Demande aide de pro pour Antivirus XP 2008

luckybrunel Messages postés 6 Statut Membre -
g!rly Messages postés 18462 Statut Contributeur - 30 juin 2008 à 18:45

Bonjour,
je n'en peut plus .....

d'habitude quand j'ai un virus je me debrouille seul avec avast et un bon scan mais la jai un probleme vu que je suis tomber sur un virus plutot coriace

je suis sous windows xp avec un pc packard bell et avast comme antivirus
je me suis fait attaquer par un virus que j'ai recu et executé betement sans savoir ce que cetait

je me suis renseigner en lisant plusieur forum mais j'arrive vraiment pas a le virer, pourtant le programme ne fait plus parti de ma liste vu ke je l'ai desistaller ... ce qui n'est pas logique, il a du se mettre quelque part

quand jallume mon pc ... hop fond d'ecran bleu avec le message qu'un virus est present
un ecran de reboot saffiche quand je suis inactif (c'est un fake je sais mais c'est chiant)

bref je vai pas raconter ma vie jai fait un scan Hijackthis et voici ce que sa donne

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:51:25, on 28/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\apps\ABoard\AOSD.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\lphc9jdj0eg29.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\OFFICE One6.5\program\soffice.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
D:\Documents and Settings\maxime.luckybrunel\Bureau\eden.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [lphc9jdj0eg29] C:\WINDOWS\system32\lphc9jdj0eg29.exe
O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 11528 bytes

si quelqu'un pouvait m'aider je lui en serai reconnaissant ^^

Configuration: Windows XP
Firefox 3.0

Afficher la suite

A voir également:

Demande aide de pro pour Antivirus XP 2008
Clé windows 10 pro - Guide
Realme 14 pro vs realme 14 pro plus - Guide
Cool edit pro - Télécharger - Édition & Montage
Apple iphone 17 pro max - Guide
Avast antivirus gratuit - Télécharger - Antivirus & Antimalwares

7 réponses

Réponse 1 / 7
g!rly Messages postés 18462 Statut Contributeur 407

salut,

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Post également un nouveau rapport hijack this dans ta réponse

@+
0
1. luckybrunel Messages postés 6 Statut Membre
  
  eh eh eh eh la bonne blague j'ai une nouvelle fenetre du genre a s'etre mise en bas a droite de mon ecran
  
  "malware protector" 145 threats located j'ai regarder dans ma liste de programe ... et tadiiin un programme installer de je ne sais pas d'ou
  
  c'est le meme genre de antivirus XP ,?? je suppose que oui
  
  mon pc n'a pas rebooter je met le rapport combo fix
  
  ComboFix 08-06-20.4 - maxime 2008-06-28 13:35:31.1 - NTFSx86
  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.476 [GMT 2:00]
  Endroit: D:\Documents and Settings\maxime.luckybrunel\Bureau\ComboFix.exe
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  C:\WINDOWS\system32\nvs2.inf
  
  .
  ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-28 ))))))))))))))))))))))))))))))))))))
  .
  
