Warning Spyware detected on your computer - Page 2

Précédent
  • 1
  • 2
  1. O305 GR Messages postés 48 Statut Membre 1
     
    Le seul problème qu'il me reste, c'est cette fenêtre WINDOWS SECURITY ALERT qui s'affiche toutes les 5 minutes.
    0
  2. !^^![ME] Messages postés 4767 Statut Contributeur 395
     
    Clique sur ce lien :
    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
    pour télécharger navilog1.exe.

    Choisis Enregistrer

    et enregistre-le sur ton bureau.

    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
    Copie-colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

    Voir: http://il.mafioso.pagesperso-orange.fr/Navifix/presentation.htm

    --------------------------------------------------------------------------------------------------

    Et remet un hijackthis.
    0
  3. toto957
     
    mais si car j'ai été dans le même cas et ça a très bien marché alors si ça peut lui servir
    0
  4. toto957
     
    ce n'est pas efficace ce que !^^[ME] dit téléchrage plutôt super antispyware
    0
    1. !^^![ME] Messages postés 4767 Statut Contributeur 395
       
      Si cela n'est pas efficace, alors que dire de ce que tu lui as prescrit.
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    ce n'est pas efficace ce que !^^[ME] dit téléchrage plutôt super antispyware

    si cela était si facile ....
    0
    1. !^^![ME] Messages postés 4767 Statut Contributeur 395
       
      Comme tu dis =/

      Ca va? :)
      0
  7. O305 GR Messages postés 48 Statut Membre 1
     
    Search Navipromo version 3.6.5 commencé le 31/08/2008 à 17:42:44,43

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "Thomas"

    Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.11
    Système de fichiers : NTFS

    Recherche executé en mode normal

    *** Recherche Programmes installés ***

    *** Recherche dossiers dans "C:\WINDOWS" ***

    *** Recherche dossiers dans "C:\Program Files" ***

    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Thomas\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Thomas\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Thomas\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans "C:\WINDOWS\system32" *

    * Recherche dans "C:\Documents and Settings\Thomas\locals~1\applic~1" *

    * Recherche dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

    * Recherche dans "C:\DOCUME~1\PROPRI~1\locals~1\applic~1" *

    *** Recherche fichiers ***

    *** Recherche clés spécifiques dans le Registre ***

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :

    2)Recherche Heuristique :

    * Dans "C:\WINDOWS\system32" :

    * Dans "C:\Documents and Settings\Thomas\locals~1\applic~1" :

    * Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" :

    * Dans "C:\DOCUME~1\PROPRI~1\locals~1\applic~1" :

    3)Recherche Certificats :

    Certificat Egroup absent !
    Certificat Electronic-Group absent !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit absent !
    Certificat Sunny-Day-Design-Ltd absent !

    4)Recherche fichiers connus :

    *** Analyse terminée le 31/08/2008 à 19:01:00,93 ***

    --------------------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:02:24, on 31/08/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    C:\WINDOWS\system32\slserv.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\yzepmlev.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
    C:\WINDOWS\system32\yzepmlev.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
    O4 - HKCU\..\Run: [CfgHlpMnt] C:\WINDOWS\system32\yzepmlev.exe
    O4 - HKCU\..\Run: [Antispyware] C:\Program Files\Antispyware\Antispyware.exe -boot
    O4 - HKLM\..\Policies\Explorer\Run: [QWYKblvBdD] C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.asf.fr/AxisCamControl.ocx
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {C4D2D8E0-D1DD-11CE-940F-008029004347} (System Monitor Control) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O21 - SSODL: ComAct - {2DBB5704-3A80-9AC8-A17B-08476EF0B677} - C:\Program Files\yysfao\ComAct.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  8. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    bonsoir a vous deux ;

    0305gr : tu vas faire ceci :

    télécharge lopS&D

    *double-cliquez dessus pour installer le programme.
    * Un raccourci sera créé sur votre bureau , double-cliquez dessus pour lancer l'outil.
    *choisis la langue .
    *choisis l'option 1 (recherche) .
    *copie/colle le rapport sur le forum.
    0
  9. O305 GR Messages postés 48 Statut Membre 1
     
    --------------------\\ Lop S&D 4.2.3-8 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.53GHz )
    BIOS : Default System BIOS
    USER : Thomas ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1229 [VPS 080831-0] 4.8.1229 (Activated)
    Firewall : ZoneAlarm Firewall 7.0.362.000 (Activated)

    "C:\Lop SD" ( MAJ : 31-08-2008|15:45 )
    Option : [1] ( 01/09/2008| 8:38 )

    --------------------\\ Listing des dossiers dans APPLIC~1

    [01/07/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
    [28/02/2008|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [27/12/2006|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [19/02/2007|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [27/12/2006|01:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
    [01/07/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
    [28/02/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
    [23/06/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
    [06/07/2008|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HiddenSecretsNightmare
    [22/02/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
    [27/09/2007|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
    [31/10/2007|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
    [27/12/2006|21:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [02/03/2008|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [15/08/2008|10:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
    [26/08/2008|17:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\mxudujgv
    [24/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
    [27/12/2006|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [27/12/2006|01:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [29/08/2008|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [25/03/2007|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
    [27/12/2006|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [02/03/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

    [27/12/2006|01:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [15/12/2007|14:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [23/03/2008|19:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
    [27/12/2006|01:20] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
    [20/02/2008|19:39] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
    [23/03/2008|17:53] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

    [27/12/2006|13:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [15/12/2007|14:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [27/12/2006|01:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
    [27/12/2006|01:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft

    [31/07/2008|13:10] C:\DOCUME~1\Thomas\APPLIC~1\Adobe
    [19/05/2008|16:58] C:\DOCUME~1\Thomas\APPLIC~1\AdobeUM
    [28/12/2006|18:17] C:\DOCUME~1\Thomas\APPLIC~1\Ahead
    [31/08/2008|11:59] C:\DOCUME~1\Thomas\APPLIC~1\Antispyware
    [27/12/2006|19:37] C:\DOCUME~1\Thomas\APPLIC~1\Apple Computer
    [16/01/2007|16:46] C:\DOCUME~1\Thomas\APPLIC~1\ATI
    [06/11/2007|20:32] C:\DOCUME~1\Thomas\APPLIC~1\Canon
    [20/08/2008|12:09] C:\DOCUME~1\Thomas\APPLIC~1\Cimaware
    [27/12/2006|01:20] C:\DOCUME~1\Thomas\APPLIC~1\desktop.ini
    [21/07/2007|21:16] C:\DOCUME~1\Thomas\APPLIC~1\EBP
    [23/06/2008|22:30] C:\DOCUME~1\Thomas\APPLIC~1\Flood Light Games
    [19/08/2007|12:11] C:\DOCUME~1\Thomas\APPLIC~1\Gestion Commerciale
    [11/01/2007|14:25] C:\DOCUME~1\Thomas\APPLIC~1\Help
    [08/07/2008|10:42] C:\DOCUME~1\Thomas\APPLIC~1\Hide IP NG
    [27/12/2006|01:30] C:\DOCUME~1\Thomas\APPLIC~1\Identities
    [02/03/2008|11:40] C:\DOCUME~1\Thomas\APPLIC~1\Jasc
    [20/04/2007|17:03] C:\DOCUME~1\Thomas\APPLIC~1\Macromedia
    [18/12/2007|22:13] C:\DOCUME~1\Thomas\APPLIC~1\Media Player Classic
    [16/06/2008|22:50] C:\DOCUME~1\Thomas\APPLIC~1\Microsoft
    [27/12/2006|12:30] C:\DOCUME~1\Thomas\APPLIC~1\Microsoft Web Folders
    [04/03/2007|20:39] C:\DOCUME~1\Thomas\APPLIC~1\Mozilla
    [20/01/2007|21:25] C:\DOCUME~1\Thomas\APPLIC~1\Notepad++
    [13/10/2007|18:13] C:\DOCUME~1\Thomas\APPLIC~1\Screenshot Sender
    [14/06/2008|19:17] C:\DOCUME~1\Thomas\APPLIC~1\SprillBermudeEng
    [04/03/2007|20:39] C:\DOCUME~1\Thomas\APPLIC~1\Talkback
    [18/06/2008|21:33] C:\DOCUME~1\Thomas\APPLIC~1\vlc
    [13/03/2008|21:41] C:\DOCUME~1\Thomas\APPLIC~1\waver_2.95.dat

