Gros Probleme, message WindowsRésolu/Fermé

Question

Bonjour,

J'ai un gros problème, je ne comprends vraiment pas d'où cela peut provenir, mais lorsque je me rends dans "programme files" et que je clique sur un dossier, un message s'affiche, que voici :

==> http://pix.nofrag.com/3/0/a/bbe4f090970779eb8f4999d59ebbb.html

Et pourtant j'ai tout fait! Analyse avec Spyware doctor, Avast n'a rien détecté. Et hormis ce message, mon PC ce porte bien. Pas de ralentissement notable, ou autre symptôme de dysfonctionnement.  Serait-il possible de trouver la source de ce message afin de la stopper ? Ou alors, si vous avez une idée du problème de m'aider à m'en débarrasser ?

J'espère avoir de vos réponses au plus vite. En vous remerciant.

Cordialement;

Vincent.

higelin22 · Answer

salut
depuis longtemps????

rglf91 · Answer

ok tu as une infection 

dl malwarebyes sur 

https://www.01net.com/telecharger/windows/Securite/anti-spam/fiches/44096.html

scan ton pc! supprime la ou les infections

DL hijackthis;fait un scan +log file et copie-colle le log dans ta réponse

higelin22 · Answer

hijackthis  ;)

vincent.lt · Answer

Merci à vous deux pour vos réponses.
Cela me le fait depuis ce matin.
Je télécharges tout sa, et je vous tient au courant ;)

vincent.lt · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:21:02, on 13/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\MICROS~4apimgr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Sigma plugin - {7DBF8390-552B-4D55-9F62-00D032032691} - C:\WINDOWS	asect16a.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

higelin22 · Answer

oui tu es bien infectè
telecharge ceci 
http://www.malwarebytes.org:80/mbam/program/mbam-setup.exe



ensuite fait un scan
les fichier infectè vont aller en quarantaine
vide la quarantaine
post ici ton rapport 
ensuite redemarre l ordinateur puis refait un rapport hijackthis et post le aussi s t plait

vincent.lt · Answer

Très bien merci.

vincent.lt · Answer

Voici le rapport, je redémarre et j'exécute la dernière analyse avec hijackthis.

Malwarebytes' Anti-Malware 1.17
Version de la base de données: 851

01:28:49 13/06/2008
mbam-log-6-13-2008 (01-28-49).txt

Type de recherche: Examen rapide
Eléments examinés: 47484
Temps écoulé: 8 minute(s), 13 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{5fd23a1e-7be2-468e-bbfc-a35447122211} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{5fd23a1e-7be2-468e-bbfc-a35447122210} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ie.ieplugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7dbf8390-552b-4d55-9f62-00d032032691} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{7dbf8390-552b-4d55-9f62-00d032032691} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7dbf8390-552b-4d55-9f62-00d032032691} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\ZangoToolbar 4.8.3 (Adware.Zango) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS	asect16a.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\¦Vincent¦\Local Settings\Temp\A66-tmpavideo.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

higelin22 · Answer

vaut mieux qu il le fasse apres a mon avis parce malwarebytes va encore supprimer des saloperie donc y aura forcement du " no name et file missing" tu penses pas??

higelin22 · Answer

ah oui ok ;)

vincent.lt · Answer

Voila le nouveau rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:34:17, on 13/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

vincent.lt · Answer

Voila! Je n'ai plus le soucis! Super! Merci beaucoup!

vincent.lt · Answer

Quels logs sont inutiles ? Que dois je faire?

higelin22 · Answer

je te mettrai demain (car je vais me coucher) les logs a supprimer ou alors rglf91 peut peut etre te le faire si il a le temps
bonne nuit a tous

vincent.lt · Answer

Tres bien merci beaucoup, je passerais voir tout sa demain aussi alors, je vais également me coucher, bonne nuit ;)

higelin22 · Answer

vincent,tu n as pas supprimer ce que malwarebytes t'as mis en quarantaine...
fait le des que tu peux
ensuite redemarre et post un rapport hijackthis
(le dernier n'est pas propre..)

vincent.lt · Answer

Ah oui effectivement désolé, je pensais que tout avait été supprimer automatiquement. Ceci étant fait, voici le nouveau log :


"Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:39:30, on 13/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\MICROS~4apimgr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32
tvdm.exe
C:\WINDOWS\system32
tvdm.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

vincent.lt · Answer

Que dois je faire ?

higelin22 · Answer

bon alors telecharge genproc

http://www.alt-shift-return.org/Info/GenProc-HowTo.html


fait un diagnostique et post moi le rapport s t plait

vincent.lt · Answer

Rapport GenProc 1.970 [1] effectué le 13/06/2008 à 18:17:24,21 - Windows XP  

Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
 
# Etape 1/ Télécharge :  
  
- Lop S&D.exe (Eric 71 & Angeldark) https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 sur ton bureau. 
 