  2008-06-28 13:28 . 2008-06-28 13:28 90,838 --a------ C:\WINDOWS\system32\phc9jdj0eg29.bmp
  2008-06-26 13:03 . 2008-06-27 03:43 <REP> d-------- C:\Program Files\Yahoo!
  2008-06-26 13:02 . 2008-06-26 13:06 <REP> d-------- C:\Program Files\RM-X® Easy Compress
  2008-06-26 12:58 . 2008-06-26 12:58 <REP> d-------- C:\Program Files\Ripp-it_AM
  2008-06-26 02:01 . 2008-06-26 02:01 <REP> d-------- D:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- D:\Documents and Settings\maxime.luckybrunel\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\SUPERAntiSpyware
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
  2008-06-26 00:23 . 2008-06-26 01:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
  2008-06-25 23:31 . 2008-06-25 23:31 <REP> d-------- D:\Documents and Settings\maxime.luckybrunel\Application Data\rhccjdj0eg29
  2008-06-25 23:30 . 2008-06-25 23:30 109,056 --a------ C:\WINDOWS\system32\lphc9jdj0eg29.exe
  2008-06-25 23:28 . 2008-06-25 23:28 <REP> d-------- C:\Program Files\Digital Photo Navigator 1.5
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC\LOCALS~1
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC
  2008-06-25 23:21 . 2008-06-25 23:26 <REP> d-------- C:\Program Files\4U Computing
  2008-06-25 23:19 . 2003-09-23 18:31 794,624 --a------ C:\WINDOWS\system32\mpgfiltr.ax
  2008-06-25 23:19 . 2003-10-07 22:15 348,160 --a------ C:\WINDOWS\system32\axVideoConvert.dll
  2008-06-25 23:11 . 2008-06-25 23:13 <REP> d-------- C:\Program Files\Cool All Video Converter Platinum
  2008-06-25 23:11 . 2008-06-25 23:11 34 --ah----- C:\WINDOWS\system32\Converter_sysquict.dat
  2008-06-25 22:33 . 2008-06-25 22:33 <REP> d-------- C:\Program Files\AviSynth 2.5
  2008-06-25 22:33 . 2004-02-22 10:11 719,872 --a------ C:\WINDOWS\system32\devil.dll
  2008-06-25 22:33 . 2006-10-07 17:43 502,784 --a------ C:\WINDOWS\x2.64.exe
  2008-06-25 22:33 . 2008-02-07 16:15 408,576 --a------ C:\WINDOWS\system32\Smab.dll
  2008-06-25 22:33 . 2007-05-17 17:30 318,976 --a------ C:\WINDOWS\system32\avisynth.dll
  2008-06-25 22:33 . 2005-02-28 13:16 240,128 --a------ C:\WINDOWS\system32\x.264.exe
  2008-06-25 22:33 . 2006-04-12 09:47 217,073 --a------ C:\WINDOWS\meta4.exe
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\yv12vfw.dll
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\i420vfw.dll
  2008-06-25 22:33 . 2006-04-05 08:09 66,560 --a------ C:\WINDOWS\MOTA113.exe
  2008-06-25 22:33 . 2005-07-14 12:31 27,648 --a------ C:\WINDOWS\system32\AVSredirect.dll
  2008-06-25 22:32 . 2008-06-25 22:32 <REP> d-------- C:\Program Files\eRightSoft
  2008-06-25 22:32 . 2005-02-13 01:00 186,880 -r-hs---- C:\WINDOWS\system32\RLOgg.ax
  2008-06-25 22:32 . 2005-01-18 01:26 179,200 -r-hs---- C:\WINDOWS\system32\DiracSplitter.ax
  2008-06-25 22:32 . 2005-02-06 01:00 92,672 -r-hs---- C:\WINDOWS\system32\RLVorbisDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 67,584 -r-hs---- C:\WINDOWS\system32\RLTheoraDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 51,712 -r-hs---- C:\WINDOWS\system32\RLSpeexDec.ax
  2008-06-24 20:08 . 2003-12-05 20:46 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
  2008-06-24 20:06 . 2008-06-24 20:07 <REP> d-------- C:\Program Files\CyberLink DVD Solution
  2008-06-24 20:06 . 2004-08-09 23:30 40,960 --a------ C:\Program Files\Uninstall_CDS.exe
  2008-06-18 17:55 . 2008-06-18 17:55 <REP> d-------- D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint
  2008-06-16 22:56 . 2008-06-16 22:56 244 --ah----- C:\sqmnoopt09.sqm
  2008-06-16 22:56 . 2008-06-16 22:56 232 --ah----- C:\sqmdata09.sqm
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys
  2008-06-10 20:28 . 2007-02-08 12:56 90,800 -ra------ C:\WINDOWS\system32\drivers\sea1unic.sys
  2008-06-10 20:28 . 2007-02-08 12:56 18,704 -ra------ C:\WINDOWS\system32\drivers\sea1nd5.sys
  2008-06-10 20:28 . 2007-02-08 12:55 4,128 -ra------ C:\WINDOWS\system32\drivers\sea1cr.sys
  2008-06-02 11:31 . 2008-06-02 11:31 244 --ah----- C:\sqmnoopt08.sqm
  2008-06-02 11:31 . 2008-06-02 11:31 232 --ah----- C:\sqmdata08.sqm
  2008-06-01 23:31 . 2007-02-08 12:56 88,624 -ra------ C:\WINDOWS\system32\drivers\sea1mgmt.sys
  2008-06-01 23:31 . 2007-02-08 12:56 86,432 -ra------ C:\WINDOWS\system32\drivers\sea1obex.sys
  2008-05-30 12:27 . 2008-04-23 06:16 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
  2008-05-30 12:27 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
  2008-05-30 12:27 . 2007-03-08 07:10 1,048,576 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
  2008-05-30 12:27 . 2008-04-23 06:16 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
  2008-05-30 12:27 . 2008-04-23 06:16 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
  2008-05-30 12:27 . 2008-04-23 06:16 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
  2008-05-30 12:27 . 2008-04-23 06:16 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
  2008-05-30 12:27 . 2008-04-23 06:16 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
  2008-05-30 12:27 . 2008-04-22 09:39 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
  2008-05-29 22:14 . 2008-06-30 20:24 <REP> d-------- C:\WINDOWS\system32\fr-fr
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2008-06-28 11:34 60,928 ----a-w C:\WINDOWS\system32\blphc9jdj0eg29.scr
  2008-06-28 11:32 --------- d-----w C:\Program Files\Wanadoo
  2008-06-27 02:08 --------- d-----w C:\Program Files\Everest Poker
  2008-06-27 00:13 --------- d-----w C:\Program Files\eMule
  2008-06-25 21:28 --------- d--h--w C:\Program Files\InstallShield Installation Information
  2008-06-25 18:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\CyberLink
  2008-06-24 18:07 --------- d-----w C:\Program Files\CyberLink
  2008-05-12 12:35 --------- d-----w C:\Program Files\Disc2Phone
  2008-05-12 12:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Teleca
  2008-05-12 12:27 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Teleca
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Teleca Shared
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Sony Ericsson Shared
  2008-05-12 12:21 --------- d-----w C:\Program Files\Sony Ericsson
  2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
  2008-05-08 12:28 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys
  2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
  2008-05-07 05:15 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll
  2008-05-06 18:34 --------- d-----w C:\Program Files\ColiPoste
  2008-04-23 20:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
  2008-04-22 07:41 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
  2008-04-22 07:41 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
  2008-04-20 05:07 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
  2006-06-14 15:52 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
  .
  
  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  REGEDIT4
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880]
  "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
  "RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-03-19 01:05 630784]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 20:03 152872]
  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
  "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952]
  "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]
  "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
  "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272]
  "Ulead AutoDetector v2"="C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe" [2004-11-26 11:43 90112]
  "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-05-11 13:48 127118]
  "ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 11:31 24576]
  "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480]
  "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768]
  "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]
  "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
  "FixCamera"="C:\WINDOWS\FixCamera.exe" [ ]
  "tsnp2std"="C:\WINDOWS\tsnp2std.exe" [2006-01-06 18:39 110592]
  "snp2std"="C:\WINDOWS\vsnp2std.exe" [2006-01-06 14:57 344064]
  "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
  "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
  "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
  "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 09:26 180269]
  "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-01-26 13:36 495616]
  "lphc9jdj0eg29"="C:\WINDOWS\system32\lphc9jdj0eg29.exe" [2008-06-25 23:30 109056]
  "OoPDFSettingsv6.exe"="C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe" [2003-11-20 11:38 460800]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]
  
  D:\Documents and Settings\maxime.luckybrunel\Menu D‚marrer\Programmes\D‚marrage\
  OFFICE One 6.5.lnk - C:\Program Files\OFFICE One6.5\program\quickstart.exe [2004-03-08 07:00:00 36864]
  
