Rapport HiJackThis pour virus cid, que faire?
Résolu/Fermé
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
-
7 juil. 2008 à 11:21
miguel374 Messages postés 7 Date d'inscription lundi 7 juillet 2008 Statut Membre Dernière intervention 7 juillet 2008 - 7 juil. 2008 à 17:11
miguel374 Messages postés 7 Date d'inscription lundi 7 juillet 2008 Statut Membre Dernière intervention 7 juillet 2008 - 7 juil. 2008 à 17:11
A voir également:
- Rapport HiJackThis pour virus cid, que faire?
- Hijackthis windows 10 - Télécharger - Antivirus & Antimalwares
- Plan rapport de stage - Guide
- Youtu.be virus - Accueil - Guide virus
- Svchost.exe virus - Guide
- Tinyurl.com virus - Forum Virus
9 réponses
Frappe Misere
Messages postés
2677
Date d'inscription
vendredi 22 février 2008
Statut
Membre
Dernière intervention
10 août 2011
568
7 juil. 2008 à 11:50
7 juil. 2008 à 11:50
http://www.commentcamarche.net/faq/sujet 5996 comment bloquer les fenetres cid
verni29
Messages postés
6699
Date d'inscription
dimanche 6 juillet 2008
Statut
Contributeur sécurité
Dernière intervention
26 décembre 2016
180
7 juil. 2008 à 11:51
7 juil. 2008 à 11:51
Bonjour,
Télécharge LopS&D.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Installe le logiciel.
Une icône va apparaitre sur le bureau. Double clique dessus pour lancer le logiciel
Tu choisis la langue et l'option 1 pour effectuer la recherche.
A la fin de la recherche, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message
A+
Télécharge LopS&D.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Installe le logiciel.
Une icône va apparaitre sur le bureau. Double clique dessus pour lancer le logiciel
Tu choisis la langue et l'option 1 pour effectuer la recherche.
A la fin de la recherche, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message
A+
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
7 juil. 2008 à 13:23
7 juil. 2008 à 13:23
RE BONJOUR je vous merci pour la rapidité de vos réponse, voici le rapport
-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]
-------------[ Listing des dossiers dans Application Data ]------------
[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 68
iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 7455 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[b]! EGDACCESS !/b
[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 13:21:56,85 ]----------------------
-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]
-------------[ Listing des dossiers dans Application Data ]------------
[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 68
iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 7455 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[b]! EGDACCESS !/b
[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 13:21:56,85 ]----------------------
verni29
Messages postés
6699
Date d'inscription
dimanche 6 juillet 2008
Statut
Contributeur sécurité
Dernière intervention
26 décembre 2016
180
7 juil. 2008 à 13:29
7 juil. 2008 à 13:29
Relance le logiciel LopS&D.
Choisis l'option 2 pour supprimer l'infection et réinitialiser le fichier Hosts.
A la fin du nettoyage, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message ainsi qu'un nouveau rapport Hijackthis
Désinstalle LopS&D par la panneau de configuration et Ajout/Suppression de programmes.
Puis redémarre l'ordinateur.
A+
Choisis l'option 2 pour supprimer l'infection et réinitialiser le fichier Hosts.
A la fin du nettoyage, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message ainsi qu'un nouveau rapport Hijackthis
Désinstalle LopS&D par la panneau de configuration et Ajout/Suppression de programmes.
Puis redémarre l'ordinateur.
A+
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
7 juil. 2008 à 13:44
7 juil. 2008 à 13:44
voici le premier rapport
-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]
-------------[ Listing des dossiers dans Application Data ]------------
[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 68
iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 7455 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[b]! EGDACCESS !/b
[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 13:21:56,85 ]----------------------
et le second
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:43:26, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: bw+0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------
[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]
-------------[ Listing des dossiers dans Application Data ]------------
[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------
[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 68
iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 7455 ( 70 ## added by CiD )
/!\ 1 Not 127.0.0.1 !!
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"
[b]! EGDACCESS !/b
[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5
--------------------[ Fin du rapport a 13:21:56,85 ]----------------------
et le second
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:43:26, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: bw+0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
verni29
Messages postés
6699
Date d'inscription
dimanche 6 juillet 2008
Statut
Contributeur sécurité
Dernière intervention
26 décembre 2016
180
7 juil. 2008 à 14:03
7 juil. 2008 à 14:03
Miguel374,
Ce n'est pas le bon rapport. TU as posté le rapport de la 1ere fois.
Dans le rapport d'Hijackthis, je vois que l'infection a été nettoyée.