- MSNFix.zip (!aur3n7) http://sosvirus.changelog.fr/MSNFix.zip et décompresse-le sur le Bureau. 
 
 
***** Copie la suite de la procédure dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ (choisis ta session courante "¦Vincent¦") ***** 
 
 
# Etape 2/ 
 
Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
- Exécute l'option R.
- Si l'infection est détectée, exécute l'option N.
- Sauvegarde ce rapport sur ton bureau. 
 
# Etape 3/ 
 
Double-clique sur Lop S&D pour lancer l'installation, séléctionne la langue souhaitée, puis choisis l'Option 2 - Suppression - et patiente jusqu'à ce qu'il ait terminé. 
 
# Etape 4/ 
 
Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout. 
 
# Etape 5/ 

Redémarre normalement et poste, dans la même réponse : 
- Un nouveau rapport HijackThis, toutes fenêtres et applications fermées http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis.exe ; 
- Le contenu du rapport MSNfix situé sur le Bureau ; 
- Le contenu du rapport C:\lopR.txt ; 


Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

vincent.lt · Answer

Voila donc les deux autres rapport, en premier lieu, celui lopR après avoir fait tout ce qui a été demandé. Et le nouveau de hijackthis :

   -----------------------[  Lop S&D 4.2.1-4  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : °Vincent° ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 13/06/2008 | 18:28:44,98 ] [ PC : LOCAL-XPTCRPV1F ]
   [ MAJ : 13-06-2008 | 02:10 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data\bags mail.exe
   Supprimé! - C:\Program Files\Circle Developement\Uninstall.exe
   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\flag ace stupid data
   Supprimé! - C:\Program Files\Adverts
   Supprimé! - C:\Program Files\Circle Developement
   Restauré! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

   Supprimé! - C:\Program Files\Viewpoint
   Supprimé! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   Supprimé! - C:\Program Files\vmntoolbar
   Supprimé! - C:\DOCUME~1\VINCEN~1\APPLIC~1\vmntoolbar
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [06/11/2006|15:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [23/08/2007|17:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [15/02/2008|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [10/11/2006|20:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [11/02/2007|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [11/12/2006|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
   [08/01/2008|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [08/01/2008|10:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [26/01/2008|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [11/05/2007|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [28/05/2008|01:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Codemasters
   [11/12/2006|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
   [06/11/2006|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [15/11/2006|07:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Emjysoft
   [25/12/2007|22:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [05/12/2006|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [26/01/2008|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [10/02/2007|22:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
   [14/08/2007|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [11/11/2006|10:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [18/02/2007|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
   [10/01/2008|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LogiShrd
   [10/01/2008|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [13/06/2008|01:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [02/12/2006|18:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [02/02/2008|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [10/06/2008|05:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [11/03/2007|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
   [10/11/2006|18:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
   [11/11/2006|01:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [10/11/2006|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
   [08/01/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [23/04/2007|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [07/08/2007|20:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [05/07/2007|09:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
   [05/05/2008|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
   [05/05/2008|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson(2)
   [29/02/2008|23:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [27/12/2007|23:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Team dumb bias platform
   [05/05/2008|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
   [13/06/2008|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [11/06/2008|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [30/11/2007|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [03/06/2008|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [15/04/2007|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [10/11/2006|16:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [09/12/2007|01:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [02/01/2007|01:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [06/11/2006|15:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [12/12/2007|23:43] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [28/12/2007|12:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\$_hpcst$.hpc
   [12/05/2007|02:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [08/08/2007|12:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire

   [09/12/2007|06:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [17/02/2008|20:42] C:\DOCUME~1\PASCALL\APPLIC~1\$_hpcst$.hpc
   [05/05/2008|20:23] C:\DOCUME~1\PASCALL\APPLIC~1\Adobe
   [05/05/2008|20:23] C:\DOCUME~1\PASCALL\APPLIC~1\AdobeUM
   [26/04/2008|11:00] C:\DOCUME~1\PASCALL\APPLIC~1\Apple Computer
   [30/04/2008|21:00] C:\DOCUME~1\PASCALL\APPLIC~1\Azureus
   [27/03/2008|19:32] C:\DOCUME~1\PASCALL\APPLIC~1\Corel
   [06/11/2006|15:22] C:\DOCUME~1\PASCALL\APPLIC~1\desktop.ini
   [18/04/2008|14:23] C:\DOCUME~1\PASCALL\APPLIC~1\DivX
   [21/02/2008|13:34] C:\DOCUME~1\PASCALL\APPLIC~1\Google
   [17/02/2008|20:04] C:\DOCUME~1\PASCALL\APPLIC~1\Identities
   [05/05/2008|19:58] C:\DOCUME~1\PASCALL\APPLIC~1\InterTrust
   [27/02/2008|22:55] C:\DOCUME~1\PASCALL\APPLIC~1\Lavasoft
   [23/02/2008|16:46] C:\DOCUME~1\PASCALL\APPLIC~1\Leadertech
   [17/02/2008|20:05] C:\DOCUME~1\PASCALL\APPLIC~1\Logitech
   [17/02/2008|20:34] C:\DOCUME~1\PASCALL\APPLIC~1\Macromedia
   [07/06/2008|10:02] C:\DOCUME~1\PASCALL\APPLIC~1\Microsoft
   [06/06/2008|06:01] C:\DOCUME~1\PASCALL\APPLIC~1\Mozilla
   [13/06/2008|15:08] C:\DOCUME~1\PASCALL\APPLIC~1\OpenOffice.org2
   [13/03/2008|21:13] C:\DOCUME~1\PASCALL\APPLIC~1\Real
   [19/05/2008|10:40] C:\DOCUME~1\PASCALL\APPLIC~1\Skype
   [12/03/2008|07:18] C:\DOCUME~1\PASCALL\APPLIC~1\Sony Ericsson
   [05/05/2008|18:39] C:\DOCUME~1\PASCALL\APPLIC~1\Sun
   [06/06/2008|07:20] C:\DOCUME~1\PASCALL\APPLIC~1\vlc
   [12/06/2008|20:22] C:\DOCUME~1\PASCALL\APPLIC~1\VMNTOOLBAR