  D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
  HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 23:23:26 282624]
  OFFICE One Notes v6.5.lnk - C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe [2006-06-29 21:37:44 559104]
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "VIDC.I420"= i420vfw.dll
  "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
  "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
  "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
  "vidc.yv12"= yv12vfw.dll
  "vidc.ffds"= ffdshow.ax
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "AntiVirusOverride"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%ProgramFiles%\\AOL 9.0\\aol.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
  "%windir%\\system32\\sessmgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
  "C:\\Program Files\\eMule\\emule.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
  "C:\\Program Files\\iTunes\\iTunes.exe"=
  "C:\\WINDOWS\\system32\\javaw.exe"=
  "C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
  "C:\\APPS\\Ulead Systems\\Ulead VideoStudio 8.0 SE DVD\\vstudio.exe"=
  
  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
  R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-05-13 15:57]
  S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM);C:\WINDOWS\system32\DRIVERS\sea1bus.sys [2007-02-08 12:55]
  S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\sea1mdfl.sys [2007-02-08 12:55]
  S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\sea1mdm.sys [2007-02-08 12:55]
  S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\sea1mgmt.sys [2007-02-08 12:56]
  S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS);C:\WINDOWS\system32\DRIVERS\sea1nd5.sys [2007-02-08 12:56]
  S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\sea1obex.sys [2007-02-08 12:56]
  S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM);C:\WINDOWS\system32\DRIVERS\sea1unic.sys [2007-02-08 12:56]
  
  *Newly Created Service* - CATCHME
  .
  Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
  "2008-06-21 21:05:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
  - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
  .
  **************************************************************************
  
  catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2008-06-28 13:38:20
  Windows 5.1.2600 Service Pack 2 NTFS
  
  Balayage processus cachés ...
  
  Balayage caché autostart entries ...
  
  Balayage des fichiers cachés ...
  
  Scan terminé avec succès
  Les fichiers cachés: 0
  
  **************************************************************************
  .
  Temps d'accomplissement: 2008-06-28 13:39:05
  ComboFix-quarantined-files.txt 2008-06-28 11:39:02
  
  Pre-Run: 21,069,623,296 octets libres
  Post-Run: 21,095,686,144 octets libres
  
  212 --- E O F --- 2008-06-20 01:00:53
  
  et je relance un scan Hijackthis
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 13:44:57, on 28/06/2008
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16674)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  C:\WINDOWS\System32\FTRTSVC.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
  c:\APPS\HIDSERVICE\HIDSERVICE.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
  C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  C:\Apps\Powercinema\PCMService.exe
  C:\apps\ABoard\ABoard.exe
  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  C:\WINDOWS\tsnp2std.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\QuickTime\QTTask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\apps\ABoard\AOSD.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
  C:\WINDOWS\system32\lphc9jdj0eg29.exe
  C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
  C:\Program Files\RocketDock\RocketDock.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  C:\Program Files\OFFICE One6.5\program\soffice.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\WINDOWS\explorer.exe
  C:\Program Files\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Wanadoo\Watch.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\Program Files\shcejdj0eg29\shcejdj0eg29.exe
  D:\Documents and Settings\maxime.luckybrunel\Bureau\eden.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
  O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
  O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
  O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
  O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
  O4 - HKLM\..\Run: [lphc9jdj0eg29] C:\WINDOWS\system32\lphc9jdj0eg29.exe
  O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  O4 - HKLM\..\Run: [SMshcejdj0eg29] C:\Program Files\shcejdj0eg29\shcejdj0eg29.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe
  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  
  0
Réponse 2 / 7
g!rly Messages postés 18462 Statut Contributeur 407

ok

on va essayé de faire court...

Copie le texte ci-dessous :

File::
C:\WINDOWS\system32\lphc9jdj0eg29.exe

Folder::
D:\Documents and Settings\maxime.luckybrunel\Application Data\rhccjdj0eg29
D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"lphc9jdj0eg29"=-

Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif

Cela va relancer Combofix,

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

S'il n'y a pas de rédémarrage, poste quand même les rapports.

@+
0
1. luckybrunel Messages postés 6 Statut Membre
  
  sa a lair davoir fait quelque chose !!
  par contre sa a peut etre aucun rapport mais mon avast il est devenu super laid nivo interface graphique, je sais pas si tu sais a suoi cest du
  
  je nai plus malware protector
  
  je tenvoi les deux rapport
  combo :
  ComboFix 08-06-20.4 - maxime 2008-06-28 14:03:21.2 - NTFSx86
  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.392 [GMT 2:00]
  Endroit: D:\Documents and Settings\maxime.luckybrunel\Bureau\ComboFix.exe
  Command switches used :: D:\Documents and Settings\maxime.luckybrunel\Bureau\CFScript.txt
  * Création d'un nouveau point de restauration
  
  FILE ::
  C:\WINDOWS\system32\lphc9jdj0eg29.exe
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  C:\Program Files\shcejdj0eg29
  C:\WINDOWS\system32\blphc9jdj0eg29.scr
  C:\WINDOWS\system32\lphc9jdj0eg29.exe
  C:\WINDOWS\system32\phc9jdj0eg29.bmp
  D:\Documents and Settings\All Users\Bureau\Malware Protector 2008.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008\How to Register Malware Protector 2008.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008\License Agreement.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008\Malware Protector 2008.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008\Register Malware Protector 2008.lnk
  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malware Protector 2008\Uninstall.lnk
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware Protector 2008.lnk
  D:\Documents and Settings\maxime.luckybrunel\Application Data\rhccjdj0eg29
  D:\Documents and Settings\maxime.luckybrunel\Application Data\shcejdj0eg29
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_00\URLCache.ini
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_01\-1967431519.mtj&p2=1&p3=08327082443047590218004019198221&p4=50463258
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_01\URLCache.ini
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_02\URLCache.ini
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_03\URLCache.ini
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\UpdateVersionList_v2.mtx
  
  .
  ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-28 to 2008-06-28 ))))))))))))))))))))))))))))))))))))
  .
  