1) Tu vas nettoyer le rapport d'Hijackthis.
Pour cela, tu fermes ton navigateur.
Lance Hijackthis et tu choisis " Do a system scan only ".
Tu sélectionnes les lignes suivantes :
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user'
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
et toutes les lignes en 018 sauf la dernière qui concerne skype.
Tu choisis l'option " Fixchecked" en bas de la page.
2) On va vérifier la présence d'autres infections.
Télécharges MalwareBytes.
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tu l'installes. Choisis les options par défaut.
A la fin de l’installation, il te sera demandé de mettre à jour MalwareBytes et de l’éxecuter .
Après la, mise à jour, le logiciel va s’ouvrir.
Dans l’onglet Recherche, sélectionne Exécuter un examen complet.
Clique sur recherche. Tu ne sélectionnes que les disques durs de l’ordinateur.
Clique sur lancer l’examen.
Comme il est demandé, clique sur afficher les résultats pour obtenir le rapport.
Tu postes le rapport dans ton prochain message.
Ainsi qu'un rapport Hijackthis.
A+
Ce n'est pas le bon rapport. TU as posté le rapport de la 1ere fois.
Dans le rapport d'Hijackthis, je vois que l'infection a été nettoyée.
1) Tu vas nettoyer le rapport d'Hijackthis.
Pour cela, tu fermes ton navigateur.
Lance Hijackthis et tu choisis " Do a system scan only ".
Tu sélectionnes les lignes suivantes :
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user'
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
et toutes les lignes en 018 sauf la dernière qui concerne skype.
Tu choisis l'option " Fixchecked" en bas de la page.
2) On va vérifier la présence d'autres infections.
Télécharges MalwareBytes.
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tu l'installes. Choisis les options par défaut.
A la fin de l’installation, il te sera demandé de mettre à jour MalwareBytes et de l’éxecuter .
Après la, mise à jour, le logiciel va s’ouvrir.
Dans l’onglet Recherche, sélectionne Exécuter un examen complet.
Clique sur recherche. Tu ne sélectionnes que les disques durs de l’ordinateur.
Clique sur lancer l’examen.
Comme il est demandé, clique sur afficher les résultats pour obtenir le rapport.
Tu postes le rapport dans ton prochain message.
Ainsi qu'un rapport Hijackthis.
A+
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
7 juil. 2008 à 15:16
7 juil. 2008 à 15:16
voivi le premier rapport
Malwarebytes' Anti-Malware 1.19
Version de la base de données: 929
Windows 5.1.2600 Service Pack 2
15:14:18 07/07/2008
mbam-log-7-7-2008 (15-14-13).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 113172
Temps écoulé: 26 minute(s), 47 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
et le second
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:15:37, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Malwarebytes' Anti-Malware 1.19
Version de la base de données: 929
Windows 5.1.2600 Service Pack 2
15:14:18 07/07/2008
mbam-log-7-7-2008 (15-14-13).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 113172
Temps écoulé: 26 minute(s), 47 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
et le second
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:15:37, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Frappe Misere
Messages postés
2677
Date d'inscription
vendredi 22 février 2008
Statut
Membre
Dernière intervention
10 août 2011
568
7 juil. 2008 à 15:58
7 juil. 2008 à 15:58
penses à desinstaller le liveupdate de norton si il ne t ai plus utile.
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
7 juil. 2008 à 16:27
7 juil. 2008 à 16:27
merci je ne le savais pas
je ne le trouve pas dans suppression des programmes, ou puis je le trouver pour le désinstaller?
je ne le trouve pas dans suppression des programmes, ou puis je le trouver pour le désinstaller?
verni29
Messages postés
6699
Date d'inscription
dimanche 6 juillet 2008
Statut
Contributeur sécurité
Dernière intervention
26 décembre 2016
180
7 juil. 2008 à 16:43
7 juil. 2008 à 16:43
Merci Frappe Misere
pour l'outil de désinstallation :
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039
Comment se comporte le PC ?
Si c'est OK, tu peux mettre le sujet en résolu.
Aurevoir.
pour l'outil de désinstallation :
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039
Comment se comporte le PC ?
Si c'est OK, tu peux mettre le sujet en résolu.
Aurevoir.
miguel374
Messages postés
7
Date d'inscription
lundi 7 juillet 2008
Statut
Membre
Dernière intervention
7 juillet 2008
7 juil. 2008 à 17:11
7 juil. 2008 à 17:11
super , ca marche parfaitement bien, merci beaucoup de votre intervention.