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [01/09/2008 07:38][--a------] C:\WINDOWS\tasks\Antispyware Scheduled Scan.job
    [01/09/2008 07:37][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [28/08/2001 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [28/02/2008|14:40] C:\Program Files\Adobe
    [06/02/2008|22:26] C:\Program Files\adslTV
    [26/02/2008|11:21] C:\Program Files\AdVantage
    [23/04/2008|18:05] C:\Program Files\Alcohol Soft
    [27/12/2006|10:15] C:\Program Files\Alwil Software
    [31/08/2008|11:58] C:\Program Files\Antispyware
    [16/01/2007|16:37] C:\Program Files\ATI Technologies
    [11/01/2007|14:51] C:\Program Files\Audacity
    [28/02/2008|14:35] C:\Program Files\Bonjour
    [05/01/2008|19:45] C:\Program Files\Bus Driver
    [10/08/2008|11:29] C:\Program Files\CamStudio
    [26/12/2007|19:36] C:\Program Files\CCleaner
    [20/08/2008|12:07] C:\Program Files\Cimaware
    [01/07/2008|12:22] C:\Program Files\Common Files
    [27/12/2006|01:24] C:\Program Files\ComPlus Applications
    [19/02/2007|01:26] C:\Program Files\CyberLink
    [13/01/2007|19:47] C:\Program Files\DirectX9c
    [03/09/2007|19:35] C:\Program Files\Duhamel
    [10/08/2008|11:28] C:\Program Files\EasyBox
    [31/10/2007|19:05] C:\Program Files\EasyPHP1-8
    [04/11/2007|19:25] C:\Program Files\EBP
    [01/07/2008|12:36] C:\Program Files\Elaborate Bytes
    [31/08/2008|12:33] C:\Program Files\eMule
    [28/10/2007|22:16] C:\Program Files\EPSON
    [10/08/2008|11:29] C:\Program Files\FairUse Wizard 2
    [02/03/2008|12:06] C:\Program Files\Fichiers communs
    [08/05/2008|16:44] C:\Program Files\FileZilla
    [12/11/2007|20:08] C:\Program Files\Free
    [08/05/2008|16:44] C:\Program Files\Freeplayer
    [07/08/2008|12:19] C:\Program Files\HELEN 2.0L
    [23/08/2008|13:35] C:\Program Files\Hide IP Platinum
    [29/08/2008|07:26] C:\Program Files\Hijackthis Version Fran‡aise
    [14/02/2007|12:40] C:\Program Files\Ihsv
    [17/07/2008|19:53] C:\Program Files\InstallShield Installation Information
    [11/01/2007|14:27] C:\Program Files\intelliScore Polyphonic WAV to MIDI Converter Demo
    [28/08/2008|19:15] C:\Program Files\Internet Explorer
    [26/10/2007|07:38] C:\Program Files\IP Changer
    [02/03/2008|11:36] C:\Program Files\Jasc Software Inc
    [29/11/2007|12:23] C:\Program Files\JeffProd
    [18/12/2007|22:11] C:\Program Files\K-Lite Codec Pack
    [23/06/2008|22:24] C:\Program Files\La maison du p‚ril
    [27/12/2007|14:32] C:\Program Files\Lavalys
    [08/05/2008|16:44] C:\Program Files\Lphant
    [07/01/2007|16:29] C:\Program Files\mackoy
    [17/07/2008|19:45] C:\Program Files\Macromedia
    [15/08/2008|10:42] C:\Program Files\Messenger
    [02/04/2008|18:12] C:\Program Files\Messenger Plus! Live
    [27/12/2006|12:30] C:\Program Files\microsoft frontpage
    [29/08/2008|11:09] C:\Program Files\Microsoft Games
    [19/11/2007|21:04] C:\Program Files\Microsoft Office
    [19/11/2007|21:03] C:\Program Files\Microsoft Visual Studio
    [19/11/2007|21:05] C:\Program Files\Microsoft Works
    [19/11/2007|21:01] C:\Program Files\Microsoft.NET
    [14/05/2008|15:51] C:\Program Files\Movie Maker
    [26/12/2007|23:28] C:\Program Files\Mozilla Firefox
    [19/11/2007|21:04] C:\Program Files\MSBuild
    [27/12/2006|01:23] C:\Program Files\MSN
    [27/12/2006|01:23] C:\Program Files\MSN Gaming Zone
    [02/04/2008|18:12] C:\Program Files\MSN Messenger
    [11/03/2007|01:09] C:\Program Files\MSXML 4.0
    [25/03/2007|19:45] C:\Program Files\Multi_Media_France
    [29/02/2008|16:06] C:\Program Files\Namo
    [31/08/2008|19:01] C:\Program Files\Navilog1
    [27/12/2006|19:59] C:\Program Files\Nero
    [14/05/2008|15:56] C:\Program Files\NetMeeting
    [19/06/2007|10:34] C:\Program Files\Notepad++
    [28/08/2008|19:15] C:\Program Files\Outlook Express
    [12/06/2008|14:44] C:\Program Files\Pando Networks
    [14/05/2008|15:56] C:\Program Files\PDFCreator
    [30/08/2008|12:58] C:\Program Files\Philips Intelligent Agent
    [27/05/2008|06:33] C:\Program Files\PhotoFiltre
    [14/05/2008|15:56] C:\Program Files\QuickTime
    [27/05/2008|06:33] C:\Program Files\RADVideo
    [06/07/2008|20:08] C:\Program Files\ReflexiveArcade
    [27/05/2008|06:33] C:\Program Files\RM-X© Easy Compress
    [10/02/2007|21:36] C:\Program Files\Securitoo
    [27/12/2006|01:24] C:\Program Files\Services en ligne
    [01/05/2008|22:18] C:\Program Files\settings.dat
    [14/06/2008|19:17] C:\Program Files\SPRILL
    [11/07/2007|18:03] C:\Program Files\Spybot - Search & Destroy
    [04/11/2007|19:26] C:\Program Files\Train3D
    [28/08/2008|12:28] C:\Program Files\Trend Micro
    [14/07/2007|20:49] C:\Program Files\Ulead Systems
    [27/12/2006|01:30] C:\Program Files\Uninstall Information
    [23/06/2008|14:54] C:\Program Files\Unlocker
    [02/02/2008|21:53] C:\Program Files\VideoLAN
    [30/07/2007|11:08] C:\Program Files\Visicom Media
    [05/11/2007|12:53] C:\Program Files\vmntoolbar
    [08/11/2007|21:39] C:\Program Files\Wanadoo
    [11/02/2007|23:21] C:\Program Files\WinCustomize
    [21/01/2007|01:06] C:\Program Files\Windows Journal Viewer
    [02/03/2008|12:05] C:\Program Files\Windows Live
    [18/12/2007|22:02] C:\Program Files\Windows Live Safety Center
    [25/07/2007|17:27] C:\Program Files\Windows Media Connect 2
    [28/08/2008|19:15] C:\Program Files\Windows Media Player
    [27/12/2006|13:06] C:\Program Files\Windows NT
    [27/12/2006|11:35] C:\Program Files\WindowsUpdate
    [10/08/2008|11:27] C:\Program Files\WinHTTrack
    [23/06/2008|14:54] C:\Program Files\WinRAR
    [27/12/2006|01:27] C:\Program Files\xerox
    [24/08/2008|13:11] C:\Program Files\Yahoo!
    [23/06/2008|14:54] C:\Program Files\YouTUBE (TM) movie downloader
    [26/08/2008|17:57] C:\Program Files\yysfao
    [26/12/2007|15:20] C:\Program Files\Zone Labs

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [28/02/2008|14:35] C:\Program Files\Fichiers communs\Adobe
    [27/12/2006|20:04] C:\Program Files\Fichiers communs\Ahead
    [19/11/2007|21:03] C:\Program Files\Fichiers communs\DESIGNER
    [28/10/2007|22:18] C:\Program Files\Fichiers communs\EPSON
    [19/02/2008|09:50] C:\Program Files\Fichiers communs\InstallShield
    [28/02/2008|14:04] C:\Program Files\Fichiers communs\Macrovision Shared
    [02/11/2007|19:48] C:\Program Files\Fichiers communs\MAGIX Shared
    [08/08/2008|07:44] C:\Program Files\Fichiers communs\Microsoft Shared
    [27/12/2006|01:25] C:\Program Files\Fichiers communs\MSSoap
    [27/12/2006|01:20] C:\Program Files\Fichiers communs\ODBC
    [27/12/2006|01:25] C:\Program Files\Fichiers communs\Services
    [27/12/2006|01:20] C:\Program Files\Fichiers communs\SpeechEngines
    [19/11/2007|21:11] C:\Program Files\Fichiers communs\System
    [02/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

    --------------------\\ Process

    ( 41 Processus )

    iexplore.exe ~ [PID:2848]

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\INSTALL.LOG
    C:\Program Files\Multi_Media_France
    C:\Program Files\Multi_Media_France\INSTALL.LOG
    C:\DOCUME~1\Thomas\Cookies\thomas@advertstream[1].txt
    C:\DOCUME~1\Thomas\Cookies\thomas@advertising[1].txt