  2008-06-26 13:03 . 2008-06-27 03:43 <REP> d-------- C:\Program Files\Yahoo!
  2008-06-26 13:02 . 2008-06-26 13:06 <REP> d-------- C:\Program Files\RM-X© Easy Compress
  2008-06-26 12:58 . 2008-06-26 12:58 <REP> d-------- C:\Program Files\Ripp-it_AM
  2008-06-26 02:01 . 2008-06-26 02:01 <REP> d-------- D:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- D:\Documents and Settings\maxime.luckybrunel\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\SUPERAntiSpyware
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
  2008-06-26 00:23 . 2008-06-26 01:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
  2008-06-25 23:28 . 2008-06-25 23:28 <REP> d-------- C:\Program Files\Digital Photo Navigator 1.5
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC\LOCALS~1
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC
  2008-06-25 23:21 . 2008-06-25 23:26 <REP> d-------- C:\Program Files\4U Computing
  2008-06-25 23:19 . 2003-09-23 18:31 794,624 --a------ C:\WINDOWS\system32\mpgfiltr.ax
  2008-06-25 23:19 . 2003-10-07 22:15 348,160 --a------ C:\WINDOWS\system32\axVideoConvert.dll
  2008-06-25 23:11 . 2008-06-25 23:13 <REP> d-------- C:\Program Files\Cool All Video Converter Platinum
  2008-06-25 23:11 . 2008-06-25 23:11 34 --ah----- C:\WINDOWS\system32\Converter_sysquict.dat
  2008-06-25 22:33 . 2008-06-25 22:33 <REP> d-------- C:\Program Files\AviSynth 2.5
  2008-06-25 22:33 . 2004-02-22 10:11 719,872 --a------ C:\WINDOWS\system32\devil.dll
  2008-06-25 22:33 . 2006-10-07 17:43 502,784 --a------ C:\WINDOWS\x2.64.exe
  2008-06-25 22:33 . 2008-02-07 16:15 408,576 --a------ C:\WINDOWS\system32\Smab.dll
  2008-06-25 22:33 . 2007-05-17 17:30 318,976 --a------ C:\WINDOWS\system32\avisynth.dll
  2008-06-25 22:33 . 2005-02-28 13:16 240,128 --a------ C:\WINDOWS\system32\x.264.exe
  2008-06-25 22:33 . 2006-04-12 09:47 217,073 --a------ C:\WINDOWS\meta4.exe
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\yv12vfw.dll
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\i420vfw.dll
  2008-06-25 22:33 . 2006-04-05 08:09 66,560 --a------ C:\WINDOWS\MOTA113.exe
  2008-06-25 22:33 . 2005-07-14 12:31 27,648 --a------ C:\WINDOWS\system32\AVSredirect.dll
  2008-06-25 22:32 . 2008-06-25 22:32 <REP> d-------- C:\Program Files\eRightSoft
  2008-06-25 22:32 . 2005-02-13 01:00 186,880 -r-hs---- C:\WINDOWS\system32\RLOgg.ax
  2008-06-25 22:32 . 2005-01-18 01:26 179,200 -r-hs---- C:\WINDOWS\system32\DiracSplitter.ax
  2008-06-25 22:32 . 2005-02-06 01:00 92,672 -r-hs---- C:\WINDOWS\system32\RLVorbisDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 67,584 -r-hs---- C:\WINDOWS\system32\RLTheoraDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 51,712 -r-hs---- C:\WINDOWS\system32\RLSpeexDec.ax
  2008-06-24 20:08 . 2003-12-05 20:46 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
  2008-06-24 20:06 . 2008-06-24 20:07 <REP> d-------- C:\Program Files\CyberLink DVD Solution
  2008-06-24 20:06 . 2004-08-09 23:30 40,960 --a------ C:\Program Files\Uninstall_CDS.exe
  2008-06-16 22:56 . 2008-06-16 22:56 244 --ah----- C:\sqmnoopt09.sqm
  2008-06-16 22:56 . 2008-06-16 22:56 232 --ah----- C:\sqmdata09.sqm
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys
  2008-06-10 20:28 . 2007-02-08 12:56 90,800 -ra------ C:\WINDOWS\system32\drivers\sea1unic.sys
  2008-06-10 20:28 . 2007-02-08 12:56 18,704 -ra------ C:\WINDOWS\system32\drivers\sea1nd5.sys
  2008-06-10 20:28 . 2007-02-08 12:55 4,128 -ra------ C:\WINDOWS\system32\drivers\sea1cr.sys
  2008-06-02 11:31 . 2008-06-02 11:31 244 --ah----- C:\sqmnoopt08.sqm
  2008-06-02 11:31 . 2008-06-02 11:31 232 --ah----- C:\sqmdata08.sqm
  2008-06-01 23:31 . 2007-02-08 12:56 88,624 -ra------ C:\WINDOWS\system32\drivers\sea1mgmt.sys
  2008-06-01 23:31 . 2007-02-08 12:56 86,432 -ra------ C:\WINDOWS\system32\drivers\sea1obex.sys
  2008-05-30 12:27 . 2008-04-23 06:16 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
  2008-05-30 12:27 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
  2008-05-30 12:27 . 2007-03-08 07:10 1,048,576 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
  2008-05-30 12:27 . 2008-04-23 06:16 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
  2008-05-30 12:27 . 2008-04-23 06:16 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
  2008-05-30 12:27 . 2008-04-23 06:16 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
  2008-05-30 12:27 . 2008-04-23 06:16 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
  2008-05-30 12:27 . 2008-04-23 06:16 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
  2008-05-30 12:27 . 2008-04-22 09:39 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
  2008-05-29 22:14 . 2008-06-30 20:24 <REP> d-------- C:\WINDOWS\system32\fr-fr
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2008-06-28 12:08 --------- d-----w C:\Program Files\Wanadoo
  2008-06-27 02:08 --------- d-----w C:\Program Files\Everest Poker
  2008-06-27 00:13 --------- d-----w C:\Program Files\eMule
  2008-06-26 11:06 --------- d-----w C:\Program Files\RM-X® Easy Compress
  2008-06-25 21:28 --------- d--h--w C:\Program Files\InstallShield Installation Information
  2008-06-25 18:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\CyberLink
  2008-06-24 18:07 --------- d-----w C:\Program Files\CyberLink
  2008-05-12 12:35 --------- d-----w C:\Program Files\Disc2Phone
  2008-05-12 12:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Teleca
  2008-05-12 12:27 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Teleca
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Teleca Shared
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Sony Ericsson Shared
  2008-05-12 12:21 --------- d-----w C:\Program Files\Sony Ericsson
  2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
  2008-05-06 18:34 --------- d-----w C:\Program Files\ColiPoste
  2006-06-14 15:52 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
  .
  
