probleme programme qwwsmmwi.exe Résolu/Fermé

Question

Bonjour, des que j allume mon ordi iune petite fenetre s ouvre et me dit  qwwsmwi.exe a cesse de fontionner et il me dit de le fermer mais je sait pas ce quai ce programme est ce que quelqu un peut me renseigner merci

ourssinou · Answer

slt !!

C:\documents and settings	hibeau\local settings\application data\qwwsmwi.exe

@ tu qq'chose comme sa ???

keta42 · Answer

enfaite ca me le fait pas tout le temps la j ai etain puit rallumer mon ordi et ca me la pas fait mais une petite fenetre s ouvre au milieux de l ecrant et ca me dit programme qwwsmwi.exe a cesse de fontionner  et en desous ca me dit fermer le programme et sait window qui me dit ca

ourssinou · Answer

tu a confli avec un programme regarde les programme qui s'ouvre et corrige l'erreur ..

keta42 · Answer

il veut plus le faire j ai etain mon ordi et rallumer 2 fois et il lefait plus je voulait voir excatement ce qui disait mais il y a que cette fenetre qui s ouvre et j ai essayer de trouver ce programme en lancent une recherche et il le trouve pas la prochaine fois qui me le fait je te le fait savoir par message privee ca te derange pas et merci d avoir repondu si vite s est super merci

ourssinou · Answer

de rien 

;-) 


@+

ourssi..

sandul · Answer

Salut,

Très probablement un malware, ton qwwsmmwi.exe. Le fait qu'il n'y a pas beaucoup de réponses lorsque tu fais une recherche Google est une bonne indication. Nom de fichier généré aléatoirement par le malware.

Poste un rapport HijackThis, please. Tuto ici: http://www.libellules.ch/poster_log_hijackthis.php

++

keta42 · Answer

ok j ai fait ce qui ai dit mais j en suis la et apresLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:22:06, on 04/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [dog about manager team] "C:\ProgramData\Mpeg Program Default.f348ws"
O4 - HKCU\..\Run: [Logo Base] "C:\ProgramData\Axisfirstfirst.kie45ao"
O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

sandul · Answer

Ok, pour le rapport, tu l'as correctement copié ici, je regarde.

et la je bloque je sait pas ou quel forum <== tu es sur un forum (appelé "comment ça marche") ;-)

keta42 · Answer

ok merci dit moi car je suis novice en la matiere

sandul · Answer

Ton PC et infecté. En attendant la procédure à suivre pour la désinfection, est-ce que tu peux laisser un saul antivirus actif sur cette machine, s'il te plaît?

As-tu acheté F-Secure? Si la réponse est négative: désinstalle-le; désinstalle Avast également. Antivir suffira pour te protéger. On va lui rajouter également un pare-feu plus tard.

Su tu as acheté F-Secure, tu peux le garder; désintalle les 2 autres (Avira et Avast).

A plucheu.

sandul · Answer

Une fois que tu as laissé un seul antivirus:

Télécharge Lop sur ton bureau: https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
1. Double-clique dessus pour lancer l'installation
2. Puis double-clique sur le raccourci Lop S&D présent sur ton bureau
3. Sélectionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
4. Patiente jusqu'à la fin du scan
5. Poste le rapport généré ( C:\lopR.txt ) 


( Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide )

keta42 · Answer

impossible de desintaler f-secure je sait pas pourquoi avast y ai plus

sandul · Answer

Bon, mettons un peu d'ordre dans tout ça. Confirme/réponds aux questions:

1. F-Secure n'est pas acheté et tu veux le désinstaller
2. Quelle version exacte de F-Secure as-tu?
3. Comment as-tu procédé pour le désinstaller?
4. Quelles erreurs/quel comportement du PC as-tu lorsque tu essaies de le supprimer?

Un peu de loquacité ne te ferait pas mal, tu sais :-)

keta42 · Answer

pour le dessintaler j ai fait panneau de configuration puis programme et fonctionnalite apres clic sur f-secure et modifier dessintaler  a^res je suis dans l assistance de dessintalation apres ca me mait suprime tout je mait demarer etla ca mer mait desole s il sagit d un premiere echec effectuer les operation suivante redemarer l ordi connecte vous en tant k administrateur , ouvrer le panneau de configuration et reeexecuter  la dessintalation
souhaiter vous redemarer maintenant ?
redemarer maintenant recommande
redemarer plus tard 

et la je peut plus rien faire cette fenetre veut meme pas ce ferme je clic droit rien gauche non plus que faire j ai essayer de le maitre en tant q administrateur en fesant clic gauche et ce nait pas marquer je suis perdu

sandul · Answer

Il s'agit de quelle version F-Secure?

keta42 · Answer

c est marquer que f-secure anti virus comment je peut le savoir

sandul · Answer

Ouvre le produit F-Secure et tu devrais avoir quelque part dans le menu un truc genre Help/About ou Aide/A propos de...

Bon, finalement on peut se passer de la version. Essayons ceci:

1. Télecharge ceci sur ton bureau: ftp://ftp.f-secure.com/support/tools/uitool/UITool3-420.zip
2. Fais une extraction des fichiers quelque part sur ton disque (les recommandations F-Secure: dans u ndossier vide ==> tu peux créer par exemple C:	emp et extraire dedans)
3. Exécute UninstallationTool.exe avec des droits d'administrateur

Redémarre la machine. Reposte un fichier hijackThis pour confirmer la suppression des 2 anutivirus.

keta42 · Answer

je croit que la version ai f-secure binary
                                 f-secure corporation

keta42 · Answer

je pense que j ai tout bien fait 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:54:20, on 04/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [dog about manager team] "C:\ProgramData\Mpeg Program Default.f348ws"
O4 - HKCU\..\Run: [Logo Base] "C:\ProgramData\Axisfirstfirst.kie45ao"
O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

keta42 · Answer

j ai pas redemarre ma machine elle la fait toute seul

sandul · Answer

Parfait. Continue avec les instructions au post no 11, s'il te plaît.

