NortonAV "12029:TCP"= 12029:TCP:NortonAV "16613:TCP"= 16613:TCP:NortonAV "12282:TCP"= 12282:TCP:NortonAV "15611:TCP"= 15611:TCP:NortonAV "15165:TCP"= 15165:TCP:NortonAV "13042:TCP"= 13042:TCP:NortonAV "18454:TCP"= 18454:TCP:NortonAV "18578:TCP"= 18578:TCP:NortonAV "13656:TCP"= 13656:TCP:NortonAV R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-12 18:36] R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 10:21] R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 10:21] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-12 18:38] R2 freenet-darknet-8888;Freenet 0.7 darknet-8888;"C:\Program Files\Freenet\bin\wrapper-windows-x86-32.exe" -s "C:\Program Files\Freenet\wrapper.conf" [] R3 BTCOMM;BTCOMM;C:\WINDOWS\system32\drivers\Btcomm.sys [2004-09-28 16:19] R3 BTKRNBDG;Bluetooth COM Bridge;C:\WINDOWS\system32\DRIVERS\btkrnbdg.sys [2003-03-18 11:31] R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-06-07 10:34] R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 23:58] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08] R3 vad_multi;Windigo Virtual Audio Device (WDM);C:\WINDOWS\system32\drivers\vadmulti.sys [2005-04-13 17:02] S2 CanalPlus.VOD;CanalPlus.VOD;"C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe" [2008-04-11 19:24] S2 EasyModApache;EasyModApache;"C:\Program Files\EasyBox\apache\apache.exe" -k runservice [] S2 SPF4;Sunbelt Personal Firewall 4;"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe" [2007-04-26 10:21] S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 14:23] S3 NPF;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers pf.sys [2006-05-09 17:50] S3 ss_bus;Samsung Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-01-24 16:38] S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-01-24 16:38] S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-01-24 16:38] S3 VoIPvoiceCyberSeriesCamera;VoIPvoice Cyber Series Camera (C7);C:\WINDOWS\system32\DRIVERS\snpstd3.sys [] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] mysee2 REG_MULTI_SZ Mysee2_Runtime [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6ace301b-1a66-11dc-8ef0-0007cb0000ff}] \Shell\Auto\command - ysfxfszho.exe \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL ysfxfszho.exe . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-05-14 15:20:10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-05-16 18:33:05 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

jlpjlp · Answer

Colle le rapport : et desinfecte avec:

Clean permettra de faire du nettoyage et supprimer des fichiers que des anti-virus et anti-spywares n'ont pas pu trouver. Le logiciel est régulièrement mis à jour, vous devrez donc le re-téléchargé pour obtenir une version plus récente.

&#61623;  Téléchargez clean.zip, décompressez-le sur votre bureau (clic droit / extraire tout), vous obtenez alors un dossier clean 
&#61623;  Démarrez Windows en mode sans échec : Guide pour redémarrer en mode sans échec 
&#61623;  Ouvrez le dossier clean qui se trouve sur ton bureau, et double-cliquez sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laissez la ouverte jusqu'à ce qu'elle se ferme.
Manuel de clean :
http://kerio.probb.fr/tuto-Clean-h37.html
https://kerio.probb.fr/

________________



scan avec 
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 

___________________
recolle un rapport hijakchtis et dis tes souci actuels

Blackbeard78 · Answer

Désolé d'avoir mis autant de temps pour répondre.J'ai fait le scan avec clean une première fois j'ai redémarré mon pc en mode sans échec pour les supprimés les fichiers infectés mais mon pc n'arrivait pas à aller en mode sans échec. J'ai donc fait une réinstallation du système. VoiScript execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 17/05/2008 a 11:32:55,09 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
tentative de suppression de C:\autorun.inf 
Impossible de supprimer C:\autorun.inf  
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
 
*** Suppression des fichiers dans C:\Program Files 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 
là le rapport clean que j'obtiens (N.B.: j'ai fait deux fois l'opération avec clean):

jlpjlp · Answer

1/ # Télécharge RavAntivirus d'Evosla : http://ww25.evosla.com/compteur.php?soft=rav_antivirus # Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX # Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau # Doucle-clique sur >> RAV.exe << afin de lancer l'outil. # Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles) # Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain . # Retire tes disques amovibles et redémarrez votre ordinateur. # Poste le rapport, si infection! 2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe Double-clique sur l’icône. Les icônes vont disparaître. C’est normal. Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite Redémarre ensuite le PC. _______________ scan avec MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ ___________________ recolle un rapport hijakchtis et dis tes souci actuels

Blackbeard78 · Answer

Voilà le nouveau rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:01, on 18/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\FixCamera.exe
C:\WINDOWS	snp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\hijackthis\eden.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\yayyYQiG.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C9F11894-EA6C-40B5-8F42-18F285521030} - C:\WINDOWS\system32\jkkLETJy.dll (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [9c7b2ce3] rundll32.exe "C:\WINDOWS\system32\ihxdqtgx.dll",b
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS	snp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32eg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: MsnFixer.lnk = ?
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: yayyYQiG - yayyYQiG.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: maconfservice - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

Blackbeard78 · Answer

et voilà le log de MalwareByte's Anti-Malware :
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 758

Type de recherche: Examen complet (C:\|D:\|H:\|)
Eléments examinés: 247066
Temps écoulé: 7 hour(s), 37 minute(s), 46 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 10
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\ihxdqtgx.dll (Trojan.Vundo) -> Unloaded module successfully.
C:\WINDOWS\system32\yayyYQiG.dll (Trojan.Vundo) -> Unloaded module successfully.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{6a6eae1b-4ad6-4035-974d-504d6dbaa9c3} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6a6eae1b-4ad6-4035-974d-504d6dbaa9c3} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\yayyyqig (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6a6eae1b-4ad6-4035-974d-504d6dbaa9c3} (Trojan.Vundo) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\ihxdqtgx.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\xgtqdxhi.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yayyYQiG.dll (Trojan.Vundo) -> Delete on reboot.
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\05ABC527\hctp[1] (Trojan.Vundo) -> Quarantined and deleted successfully.

jlpjlp · Answer

1/ # Télécharge RavAntivirus d'Evosla : http://ww25.evosla.com/compteur.php?soft=rav_antivirus # Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX # Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau # Doucle-clique sur >> RAV.exe << afin de lancer l'outil. # Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles) # Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain . # Retire tes disques amovibles et redémarrez votre ordinateur. # Poste le rapport, si infection! 2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe Double-clique sur l’icône. Les icônes vont disparaître. C’est normal. Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite Redémarre ensuite le PC. ________________ recolle un nouveau rapport combofix puis hijakchtis et dis tes soucis actuels a plus