  ((((((((((((((((((((((((((((( snapshot@2008-06-28_13.38.54,37 )))))))))))))))))))))))))))))))))))))))))
  .
  - 2008-06-28 11:27:49 2,048 --s-a-w C:\WINDOWS\bootstat.dat
  + 2008-06-28 12:06:05 2,048 --s-a-w C:\WINDOWS\bootstat.dat
  + 2008-06-28 12:06:09 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_500.dat
  .
  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  REGEDIT4
  *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880]
  "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
  "RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-03-19 01:05 630784]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 20:03 152872]
  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
  "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952]
  "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]
  "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
  "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272]
  "Ulead AutoDetector v2"="C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe" [2004-11-26 11:43 90112]
  "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-05-11 13:48 127118]
  "ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 11:31 24576]
  "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480]
  "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768]
  "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
  "FixCamera"="C:\WINDOWS\FixCamera.exe" [ ]
  "tsnp2std"="C:\WINDOWS\tsnp2std.exe" [2006-01-06 18:39 110592]
  "snp2std"="C:\WINDOWS\vsnp2std.exe" [2006-01-06 14:57 344064]
  "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
  "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
  "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
  "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 09:26 180269]
  "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-01-26 13:36 495616]
  "SMshcejdj0eg29"="C:\Program Files\shcejdj0eg29\shcejdj0eg29.exe" [ ]
  "OoPDFSettingsv6.exe"="C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe" [2003-11-20 11:38 460800]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "VIDC.I420"= i420vfw.dll
  "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
  "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
  "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
  "vidc.yv12"= yv12vfw.dll
  "vidc.ffds"= ffdshow.ax
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "AntiVirusOverride"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%ProgramFiles%\\AOL 9.0\\aol.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
  "%windir%\\system32\\sessmgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
  "C:\\Program Files\\eMule\\emule.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
  "C:\\Program Files\\iTunes\\iTunes.exe"=
  "C:\\WINDOWS\\system32\\javaw.exe"=
  "C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
  "C:\\APPS\\Ulead Systems\\Ulead VideoStudio 8.0 SE DVD\\vstudio.exe"=
  
  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
  R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-05-13 15:57]
  S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM);C:\WINDOWS\system32\DRIVERS\sea1bus.sys [2007-02-08 12:55]
  S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\sea1mdfl.sys [2007-02-08 12:55]
  S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\sea1mdm.sys [2007-02-08 12:55]
  S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\sea1mgmt.sys [2007-02-08 12:56]
  S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS);C:\WINDOWS\system32\DRIVERS\sea1nd5.sys [2007-02-08 12:56]
  S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\sea1obex.sys [2007-02-08 12:56]
  S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM);C:\WINDOWS\system32\DRIVERS\sea1unic.sys [2007-02-08 12:56]
  
  .
  Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
  "2008-06-21 21:05:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
  - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
  .
  **************************************************************************
  
  catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2008-06-28 14:06:43
  Windows 5.1.2600 Service Pack 2 NTFS
  
  Balayage processus cach‚s ...
  
  Balayage cach‚ autostart entries ...
  
  Balayage des fichiers cach‚s ...
  
  Scan termin‚ avec succŠs
  Les fichiers cach‚s: 0
  
  **************************************************************************
  .
  ------------------------ Other Running Processes ------------------------
  .
  C:\WINDOWS\system32\ati2evxx.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  C:\WINDOWS\system32\FTRTSVC.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
  C:\APPS\HIDSERVICE\HidService.exe
  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  C:\APPS\Powercinema\Kernel\TV\CLSched.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\WINDOWS\system32\ati2evxx.exe
  C:\APPS\ABOARD\AOSD.EXE
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  C:\Program Files\OFFICE One6.5\program\soffice.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
  C:\WINDOWS\system32\verclsid.exe
  .
  **************************************************************************
  .
  Temps d'accomplissement: 2008-06-28 14:12:01 - machine was rebooted
  ComboFix-quarantined-files.txt 2008-06-28 12:11:56
  ComboFix2.txt 2008-06-28 11:39:06
  
  Pre-Run: 21,110,439,936 octets libres
  Post-Run: 21,097,590,784 octets libres
  
  258 --- E O F --- 2008-06-20 01:00:53
  
  et Hijackthis
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 14:17:22, on 28/06/2008
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16674)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  C:\WINDOWS\System32\FTRTSVC.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
  c:\APPS\HIDSERVICE\HIDSERVICE.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
  C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  C:\Apps\Powercinema\PCMService.exe
  C:\apps\ABoard\ABoard.exe
  C:\apps\ABoard\AOSD.exe
  C:\WINDOWS\tsnp2std.exe
  C:\WINDOWS\vsnp2std.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\QuickTime\QTTask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
  C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
  C:\Program Files\RocketDock\RocketDock.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  C:\Program Files\OFFICE One6.5\program\soffice.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
  C:\WINDOWS\explorer.exe
  C:\Program Files\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Wanadoo\Watch.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  D:\Documents and Settings\maxime.luckybrunel\Bureau\eden.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
  O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
  O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
  O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
  O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
  O4 - HKLM\..\Run: [SMshcejdj0eg29] C:\Program Files\shcejdj0eg29\shcejdj0eg29.exe
  O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe
  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  
  0
Réponse 3 / 7
g!rly Messages postés 18462 Statut Contributeur 407

l´infection a muté...

poura avst laisse le pour le moment comme il est...

Copie le texte ci-dessous :

Folder::
C:\Program Files\shcejdj0eg29

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMshcejdj0eg29"=-

Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif

Cela va relancer Combofix,

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

S'il n'y a pas de rédémarrage, poste quand même les rapports.