++

keta42 · Answer

ok ca me mait ca 

   --------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Basique  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU     E4500  @ 2.20GHz )
   BIOS : BIOS Date: 07/25/07 14:40:01 Ver: 08.00.12
   USER : anais ( Administrator )
   BOOT : Normal boot
   Antivirus : Windows Live OneCare 1.0.0 (Not Activated)
   Firewall  : Pare-feu Windows Live OneCare 1.0.0 (Not Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:40 Go (Free:8 Go)
   D:\ (Local Disk) - NTFS - Total:332 Go (Free:156 Go)
   E:\ (CD or DVD)
   O:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [1] ( 04/12/2008|18:08 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local

   [01/07/2008|13:03] C:\Users\anais\AppData\Local\Adobe
   [09/04/2008|12:22] C:\Users\anais\AppData\Local\Ahead
   [07/06/2008|17:53] C:\Users\anais\AppData\Local\Apple
   [07/06/2008|18:06] C:\Users\anais\AppData\Local\Apple Computer
   [15/03/2008|22:13] C:\Users\anais\AppData\Local\Application Data 
   [03/12/2008|19:04] C:\Users\anais\AppData\Local\Apps
   [06/11/2008|22:57] C:\Users\anais\AppData\Local\d3d8caps.dat
   [25/11/2008|17:03] C:\Users\anais\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [04/12/2008|17:50] C:\Users\anais\AppData\Local\ecrpn.bat
   [05/11/2008|01:24] C:\Users\anais\AppData\Local\eMule
   [03/11/2008|16:05] C:\Users\anais\AppData\Local\GDIPFONTCACHEV1.DAT
   [18/04/2008|15:12] C:\Users\anais\AppData\Local\Google
   [15/03/2008|22:13] C:\Users\anais\AppData\Local\Historique 
   [04/12/2008|17:49] C:\Users\anais\AppData\Local\IconCache.db
   [10/10/2008|16:53] C:\Users\anais\AppData\Local\Microsoft
   [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Games
   [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Help
   [17/03/2008|17:59] C:\Users\anais\AppData\Local\Mozilla
   [15/03/2008|22:20] C:\Users\anais\AppData\Local\Oblivion
   [06/08/2008|16:44] C:\Users\anais\AppData\Local\PokerStars.NET
   [01/08/2008|22:24] C:\Users\anais\AppData\Local\PunkBuster
   [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi.dat
   [22/11/2008|10:23] C:\Users\anais\AppData\Local\qwwsmwi.exe
   [04/12/2008|12:24] C:\Users\anais\AppData\Local\qwwsmwi_nav.dat
   [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi_navps.dat
   [04/12/2008|18:07] C:\Users\anais\AppData\Local\Temp
   [15/03/2008|22:13] C:\Users\anais\AppData\Local\Temporary Internet Files 
   [17/03/2008|18:00] C:\Users\anais\AppData\Local\Torrent-Search
   [02/04/2008|09:46] C:\Users\anais\AppData\Local\VirtualStore
   [28/03/2008|21:44] C:\Users\anais\AppData\Local\Windows Live Writer
   [11/09/2008|12:05] C:\Users\anais\AppData\Local\Zylom Games
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [28/03/2008 22:53][--a------] C:\Windows	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [04/12/2008 17:50][--ah-----] C:\Windows	asks\SA.DAT
   [04/12/2008 17:49][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [15/03/2008|22:15] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
   [17/03/2008|20:13] C:\ProgramData\addr_file.html
   [17/03/2008|19:12] C:\ProgramData\Adobe
   [07/06/2008|17:52] C:\ProgramData\Apple
   [02/11/2006|13:59] C:\ProgramData\Application Data 
   [28/10/2008|15:09] C:\ProgramData\Avira
   [02/09/2008|16:58] C:\ProgramData\Axisfirstfirst.4bt6o
   [06/05/2008|12:41] C:\ProgramData\Axisfirstfirst.dd9lm2
   [06/05/2008|12:37] C:\ProgramData\Axisfirstfirst.in7fx
   [02/09/2008|16:58] C:\ProgramData\Axisfirstfirst.kie45ao
   [15/03/2008|22:32] C:\ProgramData\Bureau 
   [02/11/2006|13:59] C:\ProgramData\Desktop 
   [02/11/2006|13:59] C:\ProgramData\Documents 
   [05/04/2008|17:50] C:\ProgramData\Downloaded Installations
   [12/06/2008|02:07] C:\ProgramData\Drv Audio Dog About
   [15/04/2008|23:25] C:\ProgramData\eMule
   [11/09/2008|11:54] C:\ProgramData\eSellerate
   [05/05/2008|13:55] C:\ProgramData\Farm Frenzy
   [15/03/2008|22:32] C:\ProgramData\Favoris 
   [02/11/2006|13:59] C:\ProgramData\Favorites 
   [08/09/2008|12:33] C:\ProgramData\FLAWANTI
   [16/03/2008|17:27] C:\ProgramData\F-Secure
   [16/03/2008|17:24] C:\ProgramData\fssg
   [05/05/2008|11:01] C:\ProgramData\Gogii
   [18/04/2008|14:44] C:\ProgramData\Google
   [04/12/2008|14:24] C:\ProgramData\Google Updater
   [18/05/2008|19:01] C:\ProgramData\Lea passion Mode
   [09/04/2008|11:32] C:\ProgramData\LightScribe
   [04/09/2008|16:50] C:\ProgramData\LogiShrd
   [04/09/2008|16:50] C:\ProgramData\Logitech
   [15/03/2008|22:32] C:\ProgramData\Menu D‚marrer 
   [24/05/2008|20:38] C:\ProgramData\Messenger Plus!
   [17/07/2008|15:34] C:\ProgramData\Microsoft
   [17/03/2008|20:17] C:\ProgramData\Microsoft Help
   [15/03/2008|22:32] C:\ProgramData\ModŠles 
   [06/05/2008|12:41] C:\ProgramData\Mpeg Program Default.f348ws
   [09/04/2008|11:23] C:\ProgramData\Nero
   [28/10/2008|16:40] C:\ProgramData\NVIDIA
   [14/04/2008|17:17] C:\ProgramData\PopCap
   [02/11/2006|13:59] C:\ProgramData\Start Menu 
   [10/08/2008|20:52] C:\ProgramData\TEMP
   [02/11/2006|13:59] C:\ProgramData\Templates 
   [11/09/2008|11:56] C:\ProgramData\WLInstaller
   [28/03/2008|13:37] C:\ProgramData\Zylom