Blackbeard78 · Answer

pour l'instant tout les problèmes ont disparu. rapport Combofix: ComboFix 08-05-15.3 - Compaq_Propriétaire 2008-05-18 12:56:27.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.541 [GMT 2:00] Endroit: C:\Documents and Settings\Compaq_Propriétaire\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\ihxdqtgx.dll C:\WINDOWS\system32\yJTELkkj.ini C:\WINDOWS\system32\yJTELkkj.ini2 . ---- Previous Run ------- . C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\baidu C:\Documents and Settings\Compaq_Propriétaire ew.txt C:\Program Files\baidu C:\Program Files\cnnic C:\Program Files\cnnic\Cdn\cdnacs.dat C:\Program Files\cnnic\Cdn\cdnbl.dat C:\Program Files\cnnic\Cdn\cdncol.dll C:\Program Files\cnnic\Cdn\cdndet.dat C:\Program Files\cnnic\Cdn\cdndisp.dat C:\Program Files\cnnic\Cdn\cdnforie.dll C:\Program Files\cnnic\Cdn\cdnhint.dat C:\Program Files\cnnic\Cdn\cdnprev.dat C:\Program Files\cnnic\Cdn\cdnprh.dll C:\Program Files\cnnic\Cdn\cdnrepl.dat C:\Program Files\cnnic\Cdn\cdnrereg.dat C:\Program Files\cnnic\Cdn\cdnswp.exe C:\Program Files\cnnic\Cdn\cdntran.dat C:\Program Files\cnnic\Cdn\cdnuc.exe C:\Program Files\cnnic\Cdn\cdnunins.exe C:\Program Files\cnnic\Cdn\cdnvers.dat C:\Program Files\cnnic\Cdn\imadom.dat C:\Program Files\cnnic\Cdn\Images\enter.ico C:\Program Files\cnnic\Cdn\Images ews.ico C:\Program Files\cnnic\Cdn\Images\popup.bmp C:\Program Files\cnnic\Cdn\Images\soft.ico C:\Program Files\cnnic\Cdn btnhtm.cab C:\Program Files\cnnic\Cdn\spkw.dat C:\Program Files\cnnic\Cdn\src.dat C:\Program Files\cnnic\Cdn\Update\cdnacs.dat C:\Program Files\cnnic\Cdn\Update\cdnbl.dat C:\Program Files\cnnic\Cdn\Update\cdncol.dll C:\Program Files\cnnic\Cdn\Update\cdncrc.dat C:\Program Files\cnnic\Cdn\Update\cdndet.dat C:\Program Files\cnnic\Cdn\Update\cdndisp.dat C:\Program Files\cnnic\Cdn\Update\cdnforie.dll C:\Program Files\cnnic\Cdn\Update\cdnhint.dat C:\Program Files\cnnic\Cdn\Update\cdnprev.dat C:\Program Files\cnnic\Cdn\Update\cdnprh.dll C:\Program Files\cnnic\Cdn\Update\cdnprot.dat C:\Program Files\cnnic\Cdn\Update\cdnswp.exe C:\Program Files\cnnic\Cdn\Update\cdntran.dat C:\Program Files\cnnic\Cdn\Update\cdnuc.exe C:\Program Files\cnnic\Cdn\Update\cdnunins.exe C:\Program Files\cnnic\Cdn\Update\cdnvers.dat C:\Program Files\cnnic\Cdn\Update\enter.ico C:\Program Files\cnnic\Cdn\Update\imadom.dat C:\Program Files\cnnic\Cdn\Update ews.ico C:\Program Files\cnnic\Cdn\Update\popup.bmp C:\Program Files\cnnic\Cdn\Update btnhtm.cab C:\Program Files\cnnic\Cdn\Update\soft.ico C:\Program Files\cnnic\Cdn\Update\spkw.dat C:\Program Files\koowo C:\Program Files\koowo\Lyric\conf.ini C:\Program Files\koowo\Lyric\config\gbk-big5.txt C:\Program Files\koowo\Lyric\config\RealMiniConfig.ini C:\Program Files\koowo\Lyric\config\SongLrc.txt C:\Program Files\koowo\Lyric\config\StringConfig.ini C:\Program Files\koowo\Lyric\config\StringConfigBig5.ini C:\Program Files\koowo\Lyric\config ag.dat C:\Program Files\koowo\Lyric\config aginfo.dat C:\Program Files\koowo\Lyric\config\WinampMainConfig.ini C:\Program Files\koowo\Lyric\config\WinampMainConfigModern.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfig.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfigModern.ini C:\Program Files\koowo\Lyric\config\WMPMiniConfig.ini C:\Program Files\koowo\Lyric\dotag.exe C:\Program Files\koowo\Lyric\dump.ax C:\Program Files\koowo\Lyric\face\hand-close.cur C:\Program Files\koowo\Lyric\face\hand-open.cur C:\Program Files\koowo\Lyric\face\kwc.img C:\Program Files\koowo\Lyric\face eal\bk.bmp C:\Program Files\koowo\Lyric\face eal\close-hover.bmp C:\Program Files\koowo\Lyric\face eal\close-normal.bmp C:\Program Files\koowo\Lyric\face eal\close-pressed.bmp C:\Program Files\koowo\Lyric\face eal\full-hover.bmp C:\Program Files\koowo\Lyric\face eal\full-normal.bmp C:\Program Files\koowo\Lyric\face eal\full-pressed.bmp C:\Program Files\koowo\Lyric\face eal\mini-hover.bmp C:\Program Files\koowo\Lyric\face eal\mini-normal.bmp C:\Program Files\koowo\Lyric\face eal\mini-pressed.bmp C:\Program Files\koowo\Lyric\face eal\pause-hover.bmp C:\Program Files\koowo\Lyric\face eal\pause-normal.bmp C:\Program Files\koowo\Lyric\face eal\pause-pressed.bmp C:\Program Files\koowo\Lyric\face eal\play-hover-y.bmp C:\Program Files\koowo\Lyric\face eal\play-hover.bmp C:\Program Files\koowo\Lyric\face eal\play-normal-y.bmp C:\Program Files\koowo\Lyric\face eal\play-normal.bmp C:\Program Files\koowo\Lyric\face eal\play-pressed.bmp C:\Program Files\koowo\Lyric\face eal\stop-disable.bmp C:\Program Files\koowo\Lyric\face eal\stop-hover.bmp C:\Program Files\koowo\Lyric\face eal\stop-normal.bmp C:\Program Files\koowo\Lyric\face eal\stop-pressed.bmp C:\Program Files\koowo\Lyric\face eal\Thumbs.db C:\Program Files\koowo\Lyric\face\svr.img C:\Program Files\koowo\Lyric\face\winamp\classic\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\classic\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\classic\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ext-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ext-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic esize.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic ight-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\classic op-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\modern\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\modern\last-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ext-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern esize.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern ight-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\switch.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\modern op-middle.bmp C:\Program Files\koowo\Lyric\face\wmp\bk.bmp C:\Program Files\koowo\Lyric\face\wmp\bk2.bmp C:\Program Files\koowo\Lyric\face\wmp\close.bmp C:\Program Files\koowo\Lyric\face\wmp\full-screen.bmp C:\Program Files\koowo\Lyric\face\wmp\last-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\last-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\last-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\last-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\mini.bmp C:\Program Files\koowo\Lyric\face\wmp ext-disable.bmp C:\Program Files\koowo\Lyric\face\wmp ext-hover.bmp C:\Program Files\koowo\Lyric\face\wmp ext-normal.bmp C:\Program Files\koowo\Lyric\face\wmp ext-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\play-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\play-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\play-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\switch.bmp C:\Program Files\koowo\Lyric\fp.tmp C:\Program Files\koowo\Lyric\gen_WMP.dll C:\Program Files\koowo\Lyric\KWLyric_wmp.dll C:\Program Files\koowo\Lyric\log\act.log C:\Program Files\koowo\Lyric\lyric\Justin Timberlake - SexyBack.lrc C:\Program Files\koowo\Lyric\lyric eadme.txt C:\Program Files\koowo\Lyric ecoEngine.exe C:\Program Files\koowo\Lyric\RMSplt.ax C:\Program Files\koowo\Lyric\update\KUpdate.exe C:\Program Files\koowo\Lyric\update ewup_silent.zip C:\Program Files\koowo\Lyric\update\Update.dll C:\WINDOWS\photos.zip C:\WINDOWS\system32\cdnprot.dat C:\WINDOWS\system32\lylk.dat C:\WINDOWS\system32\plugin.ini C:\WINDOWS\system32\webflag.ocx C:\WINDOWS\system32\winmmt32.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BDGUARD -------\Service_cdnprot -------\Service_poof ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-18 to 2008-05-18 )))))))))))))))))))))))))))))))))))) . 2008-05-18 12:54 . 2008-05-18 12:54 268 --ah----- C:\sqmdata02.sqm 2008-05-18 12:54 . 2008-05-18 12:54 244 --ah----- C:\sqmnoopt02.sqm 2008-05-18 12:14 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-05-18 12:14 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-05-18 12:14 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-05-18 12:14 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-05-18 12:14 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-05-18 12:14 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-05-18 12:14 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-05-18 12:14 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-05-18 12:14 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-05-18 12:13 . 2008-05-18 12:15 d-------- C:\WINDOWS\system32\fr-fr 2008-05-18 02:32 . 2008-05-18 02:32 268 --ah----- C:\sqmdata01.sqm 2008-05-18 02:32 . 2008-05-18 02:32 244 --ah----- C:\sqmnoopt01.sqm 2008-05-18 02:17 . 2008-05-18 02:17 268 --ah----- C:\sqmdata00.sqm 2008-05-18 02:17 . 2008-05-18 02:17 244 --ah----- C:\sqmnoopt00.sqm 2008-05-18 00:44 . 2008-05-18 00:44 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-05-17 21:42 . 2007-02-28 18:02 2,182,400 -----c--- C:\WINDOWS\system32\dllcache toskrnl.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,138,112 -----c--- C:\WINDOWS\system32\dllcache tkrnlmp.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,059,648 -----c--- C:\WINDOWS\system32\dllcache tkrnlpa.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,017,792 -----c--- C:\WINDOWS\system32\dllcache tkrpamp.exe 2008-05-17 18:10 . 2008-05-18 02:12 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-05-17 18:10 . 2008-05-17 18:10 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-05-17 18:10 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-05-17 18:10 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-05-17 12:49 . 2008-05-17 12:49 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat 2008-05-17 12:13 . 2006-10-04 16:06 1,197,294 --a--c--- C:\WINDOWS\system32\dllcache\SET1BF.tmp 2008-05-17 12:04 . 2008-05-17 12:04 d-------- C:\WINDOWS\system32\LogFiles 2008-05-17 12:04 . 2008-05-17 12:06 d-------- C:\WINDOWS\system32\drivers\UMDF 2008-05-17 12:00 . 2006-05-05 11:41 453,120 -----c--- C:\WINDOWS\system32\dllcache\mrxsmb.sys 2008-05-17 11:02 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-05-17 10:54 . 2008-05-17 10:54 d-------- C:\Documents and Settings\Administrateur.NOM-47D5A5B94AD 2008-05-17 08:45 . 2004-06-02 10:54 7,406 --a------ C:\WINDOWS\system32\doc.ico 2008-05-17 08:35 . 2008-05-18 13:09 dr-hsc--- C:\WINDOWS\system32\dllcache 2008-05-17 08:35 . 2008-05-17 08:42 dr------- C:\WINDOWS\system32\config\systemprofile\Menu D‚marrer 2008-05-17 01:29 . 2004-08-03 23:10 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-05-17 01:29 . 2004-08-03 23:10 85,376 --a--c--- C:\WINDOWS\system32\dllcache abtsfec.sys 2008-05-17 01:29 . 2004-08-03 23:10 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2008-05-17 01:29 . 2004-08-03 23:10 17,024 --a--c--- C:\WINDOWS\system32\dllcache\ccdecode.sys 2008-05-17 01:28 . 