@+
0
1. luckybrunel Messages postés 6 Statut Membre
  
  c'est le virus qui est bon ou moi qui ny connai rien ?? MDR
  
  voici le nouveau rapport combo
  
  ComboFix 08-06-20.4 - maxime 2008-06-28 14:29:11.3 - NTFSx86
  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.467 [GMT 2:00]
  Endroit: D:\Documents and Settings\maxime.luckybrunel\Bureau\ComboFix.exe
  Command switches used :: D:\Documents and Settings\maxime.luckybrunel\Bureau\CFScript.txt
  * Création d'un nouveau point de restauration
  .
  
  ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-28 ))))))))))))))))))))))))))))))))))))
  .
  
  2008-06-26 13:03 . 2008-06-27 03:43 <REP> d-------- C:\Program Files\Yahoo!
  2008-06-26 13:02 . 2008-06-26 13:06 <REP> d-------- C:\Program Files\RM-X® Easy Compress
  2008-06-26 12:58 . 2008-06-26 12:58 <REP> d-------- C:\Program Files\Ripp-it_AM
  2008-06-26 02:01 . 2008-06-26 02:01 <REP> d-------- D:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- D:\Documents and Settings\maxime.luckybrunel\Application Data\SUPERAntiSpyware.com
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\SUPERAntiSpyware
  2008-06-26 02:00 . 2008-06-26 02:00 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
  2008-06-26 00:23 . 2008-06-26 01:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
  2008-06-25 23:28 . 2008-06-25 23:28 <REP> d-------- C:\Program Files\Digital Photo Navigator 1.5
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC\LOCALS~1
  2008-06-25 23:27 . 2008-06-25 23:27 <REP> d-------- D:\Documents and Settings\MAXIME~1~LUC
  2008-06-25 23:21 . 2008-06-25 23:26 <REP> d-------- C:\Program Files\4U Computing
  2008-06-25 23:19 . 2003-09-23 18:31 794,624 --a------ C:\WINDOWS\system32\mpgfiltr.ax
  2008-06-25 23:19 . 2003-10-07 22:15 348,160 --a------ C:\WINDOWS\system32\axVideoConvert.dll
  2008-06-25 23:11 . 2008-06-25 23:13 <REP> d-------- C:\Program Files\Cool All Video Converter Platinum
  2008-06-25 23:11 . 2008-06-25 23:11 34 --ah----- C:\WINDOWS\system32\Converter_sysquict.dat
  2008-06-25 22:33 . 2008-06-25 22:33 <REP> d-------- C:\Program Files\AviSynth 2.5
  2008-06-25 22:33 . 2004-02-22 10:11 719,872 --a------ C:\WINDOWS\system32\devil.dll
  2008-06-25 22:33 . 2006-10-07 17:43 502,784 --a------ C:\WINDOWS\x2.64.exe
  2008-06-25 22:33 . 2008-02-07 16:15 408,576 --a------ C:\WINDOWS\system32\Smab.dll
  2008-06-25 22:33 . 2007-05-17 17:30 318,976 --a------ C:\WINDOWS\system32\avisynth.dll
  2008-06-25 22:33 . 2005-02-28 13:16 240,128 --a------ C:\WINDOWS\system32\x.264.exe
  2008-06-25 22:33 . 2006-04-12 09:47 217,073 --a------ C:\WINDOWS\meta4.exe
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\yv12vfw.dll
  2008-06-25 22:33 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\i420vfw.dll
  2008-06-25 22:33 . 2006-04-05 08:09 66,560 --a------ C:\WINDOWS\MOTA113.exe
  2008-06-25 22:33 . 2005-07-14 12:31 27,648 --a------ C:\WINDOWS\system32\AVSredirect.dll
  2008-06-25 22:32 . 2008-06-25 22:32 <REP> d-------- C:\Program Files\eRightSoft
  2008-06-25 22:32 . 2005-02-13 01:00 186,880 -r-hs---- C:\WINDOWS\system32\RLOgg.ax
  2008-06-25 22:32 . 2005-01-18 01:26 179,200 -r-hs---- C:\WINDOWS\system32\DiracSplitter.ax
  2008-06-25 22:32 . 2005-02-06 01:00 92,672 -r-hs---- C:\WINDOWS\system32\RLVorbisDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 67,584 -r-hs---- C:\WINDOWS\system32\RLTheoraDec.ax
  2008-06-25 22:32 . 2005-02-13 01:00 51,712 -r-hs---- C:\WINDOWS\system32\RLSpeexDec.ax
  2008-06-24 20:08 . 2003-12-05 20:46 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
  2008-06-24 20:06 . 2008-06-24 20:07 <REP> d-------- C:\Program Files\CyberLink DVD Solution
  2008-06-24 20:06 . 2004-08-09 23:30 40,960 --a------ C:\Program Files\Uninstall_CDS.exe
  2008-06-16 22:56 . 2008-06-16 22:56 244 --ah----- C:\sqmnoopt09.sqm
  2008-06-16 22:56 . 2008-06-16 22:56 232 --ah----- C:\sqmdata09.sqm
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
  2008-06-10 21:05 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys
  2008-06-10 20:28 . 2007-02-08 12:56 90,800 -ra------ C:\WINDOWS\system32\drivers\sea1unic.sys
  2008-06-10 20:28 . 2007-02-08 12:56 18,704 -ra------ C:\WINDOWS\system32\drivers\sea1nd5.sys
  2008-06-10 20:28 . 2007-02-08 12:55 4,128 -ra------ C:\WINDOWS\system32\drivers\sea1cr.sys
  2008-06-02 11:31 . 2008-06-02 11:31 244 --ah----- C:\sqmnoopt08.sqm
  2008-06-02 11:31 . 2008-06-02 11:31 232 --ah----- C:\sqmdata08.sqm
  2008-06-01 23:31 . 2007-02-08 12:56 88,624 -ra------ C:\WINDOWS\system32\drivers\sea1mgmt.sys
  2008-06-01 23:31 . 2007-02-08 12:56 86,432 -ra------ C:\WINDOWS\system32\drivers\sea1obex.sys
  2008-05-30 12:27 . 2008-04-23 06:16 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
  2008-05-30 12:27 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
  2008-05-30 12:27 . 2007-03-08 07:10 1,048,576 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
  2008-05-30 12:27 . 2008-04-23 06:16 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
  2008-05-30 12:27 . 2008-04-23 06:16 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
  2008-05-30 12:27 . 2008-04-23 06:16 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
  2008-05-30 12:27 . 2008-04-23 06:16 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
  2008-05-30 12:27 . 2008-04-23 06:16 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
  2008-05-30 12:27 . 2008-04-22 09:39 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
  2008-05-29 22:14 . 2008-06-30 20:24 <REP> d-------- C:\WINDOWS\system32\fr-fr
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2008-06-28 12:28 --------- d-----w C:\Program Files\Wanadoo
  2008-06-27 02:08 --------- d-----w C:\Program Files\Everest Poker
  2008-06-27 00:13 --------- d-----w C:\Program Files\eMule
  2008-06-25 21:28 --------- d--h--w C:\Program Files\InstallShield Installation Information
  2008-06-25 18:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\CyberLink
  2008-06-24 18:07 --------- d-----w C:\Program Files\CyberLink
  2008-05-12 12:35 --------- d-----w C:\Program Files\Disc2Phone
  2008-05-12 12:29 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Teleca
  2008-05-12 12:27 --------- d-----w D:\Documents and Settings\maxime.luckybrunel\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Teleca
  2008-05-12 12:22 --------- d-----w D:\Documents and Settings\All Users\Application Data\Sony Ericsson
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Teleca Shared
  2008-05-12 12:22 --------- d-----w C:\Program Files\Fichiers communs\Sony Ericsson Shared
  2008-05-12 12:21 --------- d-----w C:\Program Files\Sony Ericsson
  2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
  2008-05-08 12:28 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys
  2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
  2008-05-07 05:15 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll
  2008-05-06 18:34 --------- d-----w C:\Program Files\ColiPoste
  2008-04-23 20:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
  2008-04-22 07:41 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
  2008-04-22 07:41 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
  2008-04-20 05:07 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
  2006-06-14 15:52 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
  .
  