   [11/06/2008|20:24] C:\DOCUME~1\Vinc\APPLIC~1\SodaBush

   [19/03/2008|00:33] C:\DOCUME~1\VINCEN~1\APPLIC~1\$_hpcst$.hpc
   [03/06/2008|13:03] C:\DOCUME~1\VINCEN~1\APPLIC~1\Adobe
   [25/04/2008|23:01] C:\DOCUME~1\VINCEN~1\APPLIC~1\Ahead
   [24/03/2008|16:01] C:\DOCUME~1\VINCEN~1\APPLIC~1\ATI
   [12/06/2008|15:58] C:\DOCUME~1\VINCEN~1\APPLIC~1\Azureus
   [08/06/2008|00:08] C:\DOCUME~1\VINCEN~1\APPLIC~1\Bioshock
   [08/05/2008|22:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\BLAHEXITSETTINGS
   [03/06/2008|09:29] C:\DOCUME~1\VINCEN~1\APPLIC~1\Blender Foundation
   [05/04/2008|20:25] C:\DOCUME~1\VINCEN~1\APPLIC~1\Corel
   [06/11/2006|15:22] C:\DOCUME~1\VINCEN~1\APPLIC~1\desktop.ini
   [18/03/2008|23:59] C:\DOCUME~1\VINCEN~1\APPLIC~1\DivX
   [13/05/2008|21:22] C:\DOCUME~1\VINCEN~1\APPLIC~1\Google
   [05/05/2008|20:01] C:\DOCUME~1\VINCEN~1\APPLIC~1\Hamachi
   [11/06/2008|20:24] C:\DOCUME~1\VINCEN~1\APPLIC~1\Help
   [18/03/2008|23:18] C:\DOCUME~1\VINCEN~1\APPLIC~1\Identities
   [28/05/2008|15:42] C:\DOCUME~1\VINCEN~1\APPLIC~1\InstallShield
   [01/05/2008|00:30] C:\DOCUME~1\VINCEN~1\APPLIC~1\InstallShield Installation Information
   [30/05/2008|16:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\LimeWire
   [18/03/2008|23:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\Logitech
   [16/05/2008|20:43] C:\DOCUME~1\VINCEN~1\APPLIC~1\Macromedia
   [13/06/2008|01:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\Malwarebytes
   [02/06/2008|14:37] C:\DOCUME~1\VINCEN~1\APPLIC~1\Microsoft
   [05/06/2008|20:37] C:\DOCUME~1\VINCEN~1\APPLIC~1\Mozilla
   [03/06/2008|21:49] C:\DOCUME~1\VINCEN~1\APPLIC~1\PnkBstrK.sys
   [18/03/2008|23:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\Real
   [28/05/2008|15:58] C:\DOCUME~1\VINCEN~1\APPLIC~1\SecuROM
   [03/05/2008|23:48] C:\DOCUME~1\VINCEN~1\APPLIC~1\Skype
   [11/06/2008|20:25] C:\DOCUME~1\VINCEN~1\APPLIC~1\SodaBush
   [18/03/2008|23:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\Sony Ericsson
   [27/05/2008|17:02] C:\DOCUME~1\VINCEN~1\APPLIC~1\SoundSpectrum
   [02/06/2008|14:38] C:\DOCUME~1\VINCEN~1\APPLIC~1\Stereoscopic Player
   [07/04/2008|08:00] C:\DOCUME~1\VINCEN~1\APPLIC~1\Sun
   [13/06/2008|13:19] C:\DOCUME~1\VINCEN~1\APPLIC~1\SystemRequirementsLab
   [05/05/2008|23:10] C:\DOCUME~1\VINCEN~1\APPLIC~1\Thunderbird
   [19/03/2008|14:46] C:\DOCUME~1\VINCEN~1\APPLIC~1\TuneUp Software
   [20/04/2008|14:01] C:\DOCUME~1\VINCEN~1\APPLIC~1\vlc
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [13/06/2008 18:14][--a------] C:\WINDOWS	asks\Maintenance en 1 clic.job
   [09/06/2008 19:42][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [13/06/2008 17:40][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [13/06/2008 15:00][--a------] C:\WINDOWS	asks\Norton Security Scan.job
   [13/06/2008 18:23][--ah-----] C:\WINDOWS	asks\SA.DAT
   [30/08/2002 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [29/05/2007|13:58] C:\Program Files\@Last Software
   [28/05/2008|15:43] C:\Program Files\2K Games
   [12/12/2006|11:04] C:\Program Files\802.11 Wireless LAN
   [22/03/2008|00:24] C:\Program Files\Activision
   [04/06/2008|09:03] C:\Program Files\Adobe
   [13/10/2007|09:34] C:\Program Files\AGEIA Technologies
   [05/07/2007|09:00] C:\Program Files\Ahead
   [10/11/2006|22:29] C:\Program Files\Alwil Software
   [09/08/2007|20:37] C:\Program Files\Anuman Interactive
   [11/02/2007|18:59] C:\Program Files\AOL
   [10/11/2006|20:53] C:\Program Files\AOLbox
   [08/01/2008|10:56] C:\Program Files\Apple Software Update
   [10/11/2006|20:03] C:\Program Files\ArcSoft
   [26/01/2008|00:58] C:\Program Files\ATI
   [26/01/2008|00:56] C:\Program Files\ATI Technologies
   [19/05/2007|14:22] C:\Program Files\Attack on Pearl Harbor Demo
   [16/05/2007|14:59] C:\Program Files\AusLogics Disk Defrag
   [27/12/2007|23:36] C:\Program Files\AV Music Morpher Gold
   [28/11/2007|21:07] C:\Program Files\AV Vcs 6.0
   [01/07/2007|13:24] C:\Program Files\AviSynth 2.5