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-01 08:42:19
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Thomas\Favoris\Informatique\easy cracks . -.url
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2 + crack
    C:\DOCUME~1\Thomas\Mes documents\Lphant\Downloads\[PC Game] Midtown Madness 2 crack.zip
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\00000001.TMP
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\00000409.016
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\00000409.256
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\AUTORUN.INF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\BOOKLET.PDF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\CDID.TXT
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\CLCD16.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\CLCD32.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\CLOKSPL.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\Crack_NOcd_MM2
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\Crack_NOcd_MM2.zip
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DI_KEYS.106
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DI_KEYS.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DI_KEYS.NEC
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DPLAYERX.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DRVMGT.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DXMEDIA
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\EULA.RTF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GOODIES
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\Lisez moi_gx107_README.txt
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\MCP.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\NORDIC
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\README.RTF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\README.TXT
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\SECDRV.SYS
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\SETUP.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\SETUPENU.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2 \DIRECTX\CFGMGR32.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\DIRECTX.CAB
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\DIRECTX.INF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\DSETUP.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\DSETUP32.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\DXSETUP.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DIRECTX\SETUPAPI.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DXMEDIA\DXM6PTCH.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DXMEDIA\DXMEDIA.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\DXMEDIA\DXTXTRA.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\!ik8.ar
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\autobus_HLZ_gx107_bibus_v1.0.ar
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\b!_citaroGbibus_new.ar
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\BADVIDEO.TXT
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\BLADE.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\citaro-vhh.ar
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\EBUEULA.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\gfxconf.dat
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\LOGOS.AVI
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\Midtown2.exe
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MIDTOWN2.ICD
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MM2AUD.AR
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MM2AUDEX.AR
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MM2CORE.AR
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MM2HELP.HLP
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MM2TEX.AR
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\MMLANG.DLL
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\Renault_Agora_L.ar
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\Thumbs.db
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\TROUBLE.RTF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\london
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\player0.cfg
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\player0.sav
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\players.dir
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\sf
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\london\amateur.dat
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\london\player0.rec
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\london\pro.dat
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\sf\amateur.dat
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\sf\player0.rec
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GAME\players\sf\pro.dat
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GOODIES\GVS_ENG.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\GOODIES\GVUPDATE.EXE
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\NORDIC\DANSK.PDF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2 \NORDIC\NORSK.PDF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\NORDIC\SUOMI.PDF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\NORDIC\SVENSK.PDF
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\NORDIC\SVENSK2.PDF
    C:\DOCUME~1\Thomas\Recent\Hide.IP.Platinum.3.5.keygen-SND.lnk

    [F:49][D:5]-> C:\DOCUME~1\Thomas\LOCALS~1\Temp
    [F:106][D:0]-> C:\DOCUME~1\Thomas\Cookies
    [F:8591][D:13]-> C:\DOCUME~1\Thomas\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/09/2008| 8:48 - Option : [1]

    --------------------\\ Fin du rapport a 8:48:38
    0
  10. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Ouahh !! évite de télécharger des cracks !

    la suite avec LopS&D :

    relance LopS&D et choisis l'option 2 .
    ensuite colle le rapport généré .

    recolle moi un nouveau log hijack .
    0
  11. O305 GR Messages postés 48 Statut Membre 1
     
    --------------------\\ Lop S&D 4.2.3-8 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.53GHz )
    BIOS : Default System BIOS
    USER : Thomas ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1229 [VPS 080901-0] 4.8.1229 (Activated)
    Firewall : ZoneAlarm Firewall 7.0.362.000 (Activated)

    "C:\Lop SD" ( MAJ : 31-08-2008|15:45 )
    Option : [2] ( 01/09/2008|20:35 )

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

    Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
    Supprime! - C:\DOCUME~1\Thomas\Cookies\thomas@advertstream[1].txt
    Supprime! - C:\DOCUME~1\Thomas\Cookies\thomas@advertising[1].txt
    Supprime! - C:\Program Files\Multi_Media_France
    -
    [ Fichier Hosts ] .. Restaure!

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    Supprime! - C:\Program Files\vmntoolbar

    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

    --------------------\\ Listing des dossiers dans APPLIC~1

    [01/07/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\.zreglib
    [28/02/2008|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
    [27/12/2006|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
    [19/02/2007|01:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
    [27/12/2006|01:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
    [01/07/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes
    [28/02/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
    [23/06/2008|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
    [06/07/2008|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HiddenSecretsNightmare
    [22/02/2007|21:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
    [27/09/2007|20:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
    [31/10/2007|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
    [27/12/2006|21:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
    [02/03/2008|12:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
    [15/08/2008|10:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
    [26/08/2008|17:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\mxudujgv
    [24/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
    [27/12/2006|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
    [27/12/2006|01:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
    [29/08/2008|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
    [25/03/2007|14:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
    [27/12/2006|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    [02/03/2008|12:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

    [27/12/2006|01:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
    [15/12/2007|14:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

    [23/03/2008|19:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
    [27/12/2006|01:20] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
    [20/02/2008|19:39] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
    [23/03/2008|17:53] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

    [27/12/2006|13:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

    [15/12/2007|14:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

    [27/12/2006|01:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
    [27/12/2006|01:30] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
    [27/12/2006|01:20] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft

    [31/07/2008|13:10] C:\DOCUME~1\Thomas\APPLIC~1\Adobe
    [19/05/2008|16:58] C:\DOCUME~1\Thomas\APPLIC~1\AdobeUM
    [28/12/2006|18:17] C:\DOCUME~1\Thomas\APPLIC~1\Ahead
    [31/08/2008|11:59] C:\DOCUME~1\Thomas\APPLIC~1\Antispyware
    [27/12/2006|19:37] C:\DOCUME~1\Thomas\APPLIC~1\Apple Computer
    [16/01/2007|16:46] C:\DOCUME~1\Thomas\APPLIC~1\ATI
    [06/11/2007|20:32] C:\DOCUME~1\Thomas\APPLIC~1\Canon
    [20/08/2008|12:09] C:\DOCUME~1\Thomas\APPLIC~1\Cimaware
    [27/12/2006|01:20] C:\DOCUME~1\Thomas\APPLIC~1\desktop.ini
    [21/07/2007|21:16] C:\DOCUME~1\Thomas\APPLIC~1\EBP
    [23/06/2008|22:30] C:\DOCUME~1\Thomas\APPLIC~1\Flood Light Games
    [19/08/2007|12:11] C:\DOCUME~1\Thomas\APPLIC~1\Gestion Commerciale
    [11/01/2007|14:25] C:\DOCUME~1\Thomas\APPLIC~1\Help
    [08/07/2008|10:42] C:\DOCUME~1\Thomas\APPLIC~1\Hide IP NG
    [27/12/2006|01:30] C:\DOCUME~1\Thomas\APPLIC~1\Identities
    [02/03/2008|11:40] C:\DOCUME~1\Thomas\APPLIC~1\Jasc
    [20/04/2007|17:03] C:\DOCUME~1\Thomas\APPLIC~1\Macromedia
    [18/12/2007|22:13] C:\DOCUME~1\Thomas\APPLIC~1\Media Player Classic
    [16/06/2008|22:50] C:\DOCUME~1\Thomas\APPLIC~1\Microsoft
    [27/12/2006|12:30] C:\DOCUME~1\Thomas\APPLIC~1\Microsoft Web Folders
    [04/03/2007|20:39] C:\DOCUME~1\Thomas\APPLIC~1\Mozilla
    [20/01/2007|21:25] C:\DOCUME~1\Thomas\APPLIC~1\Notepad++
    [13/10/2007|18:13] C:\DOCUME~1\Thomas\APPLIC~1\Screenshot Sender
    [14/06/2008|19:17] C:\DOCUME~1\Thomas\APPLIC~1\SprillBermudeEng
    [04/03/2007|20:39] C:\DOCUME~1\Thomas\APPLIC~1\Talkback
    [18/06/2008|21:33] C:\DOCUME~1\Thomas\APPLIC~1\vlc
    [13/03/2008|21:41] C:\DOCUME~1\Thomas\APPLIC~1\waver_2.95.dat

    --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

    [01/09/2008 07:38][--a------] C:\WINDOWS\tasks\Antispyware Scheduled Scan.job
    [01/09/2008 07:37][--ah-----] C:\WINDOWS\tasks\SA.DAT
    [28/08/2001 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

    --------------------\\ Listing des dossiers dans C:\Program Files

    [28/02/2008|14:40] C:\Program Files\Adobe
    [06/02/2008|22:26] C:\Program Files\adslTV
    [26/02/2008|11:21] C:\Program Files\AdVantage
    [23/04/2008|18:05] C:\Program Files\Alcohol Soft
    [27/12/2006|10:15] C:\Program Files\Alwil Software
    [31/08/2008|11:58] C:\Program Files\Antispyware
    [16/01/2007|16:37] C:\Program Files\ATI Technologies
    [11/01/2007|14:51] C:\Program Files\Audacity
    [28/02/2008|14:35] C:\Program Files\Bonjour
    [05/01/2008|19:45] C:\Program Files\Bus Driver
    [10/08/2008|11:29] C:\Program Files\CamStudio
    [26/12/2007|19:36] C:\Program Files\CCleaner
    [20/08/2008|12:07] C:\Program Files\Cimaware
    [01/07/2008|12:22] C:\Program Files\Common Files
    [27/12/2006|01:24] C:\Program Files\ComPlus Applications
    [19/02/2007|01:26] C:\Program Files\CyberLink
    [13/01/2007|19:47] C:\Program Files\DirectX9c
    [03/09/2007|19:35] C:\Program Files\Duhamel
    [10/08/2008|11:28] C:\Program Files\EasyBox
    [31/10/2007|19:05] C:\Program Files\EasyPHP1-8
    [04/11/2007|19:25] C:\Program Files\EBP
    [01/07/2008|12:36] C:\Program Files\Elaborate Bytes
    [31/08/2008|12:33] C:\Program Files\eMule
    [28/10/2007|22:16] C:\Program Files\EPSON
    [10/08/2008|11:29] C:\Program Files\FairUse Wizard 2
    [02/03/2008|12:06] C:\Program Files\Fichiers communs
    [08/05/2008|16:44] C:\Program Files\FileZilla
    [12/11/2007|20:08] C:\Program Files\Free
    [08/05/2008|16:44] C:\Program Files\Freeplayer
    [07/08/2008|12:19] C:\Program Files\HELEN 2.0L
    [23/08/2008|13:35] C:\Program Files\Hide IP Platinum
    [29/08/2008|07:26] C:\Program Files\Hijackthis Version Fran‡aise
    [14/02/2007|12:40] C:\Program Files\Ihsv
    [17/07/2008|19:53] C:\Program Files\InstallShield Installation Information
    [11/01/2007|14:27] C:\Program Files\intelliScore Polyphonic WAV to MIDI Converter Demo
    [28/08/2008|19:15] C:\Program Files\Internet Explorer
    [26/10/2007|07:38] C:\Program Files\IP Changer
    [02/03/2008|11:36] C:\Program Files\Jasc Software Inc
    [29/11/2007|12:23] C:\Program Files\JeffProd
    [18/12/2007|22:11] C:\Program Files\K-Lite Codec Pack
    [23/06/2008|22:24] C:\Program Files\La maison du p‚ril
    [27/12/2007|14:32] C:\Program Files\Lavalys
    [08/05/2008|16:44] C:\Program Files\Lphant
    [07/01/2007|16:29] C:\Program Files\mackoy
    [17/07/2008|19:45] C:\Program Files\Macromedia
    [15/08/2008|10:42] C:\Program Files\Messenger
    [02/04/2008|18:12] C:\Program Files\Messenger Plus! Live
    [27/12/2006|12:30] C:\Program Files\microsoft frontpage
    [29/08/2008|11:09] C:\Program Files\Microsoft Games
    [19/11/2007|21:04] C:\Program Files\Microsoft Office
    [19/11/2007|21:03] C:\Program Files\Microsoft Visual Studio
    [19/11/2007|21:05] C:\Program Files\Microsoft Works
    [19/11/2007|21:01] C:\Program Files\Microsoft.NET
    [14/05/2008|15:51] C:\Program Files\Movie Maker
    [26/12/2007|23:28] C:\Program Files\Mozilla Firefox
    [19/11/2007|21:04] C:\Program Files\MSBuild
    [27/12/2006|01:23] C:\Program Files\MSN
    [27/12/2006|01:23] C:\Program Files\MSN Gaming Zone
    [02/04/2008|18:12] C:\Program Files\MSN Messenger
    [11/03/2007|01:09] C:\Program Files\MSXML 4.0
    [29/02/2008|16:06] C:\Program Files\Namo
    [31/08/2008|19:01] C:\Program Files\Navilog1
    [27/12/2006|19:59] C:\Program Files\Nero
    [14/05/2008|15:56] C:\Program Files\NetMeeting
    [19/06/2007|10:34] C:\Program Files\Notepad++
    [28/08/2008|19:15] C:\Program Files\Outlook Express
    [12/06/2008|14:44] C:\Program Files\Pando Networks
    [14/05/2008|15:56] C:\Program Files\PDFCreator
    [30/08/2008|12:58] C:\Program Files\Philips Intelligent Agent
    [27/05/2008|06:33] C:\Program Files\PhotoFiltre
    [14/05/2008|15:56] C:\Program Files\QuickTime
    [27/05/2008|06:33] C:\Program Files\RADVideo
    [06/07/2008|20:08] C:\Program Files\ReflexiveArcade
    [27/05/2008|06:33] C:\Program Files\RM-X© Easy Compress
    [10/02/2007|21:36] C:\Program Files\Securitoo
    [27/12/2006|01:24] C:\Program Files\Services en ligne
    [01/05/2008|22:18] C:\Program Files\settings.dat
    [14/06/2008|19:17] C:\Program Files\SPRILL
    [11/07/2007|18:03] C:\Program Files\Spybot - Search & Destroy
    [04/11/2007|19:26] C:\Program Files\Train3D
    [28/08/2008|12:28] C:\Program Files\Trend Micro
    [14/07/2007|20:49] C:\Program Files\Ulead Systems
    [27/12/2006|01:30] C:\Program Files\Uninstall Information
    [23/06/2008|14:54] C:\Program Files\Unlocker
    [02/02/2008|21:53] C:\Program Files\VideoLAN
    [30/07/2007|11:08] C:\Program Files\Visicom Media
    [08/11/2007|21:39] C:\Program Files\Wanadoo
    [11/02/2007|23:21] C:\Program Files\WinCustomize
    [21/01/2007|01:06] C:\Program Files\Windows Journal Viewer
    [02/03/2008|12:05] C:\Program Files\Windows Live
    [18/12/2007|22:02] C:\Program Files\Windows Live Safety Center
    [25/07/2007|17:27] C:\Program Files\Windows Media Connect 2
    [28/08/2008|19:15] C:\Program Files\Windows Media Player
    [27/12/2006|13:06] C:\Program Files\Windows NT
    [27/12/2006|11:35] C:\Program Files\WindowsUpdate
    [10/08/2008|11:27] C:\Program Files\WinHTTrack
    [23/06/2008|14:54] C:\Program Files\WinRAR
    [27/12/2006|01:27] C:\Program Files\xerox
    [24/08/2008|13:11] C:\Program Files\Yahoo!
    [23/06/2008|14:54] C:\Program Files\YouTUBE (TM) movie downloader
    [26/08/2008|17:57] C:\Program Files\yysfao
    [26/12/2007|15:20] C:\Program Files\Zone Labs