2004-08-04 00:55 91,648 --a------ C:\WINDOWS\system32\kswdmcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 91,648 --a--c--- C:\WINDOWS\system32\dllcache\kswdmcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax 2008-05-17 01:28 . 2004-08-04 00:55 61,952 --a--c--- C:\WINDOWS\system32\dllcache\kstvtune.ax 2008-05-17 01:28 . 2004-08-04 00:54 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-05-17 01:28 . 2004-08-04 00:54 54,784 --a--c--- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2008-05-17 01:28 . 2004-08-04 00:55 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2008-05-17 01:28 . 2004-08-04 00:55 43,008 --a--c--- C:\WINDOWS\system32\dllcache\ksxbar.ax 2008-05-17 01:28 . 2004-08-04 00:55 28,672 --a------ C:\WINDOWS\system32\vidcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 28,672 --a--c--- C:\WINDOWS\system32\dllcache\vidcap.ax 2008-05-17 01:20 . 2006-06-07 10:34 10,305,280 --a------ C:\WINDOWS\system32\drivers\snp2sxp.sys 2008-05-17 01:20 . 2005-11-23 13:55 53,248 --a------ C:\WINDOWS\system32\csnp2std.dll 2008-05-17 01:20 . 2006-04-27 20:43 24,832 --a------ C:\WINDOWS\system32\drivers\sncamd.sys 2008-05-17 01:20 . 2006-06-01 11:26 20,480 --a------ C:\WINDOWS\FixCamera.exe 2008-05-17 01:13 . 2006-08-01 15:02 49,152 --a------ C:\WINDOWS\system32\ChCfg.exe 2008-05-17 01:12 . 2008-05-17 01:12 d-------- C:\Program Files\Realtek AC97 2008-05-17 01:12 . 2006-12-08 15:20 10,528,768 --a------ C:\WINDOWS\system32\RTLCPL.exe 2008-05-17 01:12 . 2007-04-16 15:28 577,536 --a------ C:\WINDOWS\soundman.exe 2008-05-17 01:12 . 2006-07-31 11:19 315,392 --a------ C:\WINDOWS\alcupd.exe 2008-05-17 01:12 . 2006-07-31 11:27 217,088 --a------ C:\WINDOWS\Alcrmv.exe 2008-05-17 01:12 . 2006-10-18 02:53 147,456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll 2008-05-17 01:12 . 2002-02-05 13:54 141,016 --a------ C:\WINDOWS\system32\alsndmgr.wav 2008-05-17 01:06 . 2008-05-17 01:06 d-------- C:\Program Files\ma-config.com 2008-05-17 01:06 . 2008-05-17 01:07 d-------- C:\Documents and Settings\All Users\Application Data\ma-config.com 2008-05-17 00:58 . 2004-08-05 05:00 1,783,864 --a------ C:\WINDOWS\system32\WINPY.MB 2008-05-17 00:57 . 2004-08-05 05:00 189,986 --a--c--- C:\WINDOWS\system32\dllcache\c_1361.nls 2008-05-17 00:56 . 2004-08-05 05:00 811,064 --a------ C:\WINDOWS\system32\imjp81k.dll 2008-05-17 00:55 . 2004-08-03 23:15 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2008-05-17 00:54 . 2004-08-04 00:55 130,048 --a------ C:\WINDOWS\system32\ksproxy.ax 2008-05-17 00:54 . 2004-08-04 00:55 130,048 --a--c--- C:\WINDOWS\system32\dllcache\ksproxy.ax 2008-05-17 00:54 . 2004-08-03 23:10 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys 2008-05-17 00:54 . 2004-08-03 23:08 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2008-05-17 00:54 . 2004-08-03 23:08 60,288 --a--c--- C:\WINDOWS\system32\dllcache\drmk.sys 2008-05-17 00:54 . 2004-08-03 23:10 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys 2008-05-17 00:54 . 2001-08-17 21:46 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2008-05-17 00:54 . 2004-08-04 00:54 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2008-05-17 00:54 . 2004-08-04 00:54 4,096 --a--c--- C:\WINDOWS\system32\dllcache\ksuser.dll 2008-05-17 00:31 . 2008-05-17 00:31 d-------- C:\WINDOWS\WinRAR 2008-05-17 00:25 . 2006-04-13 03:04 49,664 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys 2008-05-17 00:25 . 2006-04-13 03:04 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys 2008-05-17 00:24 . 2006-04-13 03:04 282,624 -ra------ C:\WINDOWS\system32\HPZc3212.dll 2008-05-17 00:24 . 2006-01-04 11:12 77,824 -ra------ C:\WINDOWS\system32\HPZIDS01.dll 2008-05-17 00:24 . 2006-04-10 14:03 38,400 --a------ C:\WINDOWS\system32\hpz3l054.dll 2008-05-17 00:24 . 2006-04-13 03:04 21,568 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys 2008-05-17 00:23 . 2006-04-13 03:02 827,392 -ra------ C:\WINDOWS\system32\hpotiop2.dll 2008-05-17 00:23 . 2006-04-13 03:02 659,456 -ra------ C:\WINDOWS\system32\hpowiax2.dll 2008-05-17 00:23 . 2006-04-13 03:02 254,026 -ra------ C:\WINDOWS\system32\hpovst09.dll 2008-05-17 00:23 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2008-05-17 00:23 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2008-05-17 00:07 . 2004-08-05 12:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-05-17 00:07 . 2008-05-17 00:07 3,966 -rahs---- C:\WINDOWS\system32\drivers\HP_PP123AA-ABF SR1207FR FR440_YC_Pres_QCZB441_E44FRheREF2_4_IKelut_SASUSTek Computer INC._V2.02_B3.11_T040902_W2_L40C_M960_J80_7AMD_8Sempron 2800+_92_111063044_N11063065_P_Z11C1048C_K_A11063059_U11063038_G11067205.MRK 2008-05-17 00:06 . 2008-05-17 00:22 d-------- C:\Documents and Settings\Compaq_Propri‚taire 2008-05-17 00:04 . 2004-01-02 02:04 d-------- C:\WINDOWS\system32\config\systemprofile\WINDOWS 2008-05-17 00:04 . 2004-01-01 22:38 d-------- C:\WINDOWS\system32\config\systemprofile\Application Data\Symantec 2008-05-17 00:04 . 2004-01-02 02:38 d-------- C:\WINDOWS\system32\config\systemprofile\Application Data\SampleView 2008-05-17 00:04 . 2004-01-02 01:55 d-------- C:\WINDOWS\system32\config\systemprofile\Application Data\Intervideo 2008-05-17 00:04 . 2004-01-02 02:04 d-------- C:\WINDOWS\system32\config\systemprofile\Application Data\Apple Computer 2008-05-17 00:04 . 2003-09-10 23:36 21,060 --------- C:\WINDOWS\system32\drivers\iviaspi.sys 2008-05-17 00:04 . 2003-09-19 01:47 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys 2008-05-17 00:04 . 2008-05-17 00:04 1,024 --ah----- C:\Documents and Settings\COMPAQ~3\NTUSER.DAT.LOG 2008-05-17 00:01 . 2003-08-01 20:37 1,040 --a------ C:\WINDOWS\system32\drivers\alcxinit.dat 2008-05-16 22:17 . 2008-05-16 22:17 d-------- C:\Documents and Settings\Administrateur 2008-05-16 17:59 . 2008-05-16 21:43 d-------- C:\Program Files\Navilog1 2008-05-16 17:38 . 2008-05-16 19:54 d-------- C:\Program Files\Lopxp 2008-05-12 15:33 . 2008-05-12 15:34 d-------- C:\Program Files\FileZilla FTP Client 2008-05-05 13:20 . 2008-05-05 13:20 d-------- C:\Program Files\Apple Software Update 2008-04-25 17:53 . 2008-04-25 17:53 d-------- C:\Program Files\Canal 2008-04-25 17:51 . 2008-04-25 17:51 d-------- C:\Program Files\Fichiers communs\Adobe AIR 2008-04-25 17:50 . 2008-04-25 17:50 d-------- C:\Program Files\MSXML 6.0 2008-04-19 01:15 . 2008-04-19 01:16 d-------- C:\Program Files\Internet Download Manager . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-18 10:11 --------- d-----w C:\Program Files\adslTV 2008-05-18 00:17 --------- d-----w C:\Program Files\mIRC 2008-05-17 23:21 --------- d-----w C:\Program Files\Windows Live 2008-05-17 19:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-05-17 10:23 --------- d-----w C:\Program Files\Fichiers communs\Skype 2008-05-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-17 09:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-05-17 09:51 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2008-05-17 09:50 --------- d-----w C:\Program Files\Winamp 2008-05-17 09:48 --------- d-----w C:\Program Files\PPLive 2008-05-17 09:47 --------- d-----w C:\Program Files\Nowcom 2008-05-17 09:46 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-05-16 23:20 --------- d-----w C:\Program Files\Fichiers communs\snp2std 2008-05-16 23:03 --------- d-----w C:\Program Files\The KMPlayer FR 2008-05-16 22:20 --------- d-----w C:\Program Files\Easy Internet signup 2008-05-16 20:50 --------- d-----w C:\Program Files\Freenet 2008-05-16 20:43 --------- d-----w C:\Program Files\Steam 2008-05-11 10:20 --------- d-----w C:\Program Files\eMule 2008-05-08 13:17 --------- d-----w C:\Program Files\Windows Live Safety Center 2008-04-28 09:31 --------- d-----w C:\Program Files\FlashGet 2008-04-19 15:22 --------- d-----w C:\Program Files\TVAnts 2008-04-13 08:19 --------- d-----w C:\Program Files\TVUPlayer 2008-04-13 08:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\TVU Networks 2008-04-13 08:14 --------- d-----w C:\Program Files\SopCast 2008-04-08 10:44 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-04-01 13:27 --------- d-----w C:\Program Files\ppStream 2008-03-21 08:37 --------- d-----w C:\Program Files\Free 2007-11-22 16:16 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-03-01 14:52 25,766,528 ----a-w C:\Program Files\freeBrowser_0.9_2007-01-15.zip 2007-02-19 20:09 54 ----a-w C:\Program Files\delir.gio 2006-11-08 20:41 1,280 ----a-w C:\Program Files\SolidWorksswxJRNL.BAK 2005-05-28 18:40 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2007-06-17 10:14 2,735,104 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll 2005-08-15 20:25 0 --sha-w C:\WINDOWS\SMINST\HPCD.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C9F11894-EA6C-40B5-8F42-18F285521030}] C:\WINDOWS\system32\jkkLETJy.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [2008-05-17 00:43 2594224] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-04-23 17:45 22058792] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 20:04 139264] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-01-02 01:08 32881] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 17:04 52736] "KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 21:02 61440] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-05-11 01:48 286720] "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 21:43 233472] "VTTimer"="VTTimer.exe" [2004-03-26 22:07 49152 C:\WINDOWS\system32\VTTimer.exe] "SiS Windows KeyHook"="C:\WINDOWS\system32\keyhook.exe" [2004-05-20 10:47 249856] "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 88363 C:\WINDOWS\AGRSMMSG.exe] "PS2"="C:\WINDOWS\system32\ps2.exe" [2003-09-12 21:13 98304] "AlcxMonitor"="ALCXMNTR.EXE" [] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 15:28 577536 C:\WINDOWS\soundman.exe] "FixCamera"="C:\WINDOWS\FixCamera.exe" [2006-06-01 11:26 20480] "tsnp2std"="C:\WINDOWS snp2std.exe" [2006-05-22 10:37 262144] "snp2std"="C:\WINDOWS\vsnp2std.exe" [2006-05-15 15:52 675840] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\yayyYQiG] yayyYQiG.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\mIRC\mirc.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Skype\Phone\Skype.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35] R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-06-07 10:34] R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08] S3 maconfservice;maconfservice;"C:\Program Files\ma-config.com\maconfservice.exe" [2008-05-14 16:40] . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-05-14 15:20:10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-05-16 22:20:18 C:\WINDOWS\Tasks\Connexion facile à Internet.job"