   [09/06/2008|21:52] C:\Program Files\Azureus
   [02/08/2007|07:46] C:\Program Files\Backspin Billiards
   [24/06/2007|16:40] C:\Program Files\BattleLauncher
   [23/02/2008|00:56] C:\Program Files\Bethesda Softworks
   [07/04/2007|21:13] C:\Program Files\BfSV
   [02/08/2007|07:42] C:\Program Files\Bigle 3D
   [08/05/2008|22:19] C:\Program Files\BLAHEXITSETTINGS
   [29/05/2007|14:25] C:\Program Files\Blender Foundation
   [18/03/2008|21:46] C:\Program Files\BrowsingProgram
   [10/11/2006|19:44] C:\Program Files\Canon
   [02/10/2007|21:44] C:\Program Files\CCleaner
   [27/05/2007|18:06] C:\Program Files\Celestia
   [05/07/2007|09:00] C:\Program Files\C-Media
   [23/08/2007|12:26] C:\Program Files\Common Files
   [02/02/2008|22:24] C:\Program Files\Corel
   [13/06/2008|16:48] C:\Program Files\Crawler
   [15/01/2007|00:35] C:\Program Files\CursorXP
   [02/08/2007|07:35] C:\Program Files\Deluxe Snake
   [06/01/2008|14:41] C:\Program Files\DivX
   [29/07/2007|13:07] C:\Program Files\Driver Cleaner Pro
   [10/11/2006|23:32] C:\Program Files\D-Tools
   [02/08/2007|07:35] C:\Program Files\DXBall2
   [23/08/2007|16:46] C:\Program Files\EA GAMES
   [12/11/2006|15:40] C:\Program Files\e-Carte Bleue
   [22/03/2008|12:52] C:\Program Files\e-Carte Bleue La Banque Postale
   [02/12/2007|17:10] C:\Program Files\El Juky
   [15/11/2006|07:58] C:\Program Files\Emjysoft
   [05/07/2007|09:00] C:\Program Files\eMule
   [05/05/2008|19:59] C:\Program Files\Fichiers communs
   [05/11/2007|03:14] C:\Program Files\Fight for Kisses
   [24/12/2007|03:12] C:\Program Files\FLV PlayerFCSetup.exe
   [24/12/2007|03:11] C:\Program Files\FLV PlayerRCATSetup.exe
   [24/12/2007|03:09] C:\Program Files\FLV PlayerRCSetup.exe
   [05/08/2007|10:37] C:\Program Files\FolderSizes
   [03/09/2007|02:39] C:\Program Files\Foolish Entertainment
   [13/08/2007|10:18] C:\Program Files\Free Spider
   [05/07/2007|09:00] C:\Program Files\Futuremark
   [28/03/2007|12:54] C:\Program Files\Game Cam v1.4
   [22/11/2007|23:44] C:\Program Files\GameSpy Arcade
   [10/11/2006|20:24] C:\Program Files\Generic
   [24/12/2007|03:08] C:\Program Files\GeoVid
   [11/04/2007|00:10] C:\Program Files\GoldWave
   [13/05/2008|21:24] C:\Program Files\Google
   [01/03/2008|12:29] C:\Program Files\Hercules
   [10/02/2007|22:42] C:\Program Files\Hewlett-Packard
   [10/02/2007|22:47] C:\Program Files\HP
   [28/05/2008|15:43] C:\Program Files\InstallShield Installation Information
   [06/11/2006|15:56] C:\Program Files\Intel
   [06/11/2006|15:54] C:\Program Files\Intel Desktop Boards
   [10/06/2008|22:52] C:\Program Files\Internet Explorer
   [14/12/2006|10:59] C:\Program Files\Inventel
   [11/03/2008|19:10] C:\Program Files\Java
   [28/07/2007|16:16] C:\Program Files\Kaspersky Lab
   [05/07/2007|09:00] C:\Program Files\K-Lite Codec Pack
   [18/02/2007|11:14] C:\Program Files\Kodak
   [19/11/2007|19:15] C:\Program Files\KONAMI
   [15/03/2007|20:31] C:\Program Files\Lavalys
   [06/12/2006|23:03] C:\Program Files\Lavasoft
   [10/11/2006|19:06] C:\Program Files\Learn2.com
   [01/06/2008|14:33] C:\Program Files\LimeWire
   [10/01/2008|19:35] C:\Program Files\Logitech
   [22/11/2007|23:44] C:\Program Files\ma-config.com
   [08/10/2007|17:22] C:\Program Files\Macrogaming
   [13/06/2008|01:19] C:\Program Files\Malwarebytes' Anti-Malware
   [30/03/2008|19:53] C:\Program Files\ManyCam 2.2
   [16/05/2007|09:44] C:\Program Files\Maxis
   [08/05/2008|22:08] C:\Program Files\Messenger
   [25/05/2008|12:10] C:\Program Files\Messenger Plus! Live
   [13/11/2006|23:34] C:\Program Files\MessengerPlus! 3
   [18/02/2007|10:08] C:\Program Files\Microsoft ActiveSync
   [06/11/2007|20:57] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [06/11/2006|15:46] C:\Program Files\microsoft frontpage
   [20/05/2008|23:54] C:\Program Files\Microsoft Games
   [02/02/2008|19:31] C:\Program Files\Microsoft Office
   [05/07/2007|09:50] C:\Program Files\Microsoft SQL Server
   [09/12/2007|02:05] C:\Program Files\Microsoft SQL Server Compact Edition