    --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

    [28/02/2008|14:35] C:\Program Files\Fichiers communs\Adobe
    [27/12/2006|20:04] C:\Program Files\Fichiers communs\Ahead
    [19/11/2007|21:03] C:\Program Files\Fichiers communs\DESIGNER
    [28/10/2007|22:18] C:\Program Files\Fichiers communs\EPSON
    [19/02/2008|09:50] C:\Program Files\Fichiers communs\InstallShield
    [28/02/2008|14:04] C:\Program Files\Fichiers communs\Macrovision Shared
    [02/11/2007|19:48] C:\Program Files\Fichiers communs\MAGIX Shared
    [08/08/2008|07:44] C:\Program Files\Fichiers communs\Microsoft Shared
    [27/12/2006|01:25] C:\Program Files\Fichiers communs\MSSoap
    [27/12/2006|01:20] C:\Program Files\Fichiers communs\ODBC
    [27/12/2006|01:25] C:\Program Files\Fichiers communs\Services
    [27/12/2006|01:20] C:\Program Files\Fichiers communs\SpeechEngines
    [19/11/2007|21:11] C:\Program Files\Fichiers communs\System
    [02/03/2008|12:08] C:\Program Files\Fichiers communs\WindowsLiveInstaller

    --------------------\\ Process

    ( 41 Processus )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    Aucun fichier / dossier Lop trouvé !

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts PROPRE

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-01 20:39:42
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\Crack_NOcd_MM2
    C:\DOCUME~1\Thomas\Mes documents\Midtown Madness 2\Crack_NOcd_MM2.zip
    C:\DOCUME~1\Thomas\Recent\Crack_NOcd_MM2.lnk
    C:\DOCUME~1\Thomas\Recent\Hide.IP.Platinum.3.5.keygen-SND.lnk

    [F:51][D:5]-> C:\DOCUME~1\Thomas\LOCALS~1\Temp
    [F:111][D:0]-> C:\DOCUME~1\Thomas\Cookies
    [F:9003][D:13]-> C:\DOCUME~1\Thomas\LOCALS~1\TEMPOR~1\content.IE5

    1 - "C:\Lop SD\LopR_1.txt" - 01/09/2008| 8:48 - Option : [1]
    1 - 01/09/2008|20:45 - Option : [2]
    3 - "C:\Lop SD\LopR_3.txt" - 01/09/2008|20:45 - Option : [2]

    --------------------\\ Fin du rapport a 20:45:10

    -------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:13:44, on 01/09/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    C:\WINDOWS\system32\slserv.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\yzepmlev.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\system32\yzepmlev.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
    O4 - HKCU\..\Run: [CfgHlpMnt] C:\WINDOWS\system32\yzepmlev.exe
    O4 - HKCU\..\Run: [Antispyware] C:\Program Files\Antispyware\Antispyware.exe -boot
    O4 - HKLM\..\Policies\Explorer\Run: [QWYKblvBdD] C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.asf.fr/AxisCamControl.ocx
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {C4D2D8E0-D1DD-11CE-940F-008029004347} (System Monitor Control) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O21 - SSODL: ComAct - {2DBB5704-3A80-9AC8-A17B-08476EF0B677} - C:\Program Files\yysfao\ComAct.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  12. !^^![ME] Messages postés 4767 Statut Contributeur 395
     