   --------------------\  Listing des dossiers dans C:\Program Files

   [15/03/2008|22:14] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
   [08/09/2008|12:34] C:\Program Files\Adobe
   [28/10/2008|16:53] C:\Program Files\Alwil Software
   [12/06/2008|02:07] C:\Program Files\Apple Software Update
   [11/06/2008|18:43] C:\Program Files\Apple Software Update(0)
   [15/03/2008|22:14] C:\Program Files\ASUS
   [28/10/2008|15:09] C:\Program Files\Avira
   [07/06/2008|17:54] C:\Program Files\Bonjour
   [14/11/2008|16:47] C:\Program Files\Circle Developement
   [04/09/2008|16:50] C:\Program Files\Common Files
   [17/03/2008|18:00] C:\Program Files\Conduit
   [22/11/2008|11:25] C:\Program Files\directx
   [05/11/2008|01:24] C:\Program Files\eMule
   [01/08/2008|00:33] C:\Program Files\EoRezo
   [15/03/2008|22:32] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [13/11/2008|01:47] C:\Program Files\Google
   [12/07/2008|20:14] C:\Program Files\Image-Line
   [22/11/2008|11:14] C:\Program Files\InstallShield Installation Information
   [15/03/2008|22:14] C:\Program Files\Intel
   [17/10/2008|11:18] C:\Program Files\Internet Explorer
   [18/04/2008|14:44] C:\Program Files\Java
   [04/09/2008|16:50] C:\Program Files\Logitech
   [07/09/2008|19:35] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [03/11/2008|18:35] C:\Program Files\Microsoft Games
   [17/03/2008|20:17] C:\Program Files\Microsoft Office
   [23/10/2008|11:13] C:\Program Files\Microsoft Silverlight
   [15/03/2008|22:15] C:\Program Files\Microsoft Small Business
   [10/07/2008|16:27] C:\Program Files\Microsoft SQL Server
   [17/03/2008|21:25] C:\Program Files\Microsoft SQL Server Compact Edition
   [15/03/2008|22:15] C:\Program Files\Microsoft.NET
   [22/11/2008|11:14] C:\Program Files\Monte Cristo
   [02/11/2006|13:40] C:\Program Files\Movie Maker
   [15/11/2008|14:49] C:\Program Files\Mozilla Firefox
   [02/11/2006|13:35] C:\Program Files\MSBuild
   [02/11/2006|13:35] C:\Program Files\MSN
   [15/03/2008|22:15] C:\Program Files\My Company Name
   [09/04/2008|11:23] C:\Program Files\Nero
   [15/03/2008|22:15] C:\Program Files\Neuf
   [17/03/2008|19:39] C:\Program Files\OpenOffice.org 2.3
   [12/07/2008|20:01] C:\Program Files\Outsim
   [16/03/2008|17:29] C:\Program Files\Pack Securite
   [22/04/2008|12:10] C:\Program Files\PhotoFiltre
   [11/11/2008|23:50] C:\Program Files\PokerStars.NET
   [14/04/2008|17:16] C:\Program Files\PopCap Games
   [11/06/2008|18:46] C:\Program Files\QuickTime(18)
   [15/03/2008|22:52] C:\Program Files\Realtek
   [02/11/2006|13:35] C:\Program Files\Reference Assemblies
   [15/03/2008|22:15] C:\Program Files\Samsung
   [01/09/2008|14:31] C:\Program Files\SEUCDaS
   [15/03/2008|22:15] C:\Program Files\SystemRequirementsLab
   [11/08/2008|15:54] C:\Program Files\Torrent-Search
   [18/05/2008|18:52] C:\Program Files\UBISOFT
   [02/11/2006|13:58] C:\Program Files\Uninstall Information
   [17/03/2008|17:47] C:\Program Files\uTorrent
   [05/04/2008|23:25] C:\Program Files\VirginMega
   [16/03/2008|18:05] C:\Program Files\Windows Calendar
   [02/11/2006|13:40] C:\Program Files\Windows Collaboration
   [16/03/2008|18:04] C:\Program Files\Windows Defender
   [06/05/2008|12:55] C:\Program Files\Windows Live
   [28/03/2008|22:53] C:\Program Files\Windows Live Favorites
   [28/03/2008|22:53] C:\Program Files\Windows Live Toolbar
   [17/10/2008|11:18] C:\Program Files\Windows Mail
   [16/03/2008|18:04] C:\Program Files\Windows Media Player
   [15/03/2008|22:32] C:\Program Files\Windows NT
   [02/11/2006|13:40] C:\Program Files\Windows Photo Gallery
   [16/03/2008|18:04] C:\Program Files\Windows Sidebar
   [17/05/2008|19:18] C:\Program Files\WinRAR
   [06/08/2008|18:54] C:\Program Files\Wolfenstein - Enemy Territory

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [17/03/2008|19:12] C:\Program Files\Common Files\Adobe
   [09/04/2008|11:27] C:\Program Files\Common Files\Ahead
   [07/06/2008|17:52] C:\Program Files\Common Files\Apple
   [01/04/2008|15:04] C:\Program Files\Common Files\Blizzard Entertainment
   [15/03/2008|22:14] C:\Program Files\Common Files\InstallShield
   [17/03/2008|19:38] C:\Program Files\Common Files\Java
   [09/04/2008|11:27] C:\Program Files\Common Files\LightScribe
   [04/09/2008|16:51] C:\Program Files\Common Files\LogiShrd
   [15/04/2008|22:51] C:\Program Files\Common Files\microsoft shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [16/03/2008|18:05] C:\Program Files\Common Files\System
   [17/03/2008|21:22] C:\Program Files\Common Files\WindowsLiveInstaller
   [07/06/2008|17:24] C:\Program Files\Common Files\Wise Installation Wizard

   --------------------\  Process

   ( 68 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\Axisfirstfirst.4bt6o
   C:\ProgramData\Axisfirstfirst.in7fx
   C:\ProgramData\Axisfirstfirst.dd9lm2
   C:\ProgramData\Mpeg Program Default.f348ws
   C:\ProgramData\Axisfirstfirst.kie45ao
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\ProgramData\Drv Audio Dog About
   C:\Users\anais\AppData\Local\Temp\msgpl_104e.tmp
   C:\Program Files\Circle Developement
   C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@advertising[1].txt
   C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@adopt.euroclick[1].txt
   C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@2xmoinscher[2].txt
   C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@www.2xmoinscher[2].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "Logo Base"="\"C:\ProgramData\Axisfirstfirst.kie45ao\""
   "dog about manager team"="\"C:\ProgramData\Mpeg Program Default.f348ws\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-04 18:08:14
   Windows 6.0.6000  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 21
 
   --------------------\  Recherche d'autres infections

 
   C:\Users\anais\AppData\Local\qwwsmwi.dat
   C:\Users\anais\AppData\Local\qwwsmwi.exe
   C:\Users\anais\AppData\Local\qwwsmwi_nav.dat
   C:\Users\anais\AppData\Local\qwwsmwi_navps.dat
   [b]==> EGDACCESS <==/b

   --------------------\  Cracks & Keygens ..