   [12/11/2006|13:45] C:\Program Files\Microsoft Visual Studio
   [02/02/2008|19:24] C:\Program Files\Microsoft Visual Studio 8
   [02/02/2008|19:31] C:\Program Files\Microsoft Works
   [02/02/2008|19:30] C:\Program Files\Microsoft.NET
   [10/11/2006|20:04] C:\Program Files\MKE
   [11/06/2008|20:25] C:\Program Files\Mototos
   [08/05/2008|22:08] C:\Program Files\Movie Maker
   [13/06/2008|18:14] C:\Program Files\Mozilla Firefox
   [02/02/2008|19:31] C:\Program Files\MSBuild
   [31/10/2007|12:04] C:\Program Files\MSN
   [06/11/2006|15:44] C:\Program Files\MSN Gaming Zone
   [15/08/2007|15:01] C:\Program Files\MSXML 4.0
   [15/08/2007|15:03] C:\Program Files\MSXML 6.0
   [13/06/2007|10:29] C:\Program Files\Navilog1
   [28/03/2007|01:57] C:\Program Files\Neoact
   [08/05/2008|22:13] C:\Program Files\NetMeeting
   [11/02/2007|20:09] C:\Program Files\Neuf
   [19/08/2007|12:04] C:\Program Files\NKProds
   [08/02/2008|16:00] C:\Program Files\Norton Security Scan
   [28/05/2008|01:16] C:\Program Files\OpenAL
   [17/12/2007|10:34] C:\Program Files\OpenOffice.org 2.2
   [20/02/2008|18:29] C:\Program Files\OpenOffice.org 2.3
   [08/05/2008|22:13] C:\Program Files\Outlook Express
   [20/04/2007|19:01] C:\Program Files\PhotoBox
   [10/11/2006|19:48] C:\Program Files\Pinnacle
   [14/03/2007|10:10] C:\Program Files\PixDiscount
   [26/03/2007|21:20] C:\Program Files\Porrasturvat - Stair Dismount
   [29/05/2008|00:48] C:\Program Files\Postal2STP
   [04/01/2007|14:50] C:\Program Files\Project64 1.6
   [07/10/2007|10:53] C:\Program Files\Project64 v1.5
   [09/01/2008|17:26] C:\Program Files\QuickTime
   [04/07/2007|16:43] C:\Program Files\RamBoost XP
   [24/05/2007|20:57] C:\Program Files\Real
   [15/01/2007|00:17] C:\Program Files\Reference Assemblies
   [01/04/2007|02:11] C:\Program Files\RegCleaner
   [03/01/2008|10:44] C:\Program Files\Replay Converter
   [24/12/2007|03:16] C:\Program Files\Replay Media Catcher
   [24/05/2007|20:57] C:\Program Files\RngInterstitial.dll
   [19/03/2008|00:23] C:\Program Files\RocketDock
   [22/11/2007|23:44] C:\Program Files\Room Arranger
   [16/01/2008|22:51] C:\Program Files\SanDisk
   [28/09/2007|23:28] C:\Program Files\SEGA
   [06/11/2006|15:44] C:\Program Files\Services en ligne
   [07/08/2007|20:57] C:\Program Files\Skype
   [29/01/2008|00:49] C:\Program Files\Sleepy
   [24/12/2007|03:27] C:\Program Files\Snowball
   [11/03/2007|09:25] C:\Program Files\SodaBush
   [11/03/2008|21:42] C:\Program Files\Sony
   [05/05/2008|19:59] C:\Program Files\Sony Ericsson
   [11/03/2008|21:41] C:\Program Files\Sony Setup
   [02/08/2007|07:40] C:\Program Files\Soulseek
   [27/05/2008|17:00] C:\Program Files\SoundSpectrum
   [15/02/2008|18:38] C:\Program Files\Spamihilator
   [27/02/2008|19:10] C:\Program Files\Spybot - Search & Destroy
   [13/06/2008|01:09] C:\Program Files\Spyware Doctor
   [25/05/2007|22:21] C:\Program Files\Stardock
   [02/06/2008|14:37] C:\Program Files\Stereoscopic Player
   [12/05/2007|01:57] C:\Program Files\Streamload
   [05/06/2008|23:09] C:\Program Files\Styler
   [13/06/2008|16:48] C:\Program Files\SurfingSoftware
   [30/11/2007|19:21] C:\Program Files\SWAT4
   [29/05/2008|00:23] C:\Program Files\SystemRequirementsLab
   [13/08/2007|17:41] C:\Program Files\Teamspeak2_RC2
   [10/11/2006|19:04] C:\Program Files\TechCity Solutions
   [11/05/2007|06:16] C:\Program Files\TestYourCPU
   [29/07/2007|10:02] C:\Program Files\The All-Seeing Eye
   [20/04/2008|14:41] C:\Program Files\The Sir. Community
   [11/06/2008|15:52] C:\Program Files\TmUnitedForever
   [16/04/2008|10:38] C:\Program Files\TrackMania United
   [13/06/2008|01:19] C:\Program Files\Trend Micro
   [08/06/2008|23:09] C:\Program Files\TubeMaster
   [03/06/2008|20:26] C:\Program Files\TuneUp Utilities 2008
   [05/05/2008|20:01] C:\Program Files\Ubisoft
   [06/11/2006|15:49] C:\Program Files\Uninstall Information
   [01/04/2007|02:13] C:\Program Files\Valve
   [11/12/2007|23:02] C:\Program Files\Veoh Networks