Blackbeard78 · Answer

RAV antivirus et Flash Disinfector n'ont rien trouvé.

jlpjlp · Answer

RECOLLE UN NOUVEAU RAPPORT COMBOFIX

Blackbeard78 · Answer

Voici le rapport Combofix: ComboFix 08-05-15.3 - Compaq_Propriétaire 2008-05-18 20:25:40.2 - NTFSx86 Endroit: C:\Documents and Settings\Compaq_Propriétaire\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\baidu C:\Documents and Settings\Compaq_Propriétaire\new.txt C:\Program Files\baidu C:\Program Files\cnnic C:\Program Files\cnnic\Cdn\cdnacs.dat C:\Program Files\cnnic\Cdn\cdnbl.dat C:\Program Files\cnnic\Cdn\cdncol.dll C:\Program Files\cnnic\Cdn\cdndet.dat C:\Program Files\cnnic\Cdn\cdndisp.dat C:\Program Files\cnnic\Cdn\cdnforie.dll C:\Program Files\cnnic\Cdn\cdnhint.dat C:\Program Files\cnnic\Cdn\cdnprev.dat C:\Program Files\cnnic\Cdn\cdnprh.dll C:\Program Files\cnnic\Cdn\cdnrepl.dat C:\Program Files\cnnic\Cdn\cdnrereg.dat C:\Program Files\cnnic\Cdn\cdnswp.exe C:\Program Files\cnnic\Cdn\cdntran.dat C:\Program Files\cnnic\Cdn\cdnuc.exe C:\Program Files\cnnic\Cdn\cdnunins.exe C:\Program Files\cnnic\Cdn\cdnvers.dat C:\Program Files\cnnic\Cdn\imadom.dat C:\Program Files\cnnic\Cdn\Images\enter.ico C:\Program Files\cnnic\Cdn\Images\news.ico C:\Program Files\cnnic\Cdn\Images\popup.bmp C:\Program Files\cnnic\Cdn\Images\soft.ico C:\Program Files\cnnic\Cdn\rbtnhtm.cab C:\Program Files\cnnic\Cdn\spkw.dat C:\Program Files\cnnic\Cdn\src.dat C:\Program Files\cnnic\Cdn\Update\cdnacs.dat C:\Program Files\cnnic\Cdn\Update\cdnbl.dat C:\Program Files\cnnic\Cdn\Update\cdncol.dll C:\Program Files\cnnic\Cdn\Update\cdncrc.dat C:\Program Files\cnnic\Cdn\Update\cdndet.dat C:\Program Files\cnnic\Cdn\Update\cdndisp.dat C:\Program Files\cnnic\Cdn\Update\cdnforie.dll C:\Program Files\cnnic\Cdn\Update\cdnhint.dat C:\Program Files\cnnic\Cdn\Update\cdnprev.dat C:\Program Files\cnnic\Cdn\Update\cdnprh.dll C:\Program Files\cnnic\Cdn\Update\cdnprot.dat C:\Program Files\cnnic\Cdn\Update\cdnswp.exe C:\Program Files\cnnic\Cdn\Update\cdntran.dat C:\Program Files\cnnic\Cdn\Update\cdnuc.exe C:\Program Files\cnnic\Cdn\Update\cdnunins.exe C:\Program Files\cnnic\Cdn\Update\cdnvers.dat C:\Program Files\cnnic\Cdn\Update\enter.ico C:\Program Files\cnnic\Cdn\Update\imadom.dat C:\Program Files\cnnic\Cdn\Update\news.ico C:\Program Files\cnnic\Cdn\Update\popup.bmp C:\Program Files\cnnic\Cdn\Update\rbtnhtm.cab C:\Program Files\cnnic\Cdn\Update\soft.ico C:\Program Files\cnnic\Cdn\Update\spkw.dat C:\Program Files\koowo C:\Program Files\koowo\Lyric\conf.ini C:\Program Files\koowo\Lyric\config\gbk-big5.txt C:\Program Files\koowo\Lyric\config\RealMiniConfig.ini C:\Program Files\koowo\Lyric\config\SongLrc.txt C:\Program Files\koowo\Lyric\config\StringConfig.ini C:\Program Files\koowo\Lyric\config\StringConfigBig5.ini C:\Program Files\koowo\Lyric\config\tag.dat C:\Program Files\koowo\Lyric\config\taginfo.dat C:\Program Files\koowo\Lyric\config\WinampMainConfig.ini C:\Program Files\koowo\Lyric\config\WinampMainConfigModern.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfig.ini C:\Program Files\koowo\Lyric\config\WinampMiniConfigModern.ini C:\Program Files\koowo\Lyric\config\WMPMiniConfig.ini C:\Program Files\koowo\Lyric\dotag.exe C:\Program Files\koowo\Lyric\dump.ax C:\Program Files\koowo\Lyric\face\hand-close.cur C:\Program Files\koowo\Lyric\face\hand-open.cur C:\Program Files\koowo\Lyric\face\kwc.img C:\Program Files\koowo\Lyric\face\real\bk.bmp C:\Program Files\koowo\Lyric\face\real\close-hover.bmp C:\Program Files\koowo\Lyric\face\real\close-normal.bmp C:\Program Files\koowo\Lyric\face\real\close-pressed.bmp C:\Program Files\koowo\Lyric\face\real\full-hover.bmp C:\Program Files\koowo\Lyric\face\real\full-normal.bmp C:\Program Files\koowo\Lyric\face\real\full-pressed.bmp C:\Program Files\koowo\Lyric\face\real\mini-hover.bmp C:\Program Files\koowo\Lyric\face\real\mini-normal.bmp C:\Program Files\koowo\Lyric\face\real\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\real\pause-hover.bmp C:\Program Files\koowo\Lyric\face\real\pause-normal.bmp C:\Program Files\koowo\Lyric\face\real\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\real\play-hover-y.bmp C:\Program Files\koowo\Lyric\face\real\play-hover.bmp C:\Program Files\koowo\Lyric\face\real\play-normal-y.bmp C:\Program Files\koowo\Lyric\face\real\play-normal.bmp C:\Program Files\koowo\Lyric\face\real\play-pressed.bmp C:\Program Files\koowo\Lyric\face\real\stop-disable.bmp C:\Program Files\koowo\Lyric\face\real\stop-hover.bmp C:\Program Files\koowo\Lyric\face\real\stop-normal.bmp C:\Program Files\koowo\Lyric\face\real\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\real\Thumbs.db C:\Program Files\koowo\Lyric\face\svr.img C:\Program Files\koowo\Lyric\face\winamp\classic\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\close.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\classic\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\classic\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\next-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\next-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\resize.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\right-down.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\right-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\right-top.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\classic\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\classic\top-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\bk_color.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\close.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\down-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\hand-close.ico C:\Program Files\koowo\Lyric\face\winamp\modern\hand-open.ico C:\Program Files\koowo\Lyric\face\winamp\modern\last-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\last-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\left-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\logo-lyrics.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\mini.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\next-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\next-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\next-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\play-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\resize.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\right-down.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\right-middle.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\right-top.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-hover.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-normal.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\switch.bmp C:\Program Files\koowo\Lyric\face\winamp\modern\Thumbs.db C:\Program Files\koowo\Lyric\face\winamp\modern\top-middle.bmp C:\Program Files\koowo\Lyric\face\wmp\bk.bmp C:\Program Files\koowo\Lyric\face\wmp\bk2.bmp C:\Program Files\koowo\Lyric\face\wmp\close.bmp C:\Program Files\koowo\Lyric\face\wmp\full-screen.bmp C:\Program Files\koowo\Lyric\face\wmp\last-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\last-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\last-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\last-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\mini.bmp C:\Program Files\koowo\Lyric\face\wmp\next-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\next-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\next-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\next-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\pause-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\play-hover.bmp C:\Program Files\koowo\Lyric\face\wmp\play-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\play-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-disable.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-normal.bmp C:\Program Files\koowo\Lyric\face\wmp\stop-pressed.bmp C:\Program Files\koowo\Lyric\face\wmp\switch.bmp C:\Program Files\koowo\Lyric\fp.tmp C:\Program Files\koowo\Lyric\gen_WMP.dll C:\Program Files\koowo\Lyric\KWLyric_wmp.dll C:\Program Files\koowo\Lyric\log\act.log C:\Program Files\koowo\Lyric\lyric\Justin Timberlake - SexyBack.lrc C:\Program Files\koowo\Lyric\lyric\readme.txt C:\Program Files\koowo\Lyric\recoEngine.exe C:\Program Files\koowo\Lyric\RMSplt.ax C:\Program Files\koowo\Lyric\update\KUpdate.exe C:\Program Files\koowo\Lyric\update\newup_silent.zip C:\Program Files\koowo\Lyric\update\Update.dll C:\WINDOWS\photos.zip C:\WINDOWS\system32\cdnprot.dat C:\WINDOWS\system32\ihxdqtgx.dll C:\WINDOWS\system32\lylk.dat C:\WINDOWS\system32\plugin.ini C:\WINDOWS\system32\webflag.ocx C:\WINDOWS\system32\winmmt32.dll C:\WINDOWS\system32\yJTELkkj.ini C:\WINDOWS\system32\yJTELkkj.ini2 . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BDGUARD -------\Service_cdnprot -------\Service_poof ((((((((((((((((((((((((((((( Fichiers créés 2008-04-18 to 2008-05-18 )))))))))))))))))))))))))))))))))))) . 2008-05-18 20:24 . 2008-05-18 20:24 268 --ah----- C:\sqmdata08.sqm 2008-05-18 20:24 . 2008-05-18 20:24 244 --ah----- C:\sqmnoopt08.sqm 2008-05-18 18:49 . 2008-05-18 18:49 268 --ah----- C:\sqmdata07.sqm 2008-05-18 18:49 . 2008-05-18 18:49 244 --ah----- C:\sqmnoopt07.sqm 2008-05-18 18:03 . 2008-05-18 18:06 d-------- C:\WINDOWS\LastGood 2008-05-18 18:03 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-05-18 18:03 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-05-18 18:03 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-05-18 16:19 . 2008-05-18 16:19 280 --ah----- C:\sqmdata06.sqm 2008-05-18 16:19 . 2008-05-18 16:19 244 --ah----- C:\sqmnoopt06.sqm 2008-05-18 15:05 . 2008-05-18 15:05 268 --ah----- C:\sqmdata05.sqm 2008-05-18 15:05 . 2008-05-18 15:05 244 --ah----- C:\sqmnoopt05.sqm 2008-05-18 14:11 . 2008-05-18 14:11 268 --ah----- C:\sqmdata04.sqm 2008-05-18 14:11 . 2008-05-18 14:11 244 --ah----- C:\sqmnoopt04.sqm 2008-05-18 13:56 . 2008-05-18 13:56 268 --ah----- C:\sqmdata03.sqm 2008-05-18 13:56 . 2008-05-18 13:56 244 --ah----- C:\sqmnoopt03.sqm 2008-05-18 12:54 . 2008-05-18 12:54 268 --ah----- C:\sqmdata02.sqm 2008-05-18 12:54 . 2008-05-18 12:54 244 --ah----- C:\sqmnoopt02.sqm 2008-05-18 12:14 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-05-18 12:14 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-05-18 12:14 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-05-18 12:14 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-05-18 12:14 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-05-18 12:14 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-05-18 12:14 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-05-18 12:14 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-05-18 12:14 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-05-18 12:13 . 2008-05-18 12:15 d-------- C:\WINDOWS\system32\fr-fr 2008-05-18 02:32 . 2008-05-18 02:32 268 --ah----- C:\sqmdata01.sqm 2008-05-18 02:32 . 2008-05-18 02:32 244 --ah----- C:\sqmnoopt01.sqm 2008-05-18 02:17 . 2008-05-18 02:17 268 --ah----- C:\sqmdata00.sqm 2008-05-18 02:17 . 2008-05-18 02:17 244 --ah----- C:\sqmnoopt00.sqm 2008-05-18 00:44 . 2008-05-18 00:44 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-05-17 21:42 . 2007-02-28 18:02 2,182,400 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,138,112 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,059,648 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2008-05-17 21:42 . 2007-02-28 18:02 2,017,792 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe 2008-05-17 18:11 . 2008-05-17 18:11 d-------- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Malwarebytes 2008-05-17 18:10 . 2008-05-18 02:12 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-05-17 18:10 . 2008-05-17 18:10 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-05-17 18:10 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-05-17 18:10 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-05-17 12:49 . 2008-05-17 12:49 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat 2008-05-17 12:31 . 2008-05-17 13:26 d-------- C:\Documents and Settings\Compaq_Propriétaire\Application Data\GrabIt 2008-05-17 12:13 . 2006-10-04 16:06 1,197,294 --a--c--- C:\WINDOWS\system32\dllcache\SET1BF.tmp 2008-05-17 12:04 . 2008-05-17 12:04 d-------- C:\WINDOWS\system32\LogFiles 2008-05-17 12:04 . 2008-05-17 12:06 d-------- C:\WINDOWS\system32\drivers\UMDF 2008-05-17 12:00 . 2006-05-05 11:41 453,120 -----c--- C:\WINDOWS\system32\dllcache\mrxsmb.sys 2008-05-17 11:02 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-05-17 10:54 . 2008-05-17 10:54 d-------- C:\Documents and Settings\Administrateur.NOM-47D5A5B94AD 2008-05-17 08:45 . 2004-06-02 10:54 7,406 --a------ C:\WINDOWS\system32\doc.ico 2008-05-17 08:35 . 2008-05-18 13:09 dr-hsc--- C:\WINDOWS\system32\dllcache 2008-05-17 08:35 . 2008-05-17 08:42 dr------- C:\WINDOWS\system32\config\systemprofile\Menu Démarrer 2008-05-17 01:29 . 2004-08-03 23:10 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-05-17 01:29 . 2004-08-03 23:10 85,376 --a--c--- C:\WINDOWS\system32\dllcache\nabtsfec.sys 2008-05-17 01:29 . 2004-08-03 23:10 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2008-05-17 01:29 . 2004-08-03 23:10 17,024 --a--c--- C:\WINDOWS\system32\dllcache\ccdecode.sys 2008-05-17 01:28 . 2004-08-04 00:55 91,648 --a------ C:\WINDOWS\system32\kswdmcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 91,648 --a--c--- C:\WINDOWS\system32\dllcache\kswdmcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax 2008-05-17 01:28 . 2004-08-04 00:55 61,952 --a--c--- C:\WINDOWS\system32\dllcache\kstvtune.ax 2008-05-17 01:28 . 2004-08-04 00:54 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-05-17 01:28 . 2004-08-04 00:54 54,784 --a--c--- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2008-05-17 01:28 . 2004-08-04 00:55 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2008-05-17 01:28 . 2004-08-04 00:55 43,008 --a--c--- C:\WINDOWS\system32\dllcache\ksxbar.ax 2008-05-17 01:28 . 2004-08-04 00:55 28,672 --a------ C:\WINDOWS\system32\vidcap.ax 2008-05-17 01:28 . 2004-08-04 00:55 28,672 --a--c--- C:\WINDOWS\system32\dllcache\vidcap.ax 2008-05-17 01:20 . 2006-06-07 10:34 10,305,280 --a------ C:\WINDOWS\system32\drivers\snp2sxp.sys 2008-05-17 01:20 . 2005-11-23 13:55 53,248 --a------ C:\WINDOWS\system32\csnp2std.dll 2008-05-17 01:20 . 2006-04-27 20:43 24,832 --a------ C:\WINDOWS\system32\drivers\sncamd.sys 2008-05-17 01:20 . 2006-06-01 11:26 20,480 --a------ C:\WINDOWS\FixCamera.exe 2008-05-17 01:13 . 2006-08-01 15:02 49,152 --a------ C:\WINDOWS\system32\ChCfg.exe 2008-05-17 01:12 . 2008-05-17 01:12 d-------- C:\Program Files\Realtek AC97 2008-05-17 01:12 . 2006-12-08 15:20 10,528,768 --a------ C:\WINDOWS\system32\RTLCPL.exe 2008-05-17 01:12 . 2007-04-16 15:28 577,536 --a------ C:\WINDOWS\soundman.exe 2008-05-17 01:12 . 2006-07-31 11:19 315,392 --a------ C:\WINDOWS\alcupd.exe 2008-05-17 01:12 . 2006-07-31 11:27 217,088 --a------ C:\WINDOWS\Alcrmv.exe 2008-05-17 01:12 . 2006-10-18 02:53 147,456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll 2008-05-17 01:12 . 2002-02-05 13:54 141,016 --a------ C:\WINDOWS\system32\alsndmgr.wav 2008-05-17 01:06 . 2008-05-17 01:06 d-------- C:\Program Files\ma-config.com 2008-05-17 01:06 . 2008-05-17 01:07 d-------- C:\Documents and Settings\All Users\Application Data\ma-config.com 2008-05-17 00:58 . 2004-08-05 05:00 1,783,864 --a------ C:\WINDOWS\system32\WINPY.MB 2008-05-17 00:57 . 2004-08-05 05:00 189,986 --a--c--- C:\WINDOWS\system32\dllcache\c_1361.nls 2008-05-17 00:56 . 2004-08-05 05:00 811,064 --a------ C:\WINDOWS\system32\imjp81k.dll 2008-05-17 00:55 . 2004-08-03 23:15 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2008-05-17 00:54 . 2004-08-04 00:55 130,048 --a------ C:\WINDOWS\system32\ksproxy.ax 2008-05-17 00:54 . 2004-08-04 00:55 130,048 --a--c--- C:\WINDOWS\system32\dllcache\ksproxy.ax 2008-05-17 00:54 . 2004-08-03 23:10 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys 2008-05-17 00:54 . 2004-08-03 23:08 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2008-05-17 00:54 . 