    Salut,

    évites les cracks et autres joyeusetés.
    COnnais tu le logiciel "antispyware" ?
    Désinstalles le.
    Scan ces fichier avec virustotal ( méthode plus haut)
    C:\WINDOWS\system32\yzepmlev.exe
    C:\Program Files\yysfao\ComAct.dll

    POstes les rapports ainsi qu'un nouvel hijackthis.

    jfk: désolé si ma méthode ne convient pas :/
    0
  13. O305 GR Messages postés 48 Statut Membre 1
     
    Premier fichier :

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.9.3.0 2008.09.02 -
    AntiVir 7.8.1.23 2008.09.02 -
    Authentium 5.1.0.4 2008.09.02 -
    Avast 4.8.1195.0 2008.09.02 -
    AVG 8.0.0.161 2008.09.02 -
    BitDefender 7.2 2008.09.02 -
    CAT-QuickHeal 9.50 2008.09.02 -
    ClamAV 0.93.1 2008.09.02 -
    DrWeb 4.44.0.09170 2008.09.02 -
    eSafe 7.0.17.0 2008.09.02 -
    eTrust-Vet 31.6.6064 2008.09.02 -
    Ewido 4.0 2008.09.02 -
    F-Prot 4.4.4.56 2008.09.02 -
    F-Secure 8.0.14332.0 2008.09.02 -
    Fortinet 3.14.0.0 2008.09.02 W32/PolySmall.BP!tr
    GData 19 2008.09.02 -
    Ikarus T3.1.1.34.0 2008.09.02 -
    K7AntiVirus 7.10.437 2008.09.02 -
    Kaspersky 7.0.0.125 2008.09.02 -
    McAfee 5375 2008.09.02 -
    Microsoft 1.3807 2008.09.02 TrojanDownloader:Win32/FakeAlert.C
    NOD32v2 3408 2008.09.02 -
    Norman 5.80.02 2008.09.02 -
    Panda 9.0.0.4 2008.09.02 -
    PCTools 4.4.2.0 2008.09.02 -
    Prevx1 V2 2008.09.02 -
    Rising 20.60.11.00 2008.09.02 -
    Sophos 4.33.0 2008.09.02 Mal/EncPk-DG
    Sunbelt 3.1.1592.1 2008.08.30 -
    Symantec 10 2008.09.02 -
    TheHacker 6.3.0.8.070 2008.09.02 -
    TrendMicro 8.700.0.1004 2008.09.02 -
    VBA32 3.12.8.4 2008.09.02 -
    ViRobot 2008.9.2.1361 2008.09.02 -
    VirusBuster 4.5.11.0 2008.09.02 -
    Webwasher-Gateway 6.6.2 2008.09.02 -
    Information additionnelle
    File size: 94208 bytes
    MD5...: 6f59b75e650496411fcd40d3eb5581df
    SHA1..: 63b09c8441d3dc0ad77acbe12171d80729ff7087
    SHA256: ee525d5a295cfadad3ac6df35dccd54eb013849c69c642af137247bcdb729398
    SHA512: 2344f9cd5d5bb84a683302409072d27af8a66a025ef73812bfea169b5928debc
    b18cbbcaa9c3fa2cda6e75a25f63ae55e0e1d720546a005258bfb5cb5b9e1bd4
    PEiD..: -
    TrID..: File type identification
    Win32 Executable Generic (42.3%)
    Win32 Dynamic Link Library (generic) (37.6%)
    Generic Win/DOS Executable (9.9%)
    DOS Executable Generic (9.9%)
    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
    PEInfo: PE Structure information

    ( base data )
    entrypointaddress.: 0x40641d
    timedatestamp.....: 0x48b40ce6 (Tue Aug 26 14:02:14 2008)
    machinetype.......: 0x14c (I386)

    ( 3 sections )
    name viradd virsiz rawdsiz ntrpy md5
    .pfcev 0x1000 0x1315e 0x14000 6.75 891dc31f8bc83b3061dd50e58f20d88d
    .bsrvq 0x15000 0x6f8 0x1000 2.88 7f79da6129fb2e9a72abdc7572bd489b
    .fqxx 0x16000 0x5a20 0x1000 0.70 03ec661d1bd607f67754e5b2ddb06c61

    ( 4 imports )
    > KERNEL32.dll: lstrlenW, GlobalAddAtomW, Sleep, FindNextChangeNotification, ReadProcessMemory, CreateEventW, GetCurrentProcess, FreeLibrary, GetDriveTypeW, MultiByteToWideChar, GetProcAddress, WaitForSingleObject, ReadFile, GetCurrentThread, GetFileAttributesW, LoadLibraryW, InterlockedDecrement, LoadLibraryA, GetLastError, FindNextFileW, DeleteFileW, SetEndOfFile, CreateFileW, GlobalAlloc, SetCurrentDirectoryW, VirtualAlloc, WriteFile, FileTimeToSystemTime, GetCurrentThreadId
    > USER32.dll: VkKeyScanW, TrackPopupMenu, SetCapture, SystemParametersInfoW, GetMessageW, SetCursorPos, RegisterClassExW, GetKeyState, CreatePopupMenu, SetCursor, GetWindowThreadProcessId, InvalidateRect, IsWindow, GetWindowDC, TranslateMessage, PostQuitMessage
    > GDI32.dll: CreateRoundRectRgn, CreateCompatibleDC, MoveToEx, CreateSolidBrush, SelectObject, Rectangle, CreatePen, CreateDCW, CreateFontIndirectW, GetStockObject, GetDeviceCaps, LineTo, DeleteDC, CreateBitmap, SetDIBits, SetTextColor
    > ADVAPI32.dll: RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW

    ( 0 exports )

    -------------------------------------------
    2ème fichier :