   [13/12/2007|08:01] C:\Program Files\Verbes Irr‚guliers
   [30/05/2008|02:11] C:\Program Files\VideoLAN
   [21/02/2008|16:38] C:\Program Files\Virtools
   [02/08/2007|07:44] C:\Program Files\Visicom Media
   [05/07/2007|09:49] C:\Program Files\Vstplugins
   [05/08/2007|22:01] C:\Program Files\windirstat
   [27/02/2008|18:29] C:\Program Files\Windows Live
   [09/12/2007|02:04] C:\Program Files\Windows Live Favorites
   [23/12/2007|14:16] C:\Program Files\Windows Live Toolbar
   [18/02/2007|22:19] C:\Program Files\Windows Media Components
   [28/11/2007|21:07] C:\Program Files\Windows Media Connect 2
   [08/05/2008|22:13] C:\Program Files\Windows Media Player
   [08/05/2008|22:07] C:\Program Files\Windows NT
   [27/06/2007|00:14] C:\Program Files\WinMX
   [11/11/2006|01:34] C:\Program Files\WinRAR
   [06/11/2006|15:46] C:\Program Files\xerox
   [27/12/2007|23:36] C:\Program Files\Xfire
   [22/11/2007|23:44] C:\Program Files\Xvid
   [24/12/2006|19:58] C:\Program Files\Yahoo!
   [16/05/2007|20:52] C:\Program Files\YesMessenger
   [22/11/2007|23:44] C:\Program Files\Yodm3D
   [26/12/2006|15:10] C:\Program Files\Zeb-Utility
   [09/03/2007|01:52] C:\Program Files\ZNsoft Corporation
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [04/06/2008|09:03] C:\Program Files\Fichiers communs\Adobe
   [15/05/2007|05:23] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [10/11/2006|20:20] C:\Program Files\Fichiers communs\Ahead
   [11/02/2007|19:08] C:\Program Files\Fichiers communs\AOL
   [10/11/2006|19:06] C:\Program Files\Fichiers communs\aolback
   [30/04/2008|21:07] C:\Program Files\Fichiers communs\Borland Shared
   [02/02/2008|22:42] C:\Program Files\Fichiers communs\Corel
   [12/11/2006|13:45] C:\Program Files\Fichiers communs\Designer
   [04/04/2007|23:10] C:\Program Files\Fichiers communs\DirectX
   [14/12/2006|10:59] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
   [18/02/2007|22:19] C:\Program Files\Fichiers communs\FotoWire
   [14/02/2008|22:43] C:\Program Files\Fichiers communs\Futuremark Shared
   [10/11/2006|20:11] C:\Program Files\Fichiers communs\Hewlett-Packard
   [10/02/2007|22:44] C:\Program Files\Fichiers communs\HP
   [11/11/2006|10:44] C:\Program Files\Fichiers communs\InstallShield
   [14/03/2007|00:54] C:\Program Files\Fichiers communs\Java
   [10/01/2008|19:35] C:\Program Files\Fichiers communs\Logishrd
   [18/02/2007|22:21] C:\Program Files\Fichiers communs\Logitech
   [25/12/2007|21:57] C:\Program Files\Fichiers communs\Macrovision Shared
   [02/02/2008|19:41] C:\Program Files\Fichiers communs\Microsoft Shared
   [06/11/2006|15:45] C:\Program Files\Fichiers communs\MSSoap
   [10/11/2006|20:22] C:\Program Files\Fichiers communs\Nero
   [10/11/2006|19:05] C:\Program Files\Fichiers communs\Nullsoft
   [02/02/2008|19:29] C:\Program Files\Fichiers communs\ODBC
   [18/08/2007|19:31] C:\Program Files\Fichiers communs\ParallelGraphics
   [13/09/2007|14:35] C:\Program Files\Fichiers communs\Real
   [15/11/2006|14:45] C:\Program Files\Fichiers communs\Scanner
   [06/11/2006|15:45] C:\Program Files\Fichiers communs\Services
   [07/08/2007|20:57] C:\Program Files\Fichiers communs\Skype
   [05/05/2008|20:03] C:\Program Files\Fichiers communs\Sony Ericsson Shared
   [06/11/2006|15:22] C:\Program Files\Fichiers communs\SpeechEngines
   [19/03/2008|00:18] C:\Program Files\Fichiers communs\Stardock
   [10/02/2008|07:58] C:\Program Files\Fichiers communs\Symantec Shared
   [08/05/2008|22:13] C:\Program Files\Fichiers communs\System
   [15/03/2007|08:32] C:\Program Files\Fichiers communs\SystemRequirementsLab
   [05/05/2008|20:03] C:\Program Files\Fichiers communs\Teleca Shared
   [25/05/2007|06:43] C:\Program Files\Fichiers communs\TerraGame Shared
   [09/12/2007|01:55] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [03/06/2008|20:25] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [13/09/2007|14:35] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... 14