2004-08-03 23:08 60,288 --a--c--- C:\WINDOWS\system32\dllcache\drmk.sys 2008-05-17 00:54 . 2004-08-03 23:10 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys 2008-05-17 00:54 . 2001-08-17 21:46 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2008-05-17 00:54 . 2004-08-04 00:54 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2008-05-17 00:54 . 2004-08-04 00:54 4,096 --a--c--- C:\WINDOWS\system32\dllcache\ksuser.dll 2008-05-17 00:31 . 2008-05-17 00:31 d-------- C:\WINDOWS\WinRAR 2008-05-17 00:25 . 2006-04-13 03:04 49,664 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys 2008-05-17 00:25 . 2006-04-13 03:04 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys 2008-05-17 00:24 . 2006-04-13 03:04 282,624 -ra------ C:\WINDOWS\system32\HPZc3212.dll 2008-05-17 00:24 . 2006-01-04 11:12 77,824 -ra------ C:\WINDOWS\system32\HPZIDS01.dll 2008-05-17 00:24 . 2006-04-10 14:03 38,400 --a------ C:\WINDOWS\system32\hpz3l054.dll 2008-05-17 00:24 . 2006-04-13 03:04 21,568 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys 2008-05-17 00:23 . 2006-04-13 03:02 827,392 -ra------ C:\WINDOWS\system32\hpotiop2.dll 2008-05-17 00:23 . 2006-04-13 03:02 659,456 -ra------ C:\WINDOWS\system32\hpowiax2.dll 2008-05-17 00:23 . 2006-04-13 03:02 254,026 -ra------ C:\WINDOWS\system32\hpovst09.dll 2008-05-17 00:23 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2008-05-17 00:23 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2008-05-17 00:07 . 2004-08-05 12:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-05-17 00:07 . 2008-05-17 00:07 3,966 -rahs---- C:\WINDOWS\system32\drivers\HP_PP123AA-ABF SR1207FR FR440_YC_Pres_QCZB441_E44FRheREF2_4_IKelut_SASUSTek Computer INC._V2.02_B3.11_T040902_W2_L40C_M960_J80_7AMD_8Sempron 2800+_92_111063044_N11063065_P_Z11C1048C_K_A11063059_U11063038_G11067205.MRK 2008-05-17 00:06 . 2004-01-02 02:04 d-------- C:\Documents and Settings\Compaq_Propriétaire\WINDOWS 2008-05-17 00:06 . 2004-01-02 02:04 d-------- C:\Documents and Settings\Compaq_Propriétaire\WINDOWS 2008-05-17 00:06 . 2004-01-02 00:45 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Voisinage réseau 2008-05-17 00:06 . 2004-01-02 00:45 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Voisinage réseau 2008-05-17 00:06 . 2004-01-02 00:45 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Voisinage d'impression 2008-05-17 00:06 . 2004-01-02 00:45 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Voisinage d'impression 2008-05-17 00:06 . 2008-05-17 00:21 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Modèles 2008-05-17 00:06 . 2008-05-17 00:21 d--h----- C:\Documents and Settings\Compaq_Propriétaire\Modèles 2008-05-17 00:06 . 2008-05-18 15:09 dr------- C:\Documents and Settings\Compaq_Propriétaire\Mes documents 2008-05-17 00:06 . 2008-05-18 15:09 dr------- C:\Documents and Settings\Compaq_Propriétaire\Mes documents 2008-05-17 00:06 . 2008-05-17 00:30 dr------- C:\Documents and Settings\Compaq_Propriétaire\Menu Démarrer 2008-05-17 00:06 . 2008-05-17 00:30 dr------- C:\Documents and Settings\Compaq_Propriétaire\Menu Démarrer 2008-05-17 00:06 . 2008-05-17 00:19 dr------- C:\Documents and Settings\Compaq_Propriétaire\Favoris 2008-05-17 00:06 . 2008-05-17 00:19 dr------- C:\Documents and Settings\Compaq_Propriétaire\Favoris 2008-05-17 00:06 . 2008-05-18 14:03 d-------- C:\Documents and Settings\Compaq_Propriétaire\Bureau 2008-05-17 00:06 . 2008-05-18 14:03 d-------- C:\Documents and Settings\Compaq_Propriétaire\Bureau 2008-05-17 00:06 . 2004-01-01 22:38 d-------- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Symantec . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-18 18:24 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Skype 2008-05-18 14:04 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\skypePM 2008-05-18 13:13 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-05-18 12:12 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\DMCache 2008-05-18 10:11 --------- d-----w C:\Program Files\adslTV 2008-05-18 10:08 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\vlc 2008-05-18 00:17 --------- d-----w C:\Program Files\mIRC 2008-05-17 23:21 --------- d-----w C:\Program Files\Windows Live 2008-05-17 19:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-05-17 10:23 --------- d-----w C:\Program Files\Fichiers communs\Skype 2008-05-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-17 09:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-05-17 09:51 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2008-05-17 09:50 --------- d-----w C:\Program Files\Winamp 2008-05-17 09:48 --------- d-----w C:\Program Files\PPLive 2008-05-17 09:47 --------- d-----w C:\Program Files\Nowcom 2008-05-17 09:46 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-05-16 23:20 --------- d-----w C:\Program Files\Fichiers communs\snp2std 2008-05-16 23:03 --------- d-----w C:\Program Files\The KMPlayer FR 2008-05-16 22:20 --------- d-----w C:\Program Files\Easy Internet signup 2008-05-16 20:50 --------- d-----w C:\Program Files\Freenet 2008-05-16 20:43 --------- d-----w C:\Program Files\Steam 2008-05-13 20:14 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\uTorrent 2008-05-11 11:41 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\U3 2008-05-11 10:20 --------- d-----w C:\Program Files\eMule 2008-05-08 13:17 --------- d-----w C:\Program Files\Windows Live Safety Center 2008-05-06 23:10 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\AdobeUM 2008-04-29 18:11 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Storelogokay 2008-04-29 13:15 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\IDM 2008-04-28 09:31 --------- d-----w C:\Program Files\FlashGet 2008-04-19 15:22 --------- d-----w C:\Program Files\TVAnts 2008-04-18 16:50 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Image Zone Express 2008-04-13 08:19 --------- d-----w C:\Program Files\TVUPlayer 2008-04-13 08:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\TVU Networks 2008-04-13 08:14 --------- d-----w C:\Program Files\SopCast 2008-04-01 13:27 --------- d-----w C:\Program Files\ppStream 2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll 2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll 2008-03-21 08:37 --------- d-----w C:\Program Files\Free 2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys 2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll 2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll 2007-11-22 16:16 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-03-01 14:52 25,766,528 ----a-w C:\Program Files\freeBrowser_0.9_2007-01-15.zip 2007-02-19 20:09 54 ----a-w C:\Program Files\delir.gio 2006-11-08 20:41 1,280 ----a-w C:\Program Files\SolidWorksswxJRNL.BAK 2005-05-28 18:40 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2004-06-18 09:05 45,056 ----a-w C:\WINDOWS\inf\Slntinst.exe 2003-08-22 09:09 45,056 ----a-w C:\WINDOWS\inf\slntinst_staticW2k.exe 1998-08-24 10:09 10,000 ----a-w C:\WINDOWS\inf\unregpn.exe 2007-06-17 10:14 2,735,104 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll 2005-08-15 20:25 0 --sha-w C:\WINDOWS\SMINST\HPCD.sys . ((((((((((((((((((((((((((((( snapshot@2008-05-18_13.43.03.62 ))))))))))))))))))))))))))))))))))))))))) . - 2008-05-18 00:49:59 1,257,472 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2008-05-18 11:57:55 1,265,664 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll - 2008-05-18 00:50:01 1,224,704 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2008-05-18 11:57:56 1,232,896 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2008-05-18 11:58:12 61,440 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_06cd8018\CustomMarshalers.dll + 2008-05-18 12:03:59 3,391,488 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d940c3d5\mscorlib.dll + 2008-05-18 12:03:50 1,466,368 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_29d41f6b\System.Design.dll + 2008-05-18 12:02:53 90,112 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_8e3d272c\System.Drawing.Design.dll + 2008-05-18 12:03:54 835,584 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_3de09af6\System.Drawing.dll + 2008-05-18 12:03:15 3,018,752 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_1c03201b\System.Windows.Forms.dll + 2008-05-18 12:03:28 2,088,960 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_c7e6b88f\System.Xml.dll + 2008-05-18 11:58:07 1,966,080 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_72ee05f4\System.dll + 2008-05-18 12:04:30 20,480 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\vjscor\1.0.5000.0__b03f5f7f11d50a3a_55db2c51\vjscor.dll + 2008-05-18 12:04:04 69,632 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\VJSharpCodeProvider\7.0.5000.0__b03f5f7f11d50a3a_f014a621\VJSharpCodeProvider.dll + 2008-05-18 12:04:29 4,464,640 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\vjslib\1.0.5000.0__b03f5f7f11d50a3a_9c70820e\vjslib.dll + 2008-05-18 12:04:12 32,768 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\vjslibcw\1.0.5000.0__b03f5f7f11d50a3a_8b424161\vjslibcw.dll + 2008-05-18 12:04:09 10,240 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\VJSWfcBrowserStubLib\1.0.5000.0__b03f5f7f11d50a3a_d57e8645\VJSWfcBrowserStubLib.dll - 2008-05-18 11:09:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-05-18 12:12:20 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-05-18 12:10:15 18,718 ----a-r C:\WINDOWS\Installer\{BFD080F6-3BF0-40E1-9507-9CA969C35870}\ARPPRODUCTICON.exe + 2008-05-18 12:10:15 18,718 ----a-r C:\WINDOWS\Installer\{BFD080F6-3BF0-40E1-9507-9CA969C35870}\NewShortcut1_E659E0EE10E649B7869660F38D0EB174.exe + 2008-05-18 12:10:15 18,718 ----a-r C:\WINDOWS\Installer\{BFD080F6-3BF0-40E1-9507-9CA969C35870}\NewShortcut2_8315396A5EA1419DBEC4978284BDF556.exe - 2004-07-14 23:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2007-04-13 19:30:52 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2004-07-14 23:49:22 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2007-04-13 19:30:52 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2004-07-14 22:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2007-04-13 18:57:52 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2003-02-21 01:09:14 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2007-04-13 18:57:58 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2004-07-14 22:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2007-04-13 18:56:30 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2004-07-14 22:33:04 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2007-04-13 18:58:00 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2004-07-15 12:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2007-04-13 18:50:46 2,142,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2003-02-21 01:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2007-04-13 18:58:02 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2004-07-14 22:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2007-04-13 18:57:00 2,523,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2004-07-14 22:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2007-04-13 18:57:28 2,514,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2004-07-14 23:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_aspnet_isapi.dll + 2004-07-14 22:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_CORPerfMonExt.dll + 2004-07-14 22:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_fusion.dll + 2004-07-14 22:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_mscorjit.dll + 2004-07-15 12:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_mscorlib.dll + 2003-02-21 01:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_mscorsn.dll + 2004-07-14 22:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_mscorsvr.dll + 2004-07-14 22:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_mscorwks.dll + 2003-02-21 10:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_msvcr71.dll + 2004-07-14 22:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3596\_PerfCounter.dll - 2004-07-15 12:31:16 1,224,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll + 2007-04-13 19:35:38 1,232,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll - 2004-07-15 12:29:00 1,257,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2007-04-13 19:35:46 1,265,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2008-03-29 17:45:49 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe + 2008-05-15 23:24:43 1,152,888 ----a-w C:\WINDOWS\system32\aswBoot.exe - 2008-03-29 17:23:22 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr + 2008-05-15 23:12:36 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr - 2008-03-29 17:26:52 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys + 2008-05-15 23:13:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys - 2008-03-29 17:35:49 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys + 2008-05-15 23:16:06 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys - 2008-03-29 17:35:21 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys + 2008-05-15 23:18:33 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys - 2008-03-29 17:29:08 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys + 2008-05-15 23:15:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys - 2008-03-29 17:31:34 75,856 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys + 2008-05-15 23:20:32 78,416 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys - 2008-03-29 17:27:33 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys + 2008-05-15 23:14:11 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys + 2007-04-26 08:21:30 302,000 ----a-w C:\WINDOWS\system32\drivers\fwdrv.sys + 2007-04-26 08:21:34 72,624 ----a-w C:\WINDOWS\system32\drivers\khips.sys + 2003-03-18 19:12:12 1,047,552 ----a-w C:\WINDOWS\system32\mfc71u.dll - 2004-07-14 22:24:50 155,648 ----a-w C:\WINDOWS\system32\mscoree.dll + 2006-12-22 10:28:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dll + 2006-12-22 11:02:36 6,144 ----a-w C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll + 2008-05-18 12:12:34 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_638.dat . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C9F11894-EA6C-40B5-8F42-18F285521030}] C:\WINDOWS\system32\jkkLETJy.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [2008-05-17 00:43 2594224] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-04-23 17:45 22058792] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 20:04 139264] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 05:21:22 288472] Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\yayyYQiG] yayyYQiG.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\mIRC\mirc.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Skype\Phone\Skype.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 10:21] R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 10:21] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R2 SPF4;Sunbelt Personal Firewall 4;"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe" [2007-04-26 10:21] R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-06-07 10:34] R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08] S3 maconfservice;maconfservice;"C:\Program Files\ma-config.com\maconfservice.exe" [2008-05-14 16:40] *Newly Created Service* - FWDRV *Newly Created Service* - KHIPS *Newly Created Service* - SPF4 *Newly Created Service* - USNJSVC . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-05-14 15:20:10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-05-16 22:20:18 C:\WINDOWS\Tasks\Connexion facile à Internet.job" - C:\Program Files\Easy Internet signup\HPSdpApp.exe "2008-05-18 18:33:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-05-18 20:34:43 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... ************************************************************************** . Temps d'accomplissement: 2008-05-18 20:44:09 ComboFix-quarantined-files.txt 2008-05-18 18:42:56 Pre-Run: 3,966,013,440 octets libres Post-Run: 3,954,233,344 octets libres 548 --- E O F --- 2008-05-18 11:58:02