   C:\Users\anais\AppData\Roaming\uTorrent\Universe At War - Earth Assault PC KEYGEN.torrent


   [F:3640][D:133]-> C:\Users\anais\AppData\Local\Temp
   [F:2171][D:1]-> C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:4929][D:10]-> C:\Users\anais\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:29][D:3]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 04/12/2008|18:10 - Option : [1]

   --------------------\  Fin du rapport a 18:10:48
   [ UAC => 1 ]

keta42 · Answer

dit moi tu comprent quelque chose la dedans mess au dessus moi rien peut tu me dire ou ca en ai merci

sandul · Answer

Re,

1. Exécute à nouveau Lop S&D, cette fois-ci avec l'option 2 pour supprimer. Ne ferme pas la fenêtre pendant la suppression.
2. Poste le rapport Lop (que tu trouveras ici: C:\lopR.txt) ainsi qu'un nouveau rapport hijackThis

++

keta42 · Answer

raport de lop --------------------\ Lop S&D 4.2.4-9c XP/Vista Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6000 ) X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz ) BIOS : BIOS Date: 07/25/07 14:40:01 Ver: 08.00.12 USER : anais ( Administrator ) BOOT : Normal boot Antivirus : Windows Live OneCare 1.0.0 (Not Activated) Firewall : Pare-feu Windows Live OneCare 1.0.0 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:40 Go (Free:8 Go) D:\ (Local Disk) - NTFS - Total:332 Go (Free:156 Go) E:\ (CD or DVD) O:\ (CD or DVD) "C:\Lop SD" ( MAJ : 01-11-2008|16:30 ) Option : [2] ( 04/12/2008|19:13 ) [ UAC => 1 ] \\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\Users\anais\AppData\Local\Temp\msgpl_104e.tmp Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@advertising[1].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@adopt.euroclick[1].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@2xmoinscher[2].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@www.2xmoinscher[2].txt Supprime! - C:\ProgramData\Axisfirstfirst.4bt6o Supprime! - C:\ProgramData\Axisfirstfirst.in7fx Supprime! - C:\ProgramData\Axisfirstfirst.dd9lm2 Supprime! - C:\ProgramData\Mpeg Program Default.f348ws Supprime! - C:\ProgramData\Axisfirstfirst.kie45ao Supprime! - C:\ProgramData\Drv Audio Dog About Supprime! - C:\Program Files\Circle Developement - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\ --------------------\ Listing des dossiers dans Local [01/07/2008|13:03] C:\Users\anais\AppData\Local\Adobe [09/04/2008|12:22] C:\Users\anais\AppData\Local\Ahead [07/06/2008|17:53] C:\Users\anais\AppData\Local\Apple [07/06/2008|18:06] C:\Users\anais\AppData\Local\Apple Computer [15/03/2008|22:13] C:\Users\anais\AppData\Local\Application Data [03/12/2008|19:04] C:\Users\anais\AppData\Local\Apps [06/11/2008|22:57] C:\Users\anais\AppData\Local\d3d8caps.dat [25/11/2008|17:03] C:\Users\anais\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [04/12/2008|17:50] C:\Users\anais\AppData\Local\ecrpn.bat [05/11/2008|01:24] C:\Users\anais\AppData\Local\eMule [03/11/2008|16:05] C:\Users\anais\AppData\Local\GDIPFONTCACHEV1.DAT [18/04/2008|15:12] C:\Users\anais\AppData\Local\Google [15/03/2008|22:13] C:\Users\anais\AppData\Local\Historique [04/12/2008|17:49] C:\Users\anais\AppData\Local\IconCache.db [10/10/2008|16:53] C:\Users\anais\AppData\Local\Microsoft [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Games [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Help [17/03/2008|17:59] C:\Users\anais\AppData\Local\Mozilla [15/03/2008|22:20] C:\Users\anais\AppData\Local\Oblivion [06/08/2008|16:44] C:\Users\anais\AppData\Local\PokerStars.NET [01/08/2008|22:24] C:\Users\anais\AppData\Local\PunkBuster [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi.dat [22/11/2008|10:23] C:\Users\anais\AppData\Local\qwwsmwi.exe [04/12/2008|12:24] C:\Users\anais\AppData\Local\qwwsmwi_nav.dat [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi_navps.dat [04/12/2008|19:13] C:\Users\anais\AppData\Local\Temp [15/03/2008|22:13] C:\Users\anais\AppData\Local\Temporary Internet Files [17/03/2008|18:00] C:\Users\anais\AppData\Local\Torrent-Search [02/04/2008|09:46] C:\Users\anais\AppData\Local\VirtualStore [28/03/2008|21:44] C:\Users\anais\AppData\Local\Windows Live Writer [11/09/2008|12:05] C:\Users\anais\AppData\Local\Zylom Games --------------------\ Tâches planifiées dans C:\Windows asks [28/03/2008 22:53][--a------] C:\Windows asks\V‚rifier les mises … jour de Windows Live Toolbar.job [04/12/2008 17:50][--ah-----] C:\Windows asks\SA.DAT [04/12/2008 17:49][--a------] C:\Windows asks\SCHEDLGU.TXT --------------------\ Listing des dossiers dans C:\ProgramData [15/03/2008|22:15] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1} [17/03/2008|20:13] C:\ProgramData\addr_file.html [17/03/2008|19:12] C:\ProgramData\Adobe [07/06/2008|17:52] C:\ProgramData\Apple [02/11/2006|13:59] C:\ProgramData\Application Data [28/10/2008|15:09] C:\ProgramData\Avira [15/03/2008|22:32] C:\ProgramData\Bureau [02/11/2006|13:59] C:\ProgramData\Desktop [02/11/2006|13:59] C:\ProgramData\Documents [05/04/2008|17:50] C:\ProgramData\Downloaded Installations [15/04/2008|23:25] C:\ProgramData\eMule [11/09/2008|11:54] C:\ProgramData\eSellerate [05/05/2008|13:55] C:\ProgramData\Farm Frenzy [15/03/2008|22:32] C:\ProgramData\Favoris [02/11/2006|13:59] C:\ProgramData\Favorites [08/09/2008|12:33] C:\ProgramData\FLAWANTI [16/03/2008|17:27] C:\ProgramData\F-Secure [16/03/2008|17:24] C:\ProgramData\fssg [05/05/2008|11:01] C:\ProgramData\Gogii [18/04/2008|14:44] C:\ProgramData\Google [04/12/2008|14:24] C:\ProgramData\Google Updater [18/05/2008|19:01] C:\ProgramData\Lea passion Mode [09/04/2008|11:32] C:\ProgramData\LightScribe [04/09/2008|16:50] C:\ProgramData\LogiShrd [04/09/2008|16:50] C:\ProgramData\Logitech [15/03/2008|22:32] C:\ProgramData\Menu D‚marrer [24/05/2008|20:38] C:\ProgramData\Messenger Plus! [17/07/2008|15:34] C:\ProgramData\Microsoft [17/03/2008|20:17] C:\ProgramData\Microsoft Help [15/03/2008|22:32] C:\ProgramData\ModŠles [09/04/2008|11:23] C:\ProgramData\Nero [28/10/2008|16:40] C:\ProgramData\NVIDIA [14/04/2008|17:17] C:\ProgramData\PopCap [02/11/2006|13:59] C:\ProgramData\Start Menu [10/08/2008|20:52] C:\ProgramData\TEMP [02/11/2006|13:59] C:\ProgramData\Templates [11/09/2008|11:56] C:\ProgramData\WLInstaller [28/03/2008|13:37] C:\ProgramData\Zylom --------------------\ Listing des dossiers dans C:\Program Files [15/03/2008|22:14] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [08/09/2008|12:34] C:\Program Files\Adobe [28/10/2008|16:53] C:\Program Files\Alwil Software [12/06/2008|02:07] C:\Program Files\Apple Software Update [11/06/2008|18:43] C:\Program Files\Apple Software Update(0) [15/03/2008|22:14] C:\Program Files\ASUS [28/10/2008|15:09] C:\Program Files\Avira [07/06/2008|17:54] C:\Program Files\Bonjour [04/09/2008|16:50] C:\Program Files\Common Files [17/03/2008|18:00] C:\Program Files\Conduit [22/11/2008|11:25] C:\Program Files\directx [05/11/2008|01:24] C:\Program Files\eMule [01/08/2008|00:33] C:\Program Files\EoRezo [15/03/2008|22:32] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [13/11/2008|01:47] C:\Program Files\Google [12/07/2008|20:14] C:\Program Files\Image-Line [22/11/2008|11:14] C:\Program Files\InstallShield Installation Information [15/03/2008|22:14] C:\Program Files\Intel [17/10/2008|11:18] C:\Program Files\Internet Explorer [18/04/2008|14:44] C:\Program Files\Java [04/09/2008|16:50] C:\Program Files\Logitech [07/09/2008|19:35] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [03/11/2008|18:35] C:\Program Files\Microsoft Games [17/03/2008|20:17] C:\Program Files\Microsoft Office [23/10/2008|11:13] C:\Program Files\Microsoft Silverlight [15/03/2008|22:15] C:\Program Files\Microsoft Small Business [10/07/2008|16:27] C:\Program Files\Microsoft SQL Server [17/03/2008|21:25] C:\Program Files\Microsoft SQL Server Compact Edition [15/03/2008|22:15] C:\Program Files\Microsoft.NET [22/11/2008|11:14] C:\Program Files\Monte Cristo [02/11/2006|13:40] C:\Program Files\Movie Maker [15/11/2008|14:49] C:\Program Files\Mozilla Firefox [02/11/2006|13:35] C:\Program Files\MSBuild [02/11/2006|13:35] C:\Program Files\MSN [15/03/2008|22:15] C:\Program Files\My Company Name [09/04/2008|11:23] C:\Program Files\Nero [15/03/2008|22:15] C:\Program Files\Neuf [17/03/2008|19:39] C:\Program Files\OpenOffice.org 2.3 [12/07/2008|20:01] C:\Program Files\Outsim [16/03/2008|17:29] C:\Program Files\Pack Securite [22/04/2008|12:10] C:\Program Files\PhotoFiltre [11/11/2008|23:50] C:\Program Files\PokerStars.NET [14/04/2008|17:16] C:\Program Files\PopCap Games [11/06/2008|18:46] C:\Program Files\QuickTime(18) [15/03/2008|22:52] C:\Program Files\Realtek [02/11/2006|13:35] C:\Program Files\Reference Assemblies [15/03/2008|22:15] C:\Program Files\Samsung [01/09/2008|14:31] C:\Program Files\SEUCDaS [15/03/2008|22:15] C:\Program Files\SystemRequirementsLab [11/08/2008|15:54] C:\Program Files\Torrent-Search [18/05/2008|18:52] C:\Program Files\UBISOFT [02/11/2006|13:58] C:\Program Files\Uninstall Information [17/03/2008|17:47] C:\Program Files\uTorrent [05/04/2008|23:25] C:\Program Files\VirginMega [16/03/2008|18:05] C:\Program Files\Windows Calendar [02/11/2006|13:40] C:\Program Files\Windows Collaboration [16/03/2008|18:04] C:\Program Files\Windows Defender [06/05/2008|12:55] C:\Program Files\Windows Live [28/03/2008|22:53] C:\Program Files\Windows Live Favorites [28/03/2008|22:53] C:\Program Files\Windows Live Toolbar [17/10/2008|11:18] C:\Program Files\Windows Mail [16/03/2008|18:04] C:\Program Files\Windows Media Player [15/03/2008|22:32] C:\Program Files\Windows NT [02/11/2006|13:40] C:\Program Files\Windows Photo Gallery [16/03/2008|18:04] C:\Program Files\Windows Sidebar [17/05/2008|19:18] C:\Program Files\WinRAR [06/08/2008|18:54] C:\Program Files\Wolfenstein - Enemy Territory --------------------\ Listing des dossiers dans C:\Program Files\Common Files [17/03/2008|19:12] C:\Program Files\Common Files\Adobe [09/04/2008|11:27] C:\Program Files\Common Files\Ahead [07/06/2008|17:52] C:\Program Files\Common Files\Apple [01/04/2008|15:04] C:\Program Files\Common Files\Blizzard Entertainment [15/03/2008|22:14] C:\Program Files\Common Files\InstallShield [17/03/2008|19:38] C:\Program Files\Common Files\Java [09/04/2008|11:27] C:\Program Files\Common Files\LightScribe [04/09/2008|16:51] C:\Program Files\Common Files\LogiShrd [15/04/2008|22:51] C:\Program Files\Common Files\microsoft shared [02/11/2006|12:18] C:\Program Files\Common Files\Services [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines [16/03/2008|18:05] C:\Program Files\Common Files\System [17/03/2008|21:22] C:\Program Files\Common Files\WindowsLiveInstaller [07/06/2008|17:24] C:\Program Files\Common Files\Wise Installation Wizard --------------------\ Process ( 65 Processes ) ... OK ! --------------------\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Verification du Registre ..... OK ! --------------------\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-04 19:14:01 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 21 --------------------\ Recherche d'autres infections C:\Users\anais\AppData\Local\qwwsmwi.dat C:\Users\anais\AppData\Local\qwwsmwi.exe C:\Users\anais\AppData\Local\qwwsmwi_nav.dat C:\Users\anais\AppData\Local\qwwsmwi_navps.dat [b]==> EGDACCESS <==/b --------------------\ Cracks & Keygens .. C:\Users\anais\AppData\Roaming\uTorrent\Universe At War - Earth Assault PC KEYGEN.torrent [F:3641][D:131]-> C:\Users\anais\AppData\Local\Temp [F:2167][D:1]-> C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies [F:4929][D:10]-> C:\Users\anais\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:29][D:3]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 04/12/2008|18:10 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 04/12/2008|19:16 - Option : [2] --------------------\ Fin du rapport a 19:16:24 [ UAC => 1 ] raport hijak --------------------\ Lop S&D 4.2.4-9c XP/Vista Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6000 ) X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz ) BIOS : BIOS Date: 07/25/07 14:40:01 Ver: 08.00.12 USER : anais ( Administrator ) BOOT : Normal boot Antivirus : Windows Live OneCare 1.0.0 (Not Activated) Firewall : Pare-feu Windows Live OneCare 1.0.0 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:40 Go (Free:8 Go) D:\ (Local Disk) - NTFS - Total:332 Go (Free:156 Go) E:\ (CD or DVD) O:\ (CD or DVD) "C:\Lop SD" ( MAJ : 01-11-2008|16:30 ) Option : [2] ( 04/12/2008|19:13 ) [ UAC => 1 ] \\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\Users\anais\AppData\Local\Temp\msgpl_104e.tmp Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@advertising[1].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@adopt.euroclick[1].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@2xmoinscher[2].txt Supprime! - C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies\anais@www.2xmoinscher[2].txt Supprime! - C:\ProgramData\Axisfirstfirst.4bt6o Supprime! - C:\ProgramData\Axisfirstfirst.in7fx Supprime! - C:\ProgramData\Axisfirstfirst.dd9lm2 Supprime! - C:\ProgramData\Mpeg Program Default.f348ws Supprime! - C:\ProgramData\Axisfirstfirst.kie45ao Supprime! - C:\ProgramData\Drv Audio Dog About Supprime! - C:\Program Files\Circle Developement - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\ --------------------\ Listing des dossiers dans Local [01/07/2008|13:03] C:\Users\anais\AppData\Local\Adobe [09/04/2008|12:22] C:\Users\anais\AppData\Local\Ahead [07/06/2008|17:53] C:\Users\anais\AppData\Local\Apple [07/06/2008|18:06] C:\Users\anais\AppData\Local\Apple Computer [15/03/2008|22:13] C:\Users\anais\AppData\Local\Application Data [03/12/2008|19:04] C:\Users\anais\AppData\Local\Apps [06/11/2008|22:57] C:\Users\anais\AppData\Local\d3d8caps.dat [25/11/2008|17:03] C:\Users\anais\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [04/12/2008|17:50] C:\Users\anais\AppData\Local\ecrpn.bat [05/11/2008|01:24] C:\Users\anais\AppData\Local\eMule [03/11/2008|16:05] C:\Users\anais\AppData\Local\GDIPFONTCACHEV1.DAT [18/04/2008|15:12] C:\Users\anais\AppData\Local\Google [15/03/2008|22:13] C:\Users\anais\AppData\Local\Historique [04/12/2008|17:49] C:\Users\anais\AppData\Local\IconCache.db [10/10/2008|16:53] C:\Users\anais\AppData\Local\Microsoft [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Games [15/03/2008|22:20] C:\Users\anais\AppData\Local\Microsoft Help [17/03/2008|17:59] C:\Users\anais\AppData\Local\Mozilla [15/03/2008|22:20] C:\Users\anais\AppData\Local\Oblivion [06/08/2008|16:44] C:\Users\anais\AppData\Local\PokerStars.NET [01/08/2008|22:24] C:\Users\anais\AppData\Local\PunkBuster [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi.dat [22/11/2008|10:23] C:\Users\anais\AppData\Local\qwwsmwi.exe [04/12/2008|12:24] C:\Users\anais\AppData\Local\qwwsmwi_nav.dat [04/12/2008|17:50] C:\Users\anais\AppData\Local\qwwsmwi_navps.dat [04/12/2008|19:13] C:\Users\anais\AppData\Local\Temp [15/03/2008|22:13] C:\Users\anais\AppData\Local\Temporary Internet Files [17/03/2008|18:00] C:\Users\anais\AppData\Local\Torrent-Search [02/04/2008|09:46] C:\Users\anais\AppData\Local\VirtualStore [28/03/2008|21:44] C:\Users\anais\AppData\Local\Windows Live Writer [11/09/2008|12:05] C:\Users\anais\AppData\Local\Zylom Games --------------------\ Tâches planifiées dans C:\Windows asks [28/03/2008 22:53][--a------] C:\Windows asks\V‚rifier les mises … jour de Windows Live Toolbar.job [04/12/2008 17:50][--ah-----] C:\Windows asks\SA.DAT [04/12/2008 17:49][--a------] C:\Windows asks\SCHEDLGU.TXT --------------------\ Listing des dossiers dans C:\ProgramData [15/03/2008|22:15] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1} [17/03/2008|20:13] C:\ProgramData\addr_file.html [17/03/2008|19:12] C:\ProgramData\Adobe [07/06/2008|17:52] C:\ProgramData\Apple [02/11/2006|13:59] C:\ProgramData\Application Data [28/10/2008|15:09] C:\ProgramData\Avira [15/03/2008|22:32] C:\ProgramData\Bureau [02/11/2006|13:59] C:\ProgramData\Desktop [02/11/2006|13:59] C:\ProgramData\Documents [05/04/2008|17:50] C:\ProgramData\Downloaded Installations [15/04/2008|23:25] C:\ProgramData\eMule [11/09/2008|11:54] C:\ProgramData\eSellerate [05/05/2008|13:55] C:\ProgramData\Farm Frenzy [15/03/2008|22:32] C:\ProgramData\Favoris [02/11/2006|13:59] C:\ProgramData\Favorites [08/09/2008|12:33] C:\ProgramData\FLAWANTI [16/03/2008|17:27] C:\ProgramData\F-Secure [16/03/2008|17:24] C:\ProgramData\fssg [05/05/2008|11:01] C:\ProgramData\Gogii [18/04/2008|14:44] C:\ProgramData\Google [04/12/2008|14:24] C:\ProgramData\Google Updater [18/05/2008|19:01] C:\ProgramData\Lea passion Mode [09/04/2008|11:32] C:\ProgramData\LightScribe [04/09/2008|16:50] C:\ProgramData\LogiShrd [04/09/2008|16:50] C:\ProgramData\Logitech [15/03/2008|22:32] C:\ProgramData\Menu D‚marrer [24/05/2008|20:38] C:\ProgramData\Messenger Plus! [17/07/2008|15:34] C:\ProgramData\Microsoft [17/03/2008|20:17] C:\ProgramData\Microsoft Help [15/03/2008|22:32] C:\ProgramData\ModŠles [09/04/2008|11:23] C:\ProgramData\Nero [28/10/2008|16:40] C:\ProgramData\NVIDIA [14/04/2008|17:17] C:\ProgramData\PopCap [02/11/2006|13:59] C:\ProgramData\Start Menu [10/08/2008|20:52] C:\ProgramData\TEMP [02/11/2006|13:59] C:\ProgramData\Templates [11/09/2008|11:56] C:\ProgramData\WLInstaller [28/03/2008|13:37] C:\ProgramData\Zylom --------------------\ Listing des dossiers dans C:\Program Files [15/03/2008|22:14] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [08/09/2008|12:34] C:\Program Files\Adobe [28/10/2008|16:53] C:\Program Files\Alwil Software [12/06/2008|02:07] C:\Program Files\Apple Software Update [11/06/2008|18:43] C:\Program Files\Apple Software Update(0) [15/03/2008|22:14] C:\Program Files\ASUS [28/10/2008|15:09] C:\Program Files\Avira [07/06/2008|17:54] C:\Program Files\Bonjour [04/09/2008|16:50] C:\Program Files\Common Files [17/03/2008|18:00] C:\Program Files\Conduit [22/11/2008|11:25] C:\Program Files\directx [05/11/2008|01:24] C:\Program Files\eMule [01/08/2008|00:33] C:\Program Files\EoRezo [15/03/2008|22:32] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [13/11/2008|01:47] C:\Program Files\Google [12/07/2008|20:14] C:\Program Files\Image-Line [22/11/2008|11:14] C:\Program Files\InstallShield Installation Information [15/03/2008|22:14] C:\Program Files\Intel [17/10/2008|11:18] C:\Program Files\Internet Explorer [18/04/2008|14:44] C:\Program Files\Java [04/09/2008|16:50] C:\Program Files\Logitech [07/09/2008|19:35] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [03/11/2008|18:35] C:\Program Files\Microsoft Games [17/03/2008|20:17] C:\Program Files\Microsoft Office [23/10/2008|11:13] C:\Program Files\Microsoft Silverlight [15/03/2008|22:15] C:\Program Files\Microsoft Small Business [10/07/2008|16:27] C:\Program Files\Microsoft SQL Server [17/03/2008|21:25] C:\Program Files\Microsoft SQL Server Compact Edition [15/03/2008|22:15] C:\Program Files\Microsoft.NET [22/11/2008|11:14] C:\Program Files\Monte Cristo [02/11/2006|13:40] C:\Program Files\Movie Maker [15/11/2008|14:49] C:\Program Files\Mozilla Firefox [02/11/2006|13:35] C:\Program Files\MSBuild [02/11/2006|13:35] C:\Program Files\MSN [15/03/2008|22:15] C:\Program Files\My Company Name [09/04/2008|11:23] C:\Program Files\Nero [15/03/2008|22:15] C:\Program Files\Neuf [17/03/2008|19:39] C:\Program Files\OpenOffice.org 2.3 [12/07/2008|20:01] C:\Program Files\Outsim [16/03/2008|17:29] C:\Program Files\Pack Securite [22/04/2008|12:10] C:\Program Files\PhotoFiltre [11/11/2008|23:50] C:\Program Files\PokerStars.NET [14/04/2008|17:16] C:\Program Files\PopCap Games [11/06/2008|18:46] C:\Program Files\QuickTime(18) [15/03/2008|22:52] C:\Program Files\Realtek [02/11/2006|13:35] C:\Program Files\Reference Assemblies [15/03/2008|22:15] C:\Program Files\Samsung [01/09/2008|14:31] C:\Program Files\SEUCDaS [15/03/2008|22:15] C:\Program Files\SystemRequirementsLab [11/08/2008|15:54] C:\Program Files\Torrent-Search [18/05/2008|18:52] C:\Program Files\UBISOFT [02/11/2006|13:58] C:\Program Files\Uninstall Information [17/03/2008|17:47] C:\Program Files\uTorrent [05/04/2008|23:25] C:\Program Files\VirginMega [16/03/2008|18:05] C:\Program Files\Windows Calendar [02/11/2006|13:40] C:\Program Files\Windows Collaboration [16/03/2008|18:04] C:\Program Files\Windows Defender [06/05/2008|12:55] C:\Program Files\Windows Live [28/03/2008|22:53] C:\Program Files\Windows Live Favorites [28/03/2008|22:53] C:\Program Files\Windows Live Toolbar [17/10/2008|11:18] C:\Program Files\Windows Mail [16/03/2008|18:04] C:\Program Files\Windows Media Player [15/03/2008|22:32] C:\Program Files\Windows NT [02/11/2006|13:40] C:\Program Files\Windows Photo Gallery [16/03/2008|18:04] C:\Program Files\Windows Sidebar [17/05/2008|19:18] C:\Program Files\WinRAR [06/08/2008|18:54] C:\Program Files\Wolfenstein - Enemy Territory --------------------\ Listing des dossiers dans C:\Program Files\Common Files [17/03/2008|19:12] C:\Program Files\Common Files\Adobe [09/04/2008|11:27] C:\Program Files\Common Files\Ahead [07/06/2008|17:52] C:\Program Files\Common Files\Apple [01/04/2008|15:04] C:\Program Files\Common Files\Blizzard Entertainment [15/03/2008|22:14] C:\Program Files\Common Files\InstallShield [17/03/2008|19:38] C:\Program Files\Common Files\Java [09/04/2008|11:27] C:\Program Files\Common Files\LightScribe [04/09/2008|16:51] C:\Program Files\Common Files\LogiShrd [15/04/2008|22:51] C:\Program Files\Common Files\microsoft shared [02/11/2006|12:18] C:\Program Files\Common Files\Services [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines [16/03/2008|18:05] C:\Program Files\Common Files\System [17/03/2008|21:22] C:\Program Files\Common Files\WindowsLiveInstaller [07/06/2008|17:24] C:\Program Files\Common Files\Wise Installation Wizard --------------------\ Process ( 65 Processes ) ... OK ! --------------------\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Verification du Registre ..... OK ! --------------------\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-04 19:14:01 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 21 --------------------\ Recherche d'autres infections C:\Users\anais\AppData\Local\qwwsmwi.dat C:\Users\anais\AppData\Local\qwwsmwi.exe C:\Users\anais\AppData\Local\qwwsmwi_nav.dat C:\Users\anais\AppData\Local\qwwsmwi_navps.dat [b]==> EGDACCESS <==/b --------------------\ Cracks & Keygens .. C:\Users\anais\AppData\Roaming\uTorrent\Universe At War - Earth Assault PC KEYGEN.torrent [F:3641][D:131]-> C:\Users\anais\AppData\Local\Temp [F:2167][D:1]-> C:\Users\anais\AppData\Roaming\MICROS~1\Windows\Cookies [F:4929][D:10]-> C:\Users\anais\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:29][D:3]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 04/12/2008|18:10 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 04/12/2008|19:16 - Option : [2] --------------------\ Fin du rapport a 19:16:24 [ UAC => 1 ]