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-06-13 18:31:52
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   => C:\Documents and Settings\ÝVincentÝ\Bureau\Vincent\Bureau\-\Gif_Movie_Gear_4.0.2_crack_pifoman.zip
   => C:\Documents and Settings\ÝVincentÝ\Bureau\Vincent\Bureau\-\PhotoShop_9.0_CS2_crack_pifoman.zip
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-356E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetail.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetaillightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetaillightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackparallaxdetailshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetail.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetaillightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackparallaxdetailshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-586E-7801A1C2CB35}_2965_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-736E-7801A1C2CB35}_2965_2ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\ÝVincentÝ\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71EE2-31C0-11CF-7

vincent.lt · Answer

Tout est enfin bon ? Merci encore énormément pour tout. C'est vraiment gentil.

vincent.lt · Answer

UP!

higelin22 · Answer

salut
redemarre l ordinateur ensuite repost moi un rapport hijackthis s t plait

vincent.lt · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:08:39, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

higelin22 · Answer

tu as encore des cochonnerie


Téléchargez SmitFraudFix et dézipez le sur le bureau.  http://siri.urz.free.fr/Fix/SmitfraudFix.exe

 
Téléchargez et installez Malwarebyte's Anti-Malware    Télécharger Malwarebyte's Anti-Malware

Démarrez Windows en mode sans échec   ( au demarrage appuyer sur F8)
Executez le SmitFraudFix 
et lancez le fichier SmitfraudFix.cmd 