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.9.3.0 2008.09.02 -
    AntiVir 7.8.1.23 2008.09.02 -
    Authentium 5.1.0.4 2008.09.02 -
    Avast 4.8.1195.0 2008.09.02 -
    AVG 8.0.0.161 2008.09.02 -
    BitDefender 7.2 2008.09.02 -
    CAT-QuickHeal 9.50 2008.09.02 -
    ClamAV 0.93.1 2008.09.02 -
    DrWeb 4.44.0.09170 2008.09.02 -
    eSafe 7.0.17.0 2008.09.02 -
    eTrust-Vet 31.6.6064 2008.09.02 -
    Ewido 4.0 2008.09.02 -
    F-Prot 4.4.4.56 2008.09.02 -
    F-Secure 8.0.14332.0 2008.09.02 -
    Fortinet 3.14.0.0 2008.09.02 -
    GData 19 2008.09.02 -
    Ikarus T3.1.1.34.0 2008.09.02 -
    K7AntiVirus 7.10.437 2008.09.02 -
    Kaspersky 7.0.0.125 2008.09.02 -
    McAfee 5375 2008.09.02 -
    Microsoft 1.3807 2008.09.02 -
    NOD32v2 3408 2008.09.02 -
    Norman 5.80.02 2008.09.02 -
    Panda 9.0.0.4 2008.09.02 -
    PCTools 4.4.2.0 2008.09.02 -
    Prevx1 V2 2008.09.02 -
    Rising 20.60.11.00 2008.09.02 -
    Sophos 4.33.0 2008.09.02 Mal/EncPk-DG
    Sunbelt 3.1.1592.1 2008.08.30 -
    Symantec 10 2008.09.02 -
    TheHacker 6.3.0.8.070 2008.09.02 -
    TrendMicro 8.700.0.1004 2008.09.02 -
    VBA32 3.12.8.4 2008.09.02 -
    ViRobot 2008.9.2.1361 2008.09.02 -
    VirusBuster 4.5.11.0 2008.09.02 -
    Webwasher-Gateway 6.6.2 2008.09.02 -
    Information additionnelle
    File size: 131072 bytes
    MD5...: a0419a8b3347d0d68137b3b0e9ac76e3
    SHA1..: 55e8075085a3ebc63bb8345db937d54612a2b882
    SHA256: 89dc9a4b1d54e39cd551b9524a5ee9da2e612ce5084c905ceb209d815271fc5f
    SHA512: 9104636ff48fcdbc35ff8335f51bdbb2f2888d15972f13e3a351fe52528fc145
    ffdd1653c80056e118bbc0e2322094564829f67d7c73379d3f92ae0702aefa32
    PEiD..: -
    TrID..: File type identification
    Win32 Executable Generic (42.3%)
    Win32 Dynamic Link Library (generic) (37.6%)
    Generic Win/DOS Executable (9.9%)
    DOS Executable Generic (9.9%)
    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
    PEInfo: PE Structure information

    ( base data )
    entrypointaddress.: 0x100126f9
    timedatestamp.....: 0x48b40ced (Tue Aug 26 14:02:21 2008)
    machinetype.......: 0x14c (I386)

    ( 4 sections )
    name viradd virsiz rawdsiz ntrpy md5
    .axwb 0x1000 0x1adce 0x1b000 6.92 9c4531781ddecdcdce2867b0c3cc59e5
    .jcfzii 0x1c000 0x791 0x1000 3.12 626ed63cbf047d81a5b047c92167a01e
    .jajnr 0x1d000 0x1f48 0x1000 0.52 9dab7aa5087cd597a128f70a4024003b
    .reloc 0x1f000 0x1980 0x2000 6.02 a76b1f255b436114548d4aec833ac236

    ( 4 imports )
    > KERNEL32.dll: LockResource, WritePrivateProfileStringW, GetCurrentProcessId, lstrcpyW, FindNextChangeNotification, GetModuleFileNameW, GetPrivateProfileStringW, FindFirstFileW, GetModuleHandleW, MoveFileW, SizeofResource, GlobalDeleteAtom, CreateEventW, GlobalUnlock, InterlockedIncrement, GetCurrentProcess, CreateThread, LoadLibraryA, GetLastError, CreateWaitableTimerW, GetDriveTypeW, WaitForMultipleObjects, MulDiv, SuspendThread, GetTickCount, GetProcAddress, FindFirstChangeNotificationW, GetLocalTime, FindNextFileW, SetEvent, LoadLibraryW, WideCharToMultiByte, WaitForSingleObject
    > USER32.dll: SetCursorPos, EnableWindow, GetWindowDC, SetWindowTextW, SetForegroundWindow, LoadCursorW, PostQuitMessage, ReleaseCapture, TranslateMessage, SystemParametersInfoW, UpdateWindow, SetCursor, PostMessageW, GetWindowTextW, SetWindowPos
    > GDI32.dll: DPtoLP, MoveToEx, SetMapMode, GetStockObject, LineTo, GetDeviceCaps, CreatePen, SetBkColor
    > ADVAPI32.dll: LookupPrivilegeValueW, InitializeSecurityDescriptor, LookupAccountSidW, StartServiceW, RegCloseKey

    ( 4 exports )
    DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer

    ---------------------------------
    RAPPORT HijackThis
    ---------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:00:30, on 02/09/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    C:\WINDOWS\system32\slserv.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\yzepmlev.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe
    O4 - HKCU\..\Run: [CfgHlpMnt] C:\WINDOWS\system32\yzepmlev.exe
    O4 - HKCU\..\Run: [Antispyware] C:\Program Files\Antispyware\Antispyware.exe -boot
    O4 - HKLM\..\Policies\Explorer\Run: [QWYKblvBdD] C:\Documents and Settings\All Users\Application Data\mxudujgv\knktmnud.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://webcam.asf.fr/AxisCamControl.ocx
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {C4D2D8E0-D1DD-11CE-940F-008029004347} (System Monitor Control) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O21 - SSODL: ComAct - {2DBB5704-3A80-9AC8-A17B-08476EF0B677} - C:\Program Files\yysfao\ComAct.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
Précédent
  • 1
  • 2