jlpjlp · Answer

colle le rapport d'un scan en ligne 
avec un des suivants: 


bitdefender en ligne : 
http://www.bitdefender.fr/scan_fr/scan8/ie.html 

Panda en ligne : 
http://pandasoftware.fr

Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

Blackbeard78 · Answer

fichiers infectés  (analyse avec bitdefender):
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe=>(NSIS o)=>lzma_solid_nsis0043
	

Détecté avec: Adware.Adhelper.CJ

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe=>(NSIS o)=>lzma_solid_nsis0043
	

Supprimé

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe=>(NSIS o)
	

Echec de la mise à jour

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate_1.7.3.33.exe
	

Infecté par: Trojan.Generic.228901

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate_1.7.3.33.exe
	

Supprimé

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe
	

Infecté par: Trojan.Generic.228901

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe
	

Supprimé

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\SystemDoctor2006FreeInstall_fr.exe
	

Infecté par: Trojan.Downloader.Winfixer.L

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\SystemDoctor2006FreeInstall_fr.exe
	

Supprimé

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls
HTMLn.dll
	

Détecté avec: Application.Irc.Flood.Tool.E

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls
HTMLn.dll
	

Echec de la désinfection

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls
HTMLn.dll
	

Supprimé

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll
	

Détecté avec: Application.Wndmanage.B

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll
	

Echec de la désinfection

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll
	

Supprimé

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zwnd.dll
	

Infecté par: VirTool.Mirc.Hider

C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zwnd.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP10\A0001159.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP10\A0001159.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP10\A0001159.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP10\A0001212.dll
	

Infecté par: Trojan.Vundo.EMM

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP10\A0001212.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP22\A0006050.dll
	

Infecté par: Trojan.Vundo.EML

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP22\A0006050.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP22\A0006051.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP22\A0006051.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP22\A0006051.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006630.exe
	

Infecté par: Trojan.Generic.228901

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006630.exe
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006631.exe
	

Infecté par: Trojan.Generic.228901

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006631.exe
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006632.exe
	

Infecté par: Trojan.Downloader.Winfixer.L

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006632.exe
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006635.dll
	

Détecté avec: Application.Irc.Flood.Tool.E

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006635.dll
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006635.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006636.dll
	

Détecté avec: Application.Wndmanage.B

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006636.dll
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006636.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006637.dll
	

Infecté par: VirTool.Mirc.Hider

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP24\A0006637.dll
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP4\A0000561.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP4\A0000561.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP4\A0000561.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP5\A0000562.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP5\A0000562.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP5\A0000562.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP6\A0000767.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP6\A0000767.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP6\A0000767.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP7\A0000776.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP7\A0000776.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP7\A0000776.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP8\A0000893.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP8\A0000893.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP8\A0000893.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000951.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000951.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000951.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000995.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000995.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000995.ini
	

Supprimé

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000999.ini
	

Infecté par: Trojan.Vundo.DVS

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000999.ini
	

Echec de la désinfection

C:\System Volume Information\_restore{88F0EC16-5093-454D-BD2D-4DD02919E000}\RP9\A0000999.ini
	

Supprimé

C:\WINDOWS\FixCamera.exe
	

Détecté avec: Spyware.479

C:\WINDOWS\FixCamera.exe
	

Echec de la désinfection

C:\WINDOWS\FixCamera.exe
	

Echec de la suppression

H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
	

Détecté avec: Application.Topsearch.B

H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
	

Echec de la désinfection

H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
	

Supprimé

H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe=>(Instyler o)
	

Echec de la mise à jour

jlpjlp · Answer

vire le ficheirs system doctor si present (c'est un espion)

C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\SystemDoctor2006FreeInstall_fr.exe


_________________

télécharge OTMoveIt 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.  Ou sur  https://www.luanagames.com/index.fr.html
double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en citation ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

Citation : 