  ((((((((((((((((((((((((((((( snapshot@2008-06-28_13.38.54,37 )))))))))))))))))))))))))))))))))))))))))
  .
  - 2008-06-28 11:27:49 2,048 --s-a-w C:\WINDOWS\bootstat.dat
  + 2008-06-28 12:06:05 2,048 --s-a-w C:\WINDOWS\bootstat.dat
  + 2008-06-28 12:06:09 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_500.dat
  .
  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  REGEDIT4
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 15:50 122880]
  "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
  "RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-03-19 01:05 630784]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 20:03 152872]
  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
  "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952]
  "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168]
  "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]
  "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
  "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272]
  "Ulead AutoDetector v2"="C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe" [2004-11-26 11:43 90112]
  "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-05-11 13:48 127118]
  "ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 11:31 24576]
  "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49 20480]
  "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 17:55 32768]
  "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
  "FixCamera"="C:\WINDOWS\FixCamera.exe" [ ]
  "tsnp2std"="C:\WINDOWS\tsnp2std.exe" [2006-01-06 18:39 110592]
  "snp2std"="C:\WINDOWS\vsnp2std.exe" [2006-01-06 14:57 344064]
  "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
  "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
  "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
  "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 09:26 180269]
  "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-01-26 13:36 495616]
  "OoPDFSettingsv6.exe"="C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe" [2003-11-20 11:38 460800]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]
  
  D:\Documents and Settings\maxime.luckybrunel\Menu D‚marrer\Programmes\D‚marrage\
  OFFICE One 6.5.lnk - C:\Program Files\OFFICE One6.5\program\quickstart.exe [2004-03-08 07:00:00 36864]
  
  D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
  HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 23:23:26 282624]
  OFFICE One Notes v6.5.lnk - C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe [2006-06-29 21:37:44 559104]
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "VIDC.I420"= i420vfw.dll
  "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
  "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
  "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
  "vidc.yv12"= yv12vfw.dll
  "vidc.ffds"= ffdshow.ax
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "AntiVirusOverride"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%ProgramFiles%\\AOL 9.0\\aol.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
  "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
  "%windir%\\system32\\sessmgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
  "C:\\Program Files\\eMule\\emule.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
  "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
  "C:\\Program Files\\iTunes\\iTunes.exe"=
  "C:\\WINDOWS\\system32\\javaw.exe"=
  "C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
  "C:\\APPS\\Ulead Systems\\Ulead VideoStudio 8.0 SE DVD\\vstudio.exe"=
  
  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
  R3 SNP2STD;USB2.0 PC Camera (SNP2STD);C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2006-05-13 15:57]
  S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM);C:\WINDOWS\system32\DRIVERS\sea1bus.sys [2007-02-08 12:55]
  S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\sea1mdfl.sys [2007-02-08 12:55]
  S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\sea1mdm.sys [2007-02-08 12:55]
  S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\sea1mgmt.sys [2007-02-08 12:56]
  S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS);C:\WINDOWS\system32\DRIVERS\sea1nd5.sys [2007-02-08 12:56]
  S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\sea1obex.sys [2007-02-08 12:56]
  S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM);C:\WINDOWS\system32\DRIVERS\sea1unic.sys [2007-02-08 12:56]
  
  .
  Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
  "2008-06-21 21:05:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
  - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
  .
  **************************************************************************
  
  catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2008-06-28 14:30:36
  Windows 5.1.2600 Service Pack 2 NTFS
  
  Balayage processus cachés ...
  
  Balayage caché autostart entries ...
  
  Balayage des fichiers cachés ...
  