Choisissez l'option 2 et appuie sur Entrée 
Répondez o (Oui) aux deux questions suivantes si elles sont posées 
Afin de supprimer toutes traces du spyware et d'autres élements qu'il aurait pu installer, 

ensuite scannez votre ordinateur avec : 
Malwarebyte's Anti-Malware 
une fois qu il aura trouvè une infection est terminè son boulot supprime ce qui est infectè ( ou que tu as mis en quarantaine)

telecharge cleaner https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
dans la section nettoyeur coche
internet explorer windows explorer systeme
ensuite analyse puis lancer le nettoyage...
(tu peux analyser 2 ou trois fois a suivre pour eviter toute traces)
ensuite section registre
fait
chercher les erreurs puis reparer les err. selectionnèes
voila
ensuite redemarre puis refait une analyse hijackthis et poste le moi s t p

vincent.lt · Answer

J'ai déjà fait tout sa, étrange :/

higelin22 · Answer

ok alors laisse tomber malwarebytes mais fait smithfraud
 ( tu l as pas fait smithfraud ??)

vincent.lt · Answer

Non pas fait de smithfraud, je cherche ou le DL et je fait sa de suite. Merci!

vincent.lt · Answer

Tout le monde dit que c'est un Trojan, normale ?

higelin22 · Answer

oui
et il te reste deux infections

higelin22 · Answer

tu es toujours la?

vincent.lt · Answer

Oui! je lance smithfraud !

higelin22 · Answer

ok

vincent.lt · Answer

La j'ai désactivé avast, et j'exécute une recherche avec le logiciel ;)

Je nettoie directement ensuite ?

vincent.lt · Answer

SmitFraudFix v2.324

Rapport fait à  1:41:55,70, 14/06/2008
Executé à partir de C:\Documents and Settings\ÝVincentÝ\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ÝVincentÝ


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ÝVincentÝ\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» 


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

higelin22 · Answer

ok 
une fois que tu as fait ceci 

Télécharge VundoFix.exe (par Atribune) sur ton Bureau. 
http://www.atribune.org/ccount/click.php?id=4 

* Double-clique VundoFix.exe afin de le lancer. 
* Lorsque l'outil se lance à nouveau, clique sur le bouton Scan for Vundo 
* Clique sur le bouton Scan for Vundo. 
* Lorsque le scan est complété, clique sur le bouton Remove Vundo 
* Une invite te demandera si tu veux supprimer les fichiers, clique YES 
* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers. 
* Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK 
* Démarre ton PC à nouveau. 
* Copie/colle le contenu du rapport situé dans C:\vundofix.txt 


Télécharge VirtumundoBegone sur le bureau: 
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe 

Double clique ensuite sur VirtumundoBeGone.exe et suis les instructions. 
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le bureau dans ta prochaine réponse 


ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

higelin22 · Answer

je sais ça fait du boulot mais c'est pour la sante et securitè de ton ordinateur   ;)

vincent.lt · Answer

Merci beaucoup, donc la j'ai fait la recherche avec smith, et là Vundofix effectue un scanning.
Dois je faire le nettoyage avec le logiciel smith ? (en "2" ). Je n'ai fait que l'étape "1" (recherche).

higelin22 · Answer

oui execute 2

higelin22 · Answer

bon je vais me coucher ;)
je reviens demain de toute façon 
post moi les rapports
logiquement tu devrai etre debarassè 
bonne nuit

vincent.lt · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:01:55, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

higelin22 · Answer

ok maintenant fait cela
ouvre hijackthis
fait scan only
puis coche les case suivante

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
O2 - BHO: SurfingSoftware - {D4070176-F144-22CD-0D5C-71B49B46FF19} - C:\Program Files\SurfingSoftware\SurfingSoftware-2.dll
O2 - BHO: BrowsingProgram - {F8EACE56-0AF4-3AE3-6EF8-F8CC39675729} - C:\Program Files\BrowsingProgram\BrowsingProgram-2.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
 

ensuite fait fixed check

une fois fait
refait un coup de cleaner
redemarre l ordinateur et dit moi comment vas ton ordinateur

vincent.lt · Answer

Super merci beaucoup ! Tout à l'air comme neuf! Voici un dernier rapport si jamais :/

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:08:04, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66005
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://ad.zanox.com/ppc/html/ppc_error_1.htmlZMFR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll (file missing)
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart (User '¦Vincent¦')
O4 - HKUS\S-1-5-21-583907252-764733703-725345543-1012\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe (User '¦Vincent¦')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User '¦Vincent¦')
O4 - S-1-5-21-583907252-764733703-725345543-1012 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User '¦Vincent¦')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll (file missing)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\Sandisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

higelin22 · Answer

refait scan only 
puis coche les case suivante 

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll (file missing)


ensuite fait fixed check 

et ce sera tout  ;)

voila si tu es satisfait met resolu a plus

Gros Probleme, message Windows

45 réponses

Discussions similaires

Newsletters