C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\baidu
C:\Documents and Settings\Compaq_Propriétaire
ew.txt
C:\Program Files\baidu
C:\Program Files\cnnic
C:\Program Files\cnnic\Cdn\cdnacs.dat
C:\Program Files\cnnic\Cdn\cdnbl.dat
C:\Program Files\cnnic\Cdn\cdncol.dll
C:\Program Files\cnnic\Cdn\cdndet.dat
C:\Program Files\cnnic\Cdn\cdndisp.dat
C:\Program Files\cnnic\Cdn\cdnforie.dll
C:\Program Files\cnnic\Cdn\cdnhint.dat
C:\Program Files\cnnic\Cdn\cdnprev.dat
C:\Program Files\cnnic\Cdn\cdnprh.dll
C:\Program Files\cnnic\Cdn\cdnrepl.dat
C:\Program Files\cnnic\Cdn\cdnrereg.dat
C:\Program Files\cnnic\Cdn\cdnswp.exe
C:\Program Files\cnnic\Cdn\cdntran.dat
C:\Program Files\cnnic\Cdn\cdnuc.exe
C:\Program Files\cnnic\Cdn\cdnunins.exe
C:\Program Files\cnnic\Cdn\cdnvers.dat
C:\Program Files\cnnic\Cdn\imadom.dat
C:\Program Files\cnnic\Cdn\Images\enter.ico
C:\Program Files\cnnic\Cdn\Images
ews.ico
C:\Program Files\cnnic\Cdn\Images\popup.bmp
C:\Program Files\cnnic\Cdn\Images\soft.ico
C:\Program Files\cnnic\Cdnbtnhtm.cab
C:\Program Files\cnnic\Cdn\spkw.dat
C:\Program Files\cnnic\Cdn\src.dat
C:\Program Files\cnnic\Cdn\Update\cdnacs.dat
C:\Program Files\cnnic\Cdn\Update\cdnbl.dat
C:\Program Files\cnnic\Cdn\Update\cdncol.dll
C:\Program Files\cnnic\Cdn\Update\cdncrc.dat
C:\Program Files\cnnic\Cdn\Update\cdndet.dat
C:\Program Files\cnnic\Cdn\Update\cdndisp.dat
C:\Program Files\cnnic\Cdn\Update\cdnforie.dll
C:\Program Files\cnnic\Cdn\Update\cdnhint.dat
C:\Program Files\cnnic\Cdn\Update\cdnprev.dat
C:\Program Files\cnnic\Cdn\Update\cdnprh.dll
C:\Program Files\cnnic\Cdn\Update\cdnprot.dat
C:\Program Files\cnnic\Cdn\Update\cdnswp.exe
C:\Program Files\cnnic\Cdn\Update\cdntran.dat
C:\Program Files\cnnic\Cdn\Update\cdnuc.exe
C:\Program Files\cnnic\Cdn\Update\cdnunins.exe
C:\Program Files\cnnic\Cdn\Update\cdnvers.dat
C:\Program Files\cnnic\Cdn\Update\enter.ico
C:\Program Files\cnnic\Cdn\Update\imadom.dat
C:\Program Files\cnnic\Cdn\Update
ews.ico
C:\Program Files\cnnic\Cdn\Update\popup.bmp
C:\Program Files\cnnic\Cdn\Updatebtnhtm.cab
C:\Program Files\cnnic\Cdn\Update\soft.ico
C:\Program Files\cnnic\Cdn\Update\spkw.dat
C:\Program Files\koowo
C:\Program Files\koowo\Lyric\conf.ini
C:\Program Files\koowo\Lyric\config\gbk-big5.txt
C:\Program Files\koowo\Lyric\config\RealMiniConfig.ini
C:\Program Files\koowo\Lyric\config\SongLrc.txt
C:\Program Files\koowo\Lyric\config\StringConfig.ini
C:\Program Files\koowo\Lyric\config\StringConfigBig5.ini
C:\Program Files\koowo\Lyric\config	ag.dat
C:\Program Files\koowo\Lyric\config	aginfo.dat
C:\Program Files\koowo\Lyric\config\WinampMainConfig.ini
C:\Program Files\koowo\Lyric\config\WinampMainConfigModern.ini
C:\Program Files\koowo\Lyric\config\WinampMiniConfig.ini
C:\Program Files\koowo\Lyric\config\WinampMiniConfigModern.ini
C:\Program Files\koowo\Lyric\config\WMPMiniConfig.ini
C:\Program Files\koowo\Lyric\dotag.exe
C:\Program Files\koowo\Lyric\dump.ax
C:\Program Files\koowo\Lyric\face\hand-close.cur
C:\Program Files\koowo\Lyric\face\hand-open.cur
C:\Program Files\koowo\Lyric\face\kwc.img
C:\Program Files\koowo\Lyric\faceeal\bk.bmp
C:\Program Files\koowo\Lyric\faceeal\close-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\close-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\close-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\full-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\full-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\full-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\mini-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\mini-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\mini-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\pause-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\pause-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\pause-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\play-hover-y.bmp
C:\Program Files\koowo\Lyric\faceeal\play-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\play-normal-y.bmp
C:\Program Files\koowo\Lyric\faceeal\play-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\play-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\stop-disable.bmp
C:\Program Files\koowo\Lyric\faceeal\stop-hover.bmp
C:\Program Files\koowo\Lyric\faceeal\stop-normal.bmp
C:\Program Files\koowo\Lyric\faceeal\stop-pressed.bmp
C:\Program Files\koowo\Lyric\faceeal\Thumbs.db
C:\Program Files\koowo\Lyric\face\svr.img
C:\Program Files\koowo\Lyric\face\winamp\classic\bk.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\bk_color.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\close-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\close.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\down-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\hand-close.ico
C:\Program Files\koowo\Lyric\face\winamp\classic\hand-open.ico
C:\Program Files\koowo\Lyric\face\winamp\classic\last-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\last-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\left-down.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\left-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\left-top.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\logo-lyrics.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\mini-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\mini-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic
ext-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic
ext-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\pause-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\pause-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\play-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\play-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classicesize.bmp
C:\Program Files\koowo\Lyric\face\winamp\classicight-down.bmp
C:\Program Files\koowo\Lyric\face\winamp\classicight-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\classicight-top.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\stop-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\stop-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\classic\Thumbs.db
C:\Program Files\koowo\Lyric\face\winamp\classic	op-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\bk.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\bk_color.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\close-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\close.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\down-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\hand-close.ico
C:\Program Files\koowo\Lyric\face\winamp\modern\hand-open.ico
C:\Program Files\koowo\Lyric\face\winamp\modern\last-hover.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\last-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\last-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\left-down.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\left-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\left-top.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\logo-lyrics.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\mini-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\mini-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\mini.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern
ext-hover.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern
ext-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern
ext-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\pause-hover.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\pause-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\pause-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\play-hover.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\play-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\play-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modernesize.bmp
C:\Program Files\koowo\Lyric\face\winamp\modernight-down.bmp
C:\Program Files\koowo\Lyric\face\winamp\modernight-middle.bmp
C:\Program Files\koowo\Lyric\face\winamp\modernight-top.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\stop-hover.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\stop-normal.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\stop-pressed.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\switch.bmp
C:\Program Files\koowo\Lyric\face\winamp\modern\Thumbs.db
C:\Program Files\koowo\Lyric\face\winamp\modern	op-middle.bmp
C:\Program Files\koowo\Lyric\face\wmp\bk.bmp
C:\Program Files\koowo\Lyric\face\wmp\bk2.bmp
C:\Program Files\koowo\Lyric\face\wmp\close.bmp
C:\Program Files\koowo\Lyric\face\wmp\full-screen.bmp
C:\Program Files\koowo\Lyric\face\wmp\last-disable.bmp
C:\Program Files\koowo\Lyric\face\wmp\last-hover.bmp
C:\Program Files\koowo\Lyric\face\wmp\last-normal.bmp
C:\Program Files\koowo\Lyric\face\wmp\last-pressed.bmp
C:\Program Files\koowo\Lyric\face\wmp\mini.bmp
C:\Program Files\koowo\Lyric\face\wmp
ext-disable.bmp
C:\Program Files\koowo\Lyric\face\wmp
ext-hover.bmp
C:\Program Files\koowo\Lyric\face\wmp
ext-normal.bmp
C:\Program Files\koowo\Lyric\face\wmp
ext-pressed.bmp
C:\Program Files\koowo\Lyric\face\wmp\pause-hover.bmp
C:\Program Files\koowo\Lyric\face\wmp\pause-normal.bmp
C:\Program Files\koowo\Lyric\face\wmp\pause-pressed.bmp
C:\Program Files\koowo\Lyric\face\wmp\play-hover.bmp
C:\Program Files\koowo\Lyric\face\wmp\play-normal.bmp
C:\Program Files\koowo\Lyric\face\wmp\play-pressed.bmp
C:\Program Files\koowo\Lyric\face\wmp\stop-disable.bmp
C:\Program Files\koowo\Lyric\face\wmp\stop-normal.bmp
C:\Program Files\koowo\Lyric\face\wmp\stop-pressed.bmp
C:\Program Files\koowo\Lyric\face\wmp\switch.bmp
C:\Program Files\koowo\Lyric\fp.tmp
C:\Program Files\koowo\Lyric\gen_WMP.dll
C:\Program Files\koowo\Lyric\KWLyric_wmp.dll
C:\Program Files\koowo\Lyric\log\act.log
C:\Program Files\koowo\Lyric\lyric\Justin Timberlake - SexyBack.lrc
C:\Program Files\koowo\Lyric\lyriceadme.txt
C:\Program Files\koowo\LyricecoEngine.exe
C:\Program Files\koowo\Lyric\RMSplt.ax
C:\Program Files\koowo\Lyric\update\KUpdate.exe
C:\Program Files\koowo\Lyric\update
ewup_silent.zip
C:\Program Files\koowo\Lyric\update\Update.dll
C:\WINDOWS\photos.zip
C:\WINDOWS\system32\cdnprot.dat
C:\WINDOWS\system32\ihxdqtgx.dll
C:\WINDOWS\system32\lylk.dat
C:\WINDOWS\system32\plugin.ini
C:\WINDOWS\system32\webflag.ocx
C:\WINDOWS\system32\winmmt32.dll
C:\WINDOWS\system32\yJTELkkj.ini
C:\WINDOWS\system32\yJTELkkj.ini2
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate_1.7.3.33.exe
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\SystemDoctor2006FreeInstall_fr.exe
C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls
HTMLn.dll
C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll
C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zwnd.dll
C:\WINDOWS\FixCamera.exe
H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 

__________________
vire ce qui est dans MOVED FILES en allant dans POSTE DE TRAVAIl puis C puis OTMOVIT
___________________



Télécharge MSNFix de Laurent 
http://sosvirus.changelog.fr/MSNFix.zip 

Décompresse-le et double clic sur le fichier MSNFix.bat. 
- Exécute l'option R. 
--Si l'infection est détectée, exécute l'option N 
- Sauvegarde ce rapport puis fais un copier/coller de ce rapport sur le forum. 