  Scan terminé avec succès
  Les fichiers cachés: 0
  
  **************************************************************************
  .
  Temps d'accomplissement: 2008-06-28 14:31:46
  ComboFix-quarantined-files.txt 2008-06-28 12:31:25
  ComboFix2.txt 2008-06-28 12:12:01
  ComboFix3.txt 2008-06-28 11:39:06
  
  Pre-Run: 21,079,691,264 octets libres
  Post-Run: 21,067,190,272 octets libres
  
  210 --- E O F --- 2008-06-20 01:00:53
  
  et le HiJackthis
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 14:34:18, on 28/06/2008
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16674)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  C:\WINDOWS\System32\FTRTSVC.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
  c:\APPS\HIDSERVICE\HIDSERVICE.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
  C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  C:\Apps\Powercinema\PCMService.exe
  C:\apps\ABoard\ABoard.exe
  C:\apps\ABoard\AOSD.exe
  C:\WINDOWS\tsnp2std.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\QuickTime\QTTask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
  C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
  C:\Program Files\RocketDock\RocketDock.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  C:\Program Files\OFFICE One6.5\program\soffice.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\WINDOWS\explorer.exe
  C:\Program Files\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Wanadoo\Watch.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  D:\Documents and Settings\maxime.luckybrunel\Bureau\eden.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
  O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
  O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
  O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
  O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
  O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe
  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  
  0
Réponse 4 / 7
g!rly Messages postés 18462 Statut Contributeur 407

re,

il avait mutté ce con ! mais maintenant c´est ok ;)

passe ceci :

Fais un scan avec cet antispyware :

Telecharge malwarebytes + tutoriel :

-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

Copie et colle le rapport stp.

c´est un peu long, mais...

@+
0
1. luckybrunel Messages postés 6 Statut Membre
  
  il ma pas demander de redemarrer
  il ma trouver 3 malware
  
  Malwarebytes' Anti-Malware 1.18
  Version de la base de données: 897
  
  15:19:20 28/06/2008
  mbam-log-6-28-2008 (15-19-20).txt
  
  Type de recherche: Examen complet (A:\|C:\|D:\|E:\|)
  Eléments examinés: 118290
  Temps écoulé: 26 minute(s), 38 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 0
  Valeur(s) du Registre infectée(s): 0
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 0
  Fichier(s) infecté(s): 3
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Valeur(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  Fichier(s) infecté(s):
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP141\A0027429.exe (Rogue.MalwareProtector) -> Quarantined and deleted successfully.
  C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP141\A0027430.dll (Rogue.MalwareProtector) -> Quarantined and deleted successfully.
  D:\Documents and Settings\maxime.luckybrunel\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.
  
  voila je pense que c'est fini nan ?? merci encore davoir perdu du temps pour maider ;) cest super sympa
  je garde tout ces logiciel precieux mdr
  
  bonne journee
  
  0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 7
rglf91 Messages postés 153 Statut Membre 6

c'est bon c'est réglé
0
Réponse 6 / 7
g!rly Messages postés 18462 Statut Contributeur 407

post encore un hijack this stp
ps : je regarderais ca plus tard, je dois m´absenter...
@+
0
1. luckybrunel Messages postés 6 Statut Membre
  
  ok pas de probleme
  je comprend bien cest deja super sympa de maider lol
  
  voici un HisJackthis
  ps moi aussi je mabsente ^^
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 15:30:41, on 28/06/2008
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16674)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  C:\WINDOWS\System32\FTRTSVC.exe
  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
  c:\APPS\HIDSERVICE\HIDSERVICE.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
  C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
  C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  C:\Apps\Powercinema\PCMService.exe
  C:\apps\ABoard\ABoard.exe
  C:\apps\ABoard\AOSD.exe
  C:\WINDOWS\tsnp2std.exe
  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  C:\Program Files\QuickTime\QTTask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
  C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
  C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
  C:\Program Files\RocketDock\RocketDock.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  C:\Program Files\OFFICE One6.5\program\soffice.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
  C:\Program Files\Windows Live\Messenger\usnsvc.exe
  C:\WINDOWS\explorer.exe
  C:\Program Files\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Wanadoo\Watch.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\WINDOWS\system32\NOTEPAD.EXE
  D:\Documents and Settings\maxime.luckybrunel\Bureau\eden.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
  O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
  O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
  O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
  O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
  O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
  O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
  O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe
  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
  O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  
  0
Réponse 7 / 7
g!rly Messages postés 18462 Statut Contributeur 407

salut,

a l´aide de hijack thids coche et fix :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

comment fixer :

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

puis

ta version de acrobat reader n´est pas a jour, tu veux la version 8.1 derniere en date alors desinstale ta version par le panneau de configuration / ajoue et suppression de programme

et instale la derniere :

https://get2.adobe.com/reader/otherversions/

ou oublie completement acrobat reader et instales foxit plus léger a la place:

https://www.clubic.com/telecharger-fiche13808-foxit-reader.html

java

regarde ce tutorial pour mettre ta console java a jour :

https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/

et

regarde ceci concernant avast :

antivir vs avast :

-> http://forum.malekal.com/ftopic3528.php

alors je te conseille de le desinstaller et d´installer antivir a la place

Telecharge et instales l'antivirus Antivir Personal Edition Classic :

->https://www.malekal.com/avira-free-security-antivirus-gratuit/

https://www.avira.com/en/prime

http://mickael.barroux.free.fr/securite/antivir.php
http://speedweb1.free.fr/frames2.php?page=tuto5
<- tutoriel configuration du scanner...

une fois antivir ouvert click surconfiguration et coche la case "expert mode" puis sur l´onglet scanner dans la fenetre du dessous tu va voir : rootkit search click sur le petit + pour deployer et coche la case a coté de ton disk dur
ceux qui ne voie pas root kit search : clcik sur le parapluie dans ta barre des tache > dans la fenetre d´antivir click sur local protection click en suite sur scanner
dans la fenetre de droite : tu a rootkit search vers le bas > tu developpe en appuyant sur le petit +
et coche tes disques...
puis click sur configuration en haut a droite; dans la nouvelle fenetre a gauche >scanner > coche "scan all files" et en dessous >scanner priority = High
coche : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
puis sur la droite coche les case suivantes :
scan boot sectors of selected drives
scan master boot sectors
scan memory
search foe rootkit before scan
decoche :
ignore off line files
toujours a gauche > scan > deploie > heuristique > macrovirus heuristic = coché et en dessous > win32 heuristic la case coché et high detection level

Je te dis tous ca car j´aimerais que tu performes un scan entier de ta machine a l´aide d´antivir avec les reglages stipulés ci dessus et que tu post le rapport généré ici stp

@+
0

Demande aide de pro pour Antivirus XP 2008

7 réponses

Discussions similaires

Newsletters