Note : 
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal 
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement. 


envoyer le fichier [b] C:\DOCUME~1\florian\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr  pour faire evoluer msnfix

_______________________

Blackbeard78 · Answer

Le fichier system doctor n'était pas présent.Voilà le rapport MoveIt: File/Folder C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\baidu not found. File/Folder C:\Documents and Settings\Compaq_Propriétaire ew.txt not found. File/Folder C:\Program Files\baidu not found. File/Folder C:\Program Files\cnnic not found. File/Folder C:\Program Files\cnnic\Cdn\cdnacs.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnbl.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdncol.dll not found. File/Folder C:\Program Files\cnnic\Cdn\cdndet.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdndisp.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnforie.dll not found. File/Folder C:\Program Files\cnnic\Cdn\cdnhint.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnprev.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnprh.dll not found. File/Folder C:\Program Files\cnnic\Cdn\cdnrepl.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnrereg.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnswp.exe not found. File/Folder C:\Program Files\cnnic\Cdn\cdntran.dat not found. File/Folder C:\Program Files\cnnic\Cdn\cdnuc.exe not found. File/Folder C:\Program Files\cnnic\Cdn\cdnunins.exe not found. File/Folder C:\Program Files\cnnic\Cdn\cdnvers.dat not found. File/Folder C:\Program Files\cnnic\Cdn\imadom.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Images\enter.ico not found. File/Folder C:\Program Files\cnnic\Cdn\Images ews.ico not found. File/Folder C:\Program Files\cnnic\Cdn\Images\popup.bmp not found. File/Folder C:\Program Files\cnnic\Cdn\Images\soft.ico not found. File/Folder C:\Program Files\cnnic\Cdn btnhtm.cab not found. File/Folder C:\Program Files\cnnic\Cdn\spkw.dat not found. File/Folder C:\Program Files\cnnic\Cdn\src.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnacs.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnbl.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdncol.dll not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdncrc.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdndet.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdndisp.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnforie.dll not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnhint.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnprev.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnprh.dll not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnprot.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnswp.exe not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdntran.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnuc.exe not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnunins.exe not found. File/Folder C:\Program Files\cnnic\Cdn\Update\cdnvers.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update\enter.ico not found. File/Folder C:\Program Files\cnnic\Cdn\Update\imadom.dat not found. File/Folder C:\Program Files\cnnic\Cdn\Update ews.ico not found. File/Folder C:\Program Files\cnnic\Cdn\Update\popup.bmp not found. File/Folder C:\Program Files\cnnic\Cdn\Update btnhtm.cab not found. File/Folder C:\Program Files\cnnic\Cdn\Update\soft.ico not found. File/Folder C:\Program Files\cnnic\Cdn\Update\spkw.dat not found. File/Folder C:\Program Files\koowo not found. File/Folder C:\Program Files\koowo\Lyric\conf.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\gbk-big5.txt not found. File/Folder C:\Program Files\koowo\Lyric\config\RealMiniConfig.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\SongLrc.txt not found. File/Folder C:\Program Files\koowo\Lyric\config\StringConfig.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\StringConfigBig5.ini not found. File/Folder C:\Program Files\koowo\Lyric\config ag.dat not found. File/Folder C:\Program Files\koowo\Lyric\config aginfo.dat not found. File/Folder C:\Program Files\koowo\Lyric\config\WinampMainConfig.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\WinampMainConfigModern.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\WinampMiniConfig.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\WinampMiniConfigModern.ini not found. File/Folder C:\Program Files\koowo\Lyric\config\WMPMiniConfig.ini not found. File/Folder C:\Program Files\koowo\Lyric\dotag.exe not found. File/Folder C:\Program Files\koowo\Lyric\dump.ax not found. File/Folder C:\Program Files\koowo\Lyric\face\hand-close.cur not found. File/Folder C:\Program Files\koowo\Lyric\face\hand-open.cur not found. File/Folder C:\Program Files\koowo\Lyric\face\kwc.img not found. File/Folder C:\Program Files\koowo\Lyric\face eal\bk.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\close-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\close-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\close-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\full-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\full-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\full-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\mini-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\mini-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\mini-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\pause-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\pause-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\pause-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\play-hover-y.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\play-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\play-normal-y.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\play-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\play-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\stop-disable.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\stop-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\stop-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\stop-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face eal\Thumbs.db not found. File/Folder C:\Program Files\koowo\Lyric\face\svr.img not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\bk.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\bk_color.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\close-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\close.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\ctrlscreen-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\down-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\hand-close.ico not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\hand-open.ico not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\last-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\last-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\left-down.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\left-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\left-top.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\logo-lyrics.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\mini-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\mini-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic ext-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic ext-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\pause-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\pause-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\play-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\play-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic esize.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic ight-down.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic ight-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic ight-top.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\stop-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\stop-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic\Thumbs.db not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\classic op-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\bk.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\bk_color.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\close-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\close.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\ctrlscreen-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\down-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\hand-close.ico not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\hand-open.ico not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\last-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\last-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\last-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\left-down.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\left-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\left-top.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\logo-lyrics.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\mini-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\mini-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\mini.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ext-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ext-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ext-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\pause-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\pause-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\pause-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\play-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\play-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\play-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern esize.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ight-down.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ight-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern ight-top.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\stop-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\stop-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\stop-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\switch.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern\Thumbs.db not found. File/Folder C:\Program Files\koowo\Lyric\face\winamp\modern op-middle.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\bk.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\bk2.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\close.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\full-screen.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\last-disable.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\last-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\last-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\last-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\mini.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp ext-disable.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp ext-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp ext-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp ext-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\pause-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\pause-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\pause-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\play-hover.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\play-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\play-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\stop-disable.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\stop-normal.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\stop-pressed.bmp not found. File/Folder C:\Program Files\koowo\Lyric\face\wmp\switch.bmp not found. File/Folder C:\Program Files\koowo\Lyric\fp.tmp not found. File/Folder C:\Program Files\koowo\Lyric\gen_WMP.dll not found. File/Folder C:\Program Files\koowo\Lyric\KWLyric_wmp.dll not found. File/Folder C:\Program Files\koowo\Lyric\log\act.log not found. File/Folder C:\Program Files\koowo\Lyric\lyric\Justin Timberlake - SexyBack.lrc not found. File/Folder C:\Program Files\koowo\Lyric\lyric eadme.txt not found. File/Folder C:\Program Files\koowo\Lyric ecoEngine.exe not found. File/Folder C:\Program Files\koowo\Lyric\RMSplt.ax not found. File/Folder C:\Program Files\koowo\Lyric\update\KUpdate.exe not found. File/Folder C:\Program Files\koowo\Lyric\update ewup_silent.zip not found. File/Folder C:\Program Files\koowo\Lyric\update\Update.dll not found. File/Folder C:\WINDOWS\photos.zip not found. File/Folder C:\WINDOWS\system32\cdnprot.dat not found. File/Folder C:\WINDOWS\system32\ihxdqtgx.dll not found. File/Folder C:\WINDOWS\system32\lylk.dat not found. File/Folder C:\WINDOWS\system32\plugin.ini not found. File/Folder C:\WINDOWS\system32\webflag.ocx not found. File/Folder C:\WINDOWS\system32\winmmt32.dll not found. File/Folder C:\WINDOWS\system32\yJTELkkj.ini not found. File/Folder C:\WINDOWS\system32\yJTELkkj.ini2 not found. < C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe > C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate-2.3.1.69%20by%20Myp2p.eu.exe moved successfully. File/Folder C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\ppmate_1.7.3.33.exe not found. File/Folder C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe not found. File/Folder C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\setup_2.exe not found. File/Folder C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\Programs\SystemDoctor2006FreeInstall_fr.exe not found. < C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls HTMLn.dll > File/Folder C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls HTMLn.dll not found. < C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll > File/Folder C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zprocess.dll not found. < C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zwnd.dll > File/Folder C:\Program Files\mIRC\Wbs-Script [1.28c]\Wbs-Script\dlls\Zwnd.dll not found. File/Folder C:\WINDOWS\FixCamera.exe not found. H:\Musique\mp3 music\kazaalite_202_b1\first stage\kazaa_lite_202_english.exe moved successfully. OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 05192008_125142

jlpjlp · Answer

Télécharge MSNFix de Laurent
http://sosvirus.changelog.fr/MSNFix.zip

Décompresse-le et double clic sur le fichier MSNFix.bat.
- Exécute l'option R.
--Si l'infection est détectée, exécute l'option N
- Sauvegarde ce rapport puis fais un copier/coller de ce rapport sur le forum.

Note :
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.


envoyer le fichier [b] C:\DOCUME~1\florian\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr pour faire evoluer msnfix

_______________________


si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans

puis redemarre ton ordi
 puis réactive là :

  https://www.informatruc.com

_______________________

encore des problemes????????,

Blackbeard78 · Answer

rapport msnfix:
MSNFix 1.717  
 
C:\Documents and Settings\Compaq_Propri‚taire\Bureau\MSNFix 
Fix exécuté le 19/05/2008 - 12:58:22,78 By Compaq_Propri‚taire 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\autorun.inf 
... C:\Autorun.inf 
... C:\Documents and Settings\Compaq_Propri‚taire\??????.exe 
... C:\Documents and Settings\Compaq_Propri‚taire\????????.exe 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\autorun.inf  
.. OK ... C:\Autorun.inf  
.. OK ... C:\Documents and Settings\Compaq_Propri‚taire\??????.exe  
.. OK ... C:\Documents and Settings\Compaq_Propri‚taire\????????.exe  
 
 
 
************************ Nettoyage du registre 
 
 
 
Les fichiers encore présents seront supprimés au prochain redémarrage 
 
 
Aucun Fichier trouvé 
 
 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\eb2e6n8u.zip] 6859C962884A344AA230B0D89FCB5C05 

[color=#FF0000][b]==>/b/color SVP merci d'envoyer le fichier  [b] C:\DOCUME~1\COMPAQ~1\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr

 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 19052008_13112212.zip
 
************************ HKLM\...\Winlogon\Userinit 
 
Userinit = C:\WINDOWS\system32\userinit.exe, 

Important : http://msnfix.changelog.fr/index.php/2008/05/18/32-alerte


------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

jlpjlp · Answer

si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans

puis redemarre ton ordi
puis réactive là :

https://www.informatruc.com

_______________________


télécharge OTMoveIt 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.  Ou sur  https://www.luanagames.com/index.fr.html
double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en citation ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

Citation : 
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\eb2e6n8u.zip


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 

______________

vire ce qui est dans MOVED FILES en allant dans poste de travail puis C puis otmovitr
______________


encore des problemes????????,

Blackbeard78 · Answer

Apparemment plus de problème.Merci beucoup pour ton aide.
rapport MoveIt:
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\eb2e6n8u.zip moved successfully.
 
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 05192008_180122



P.S: je place ce topic dans la catégorie "problème résolu"

jlpjlp · Answer

utilise tools cleaner pour virer ce que je t'ai fais utiliser

bonne suite:



Télécharge ToolsCleaner sur ton bureau. 
--> https://www.commentcamarche.net/telecharger/ 34055291 toolsclean(...) 
# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 

ps : pas besoin de m´envoyer le rapport si tout a ete supprimer ;-)

Windows has detected a spyware infection+ CID

31 réponses

Newsletters