sandul · Answer

Manque le 2ème rapport, tu as posté 2 fois le rapport Lop ;-)

keta42 · Answer

desole voila
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:29:10, on 04/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

sandul · Answer

Oki, il reste qwwsmwi.exe mais les deux autres lignes ne sont plus là.

Fais ceci, please:

Télécharge MBAM sur ton bureau http://www.malwarebytes.org/mbam.php (tu fais Download). Installe-le et choisis mise à jour à la fin de l'installation. Ne démarre pas MBAM maintenant, mais redémarre en mode sans échec (une fois la mise à jour MBAM finie).

En mode sans échec (tu tapotes F8 au démarrage etc et choisis le mode sans échec):
1. Exécute MBAM et fais un examen complet
2. A la fin de l'examen, affiche les résultats et si des infections sont présentes supprime-les.

REMARQUE : Si MBAM a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

Poste le rapport MBAM et un autre rapport hijackthis.

++

keta42 · Answer

ok je suis desole ci tu attendais ma reponse je pensait pas etre aussi long alors
   LE RAPORT : mbam-log    ca ca me la mit de suite puit apres j ai voulut suprime les " VIRUS " 6 au total et ca ma dit impossible de supprime sertain element veuillez redemarer l ordi  un e sauvegarde du raport a ete saugarder je ta l en voie a bas tu vera :::::::
Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1460
Windows 6.0.6000 

04/12/2008 23:10:39
mbam-log-2008-12-04 (23-10-39).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 172670
Temps écoulé: 51 minute(s), 58 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 5

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CLASSES_ROOT\regfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\anais\Local Settings\Application Data\qwwsmwi_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Users\anais\Local Settings\Application Data\qwwsmwi_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Users\anais\Local Settings\Application Data\qwwsmwi.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Users\anais\Local Settings\Application Data\qwwsmwi.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Program Files\EoRezo (Rogue.Eorezo) -> Delete on reboot.

keta42 · Answer

a part arrament il y a pas tout le raport savegarder je te l envoie la 





>>> 3/15/2008 19:56:53:200
    [Installer]
      Installer Version: 1.1.9.0000
      Date Compiled = Fri Mar  2 16:14:20 2007
      Commandline = 
    [Resources]
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\ARA\ChipsetARA.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\CHS\ChipsetCHS.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\CHT\ChipsetCHT.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\CSY\ChipsetCSY.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\DAN\ChipsetDAN.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\DEU\ChipsetDEU.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\ELL\ChipsetELL.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\ENU\ChipsetENU.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\ESP\ChipsetESP.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\FIN\ChipsetFIN.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\FRA\ChipsetFRA.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\HEB\ChipsetHEB.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\HUN\ChipsetHUN.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\ITA\ChipsetITA.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\JPN\ChipsetJPN.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\KOR\ChipsetKOR.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\NLD\ChipsetNLD.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\NOR\ChipsetNOR.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\PLK\ChipsetPLK.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\PTB\ChipsetPTB.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\PTG\ChipsetPTG.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\RUS\ChipsetRUS.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\SVE\ChipsetSVE.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\THA\ChipsetTHA.dll
      Found DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\TRK\ChipsetTRK.dll
      Selected DLL = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Lang\CHIP\FRA\ChipsetFRA.dll
    [EnumDev]
      [GetDrivers]
        [Find INFs]
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\5000XZVP.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\852.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\855.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\865.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\915.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\915M.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\945.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\945GM.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\965g.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\965m.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\dmi_pci.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7220.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7230.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7520.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E8500.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\g33q35.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8smb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich9core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich9id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich9ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich9smb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich9usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ichXdev.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\5000XZVP.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\945.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\945GM.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\965g.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\965m.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\dmi_pci.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ESB2id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ESB2ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ESB2usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\g33q35.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich7core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich7id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich7ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich7usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8ahci.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8smb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich8usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9ahci.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9core.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9id2.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9ide.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9smb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ich9usb.inf
          Found INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\Vista\ichXdev.inf
        [Parse INFs]
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\5000XZVP.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NT.5.1,NTamd64
            Resolved Manufacturer = INTEL_SYS.NT.5.1
            Description: Intel(R) 5000X Chipset Memory Controller Hub - 25C0
            HardwareID = PCI\VEN_8086&DEV_25C0
            Description: Intel(R) 5000Z Chipset Memory Controller Hub - 25D0
            HardwareID = PCI\VEN_8086&DEV_25D0
            Description: Intel(R) 5000V Chipset Memory Controller Hub - 25D4
            HardwareID = PCI\VEN_8086&DEV_25D4
            Description: Intel(R) 5000P Chipset Memory Controller Hub - 25D8
            HardwareID = PCI\VEN_8086&DEV_25D8
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 2 - 25E2
            HardwareID = PCI\VEN_8086&DEV_25E2
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 3 - 25E3
            HardwareID = PCI\VEN_8086&DEV_25E3
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 4 - 25E4
            HardwareID = PCI\VEN_8086&DEV_25E4
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 5 - 25E5
            HardwareID = PCI\VEN_8086&DEV_25E5
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 6 - 25E6
            HardwareID = PCI\VEN_8086&DEV_25E6
            Description: Intel(R) 5000 Series Chipset PCI Express x4 Port 7 - 25E7
            HardwareID = PCI\VEN_8086&DEV_25E7
            Description: Intel(R) 5000 Series Chipset Error Reporting Registers - 25F0
            HardwareID = PCI\VEN_8086&DEV_25F0
            Description: Intel(R) 5000 Series Chipset Reserved Registers - 25F1
            HardwareID = PCI\VEN_8086&DEV_25F1
            Description: Intel(R) 5000 Series Chipset Reserved Registers - 25F3
            HardwareID = PCI\VEN_8086&DEV_25F3
            Description: Intel(R) 5000 Series Chipset FBD Registers - 25F5
            HardwareID = PCI\VEN_8086&DEV_25F5
            Description: Intel(R) 5000 Series Chipset FBD Registers - 25F6
            HardwareID = PCI\VEN_8086&DEV_25F6
            Description: Intel(R) 5000 Series Chipset PCI Express x8 Port 2-3 - 25F7
            HardwareID = PCI\VEN_8086&DEV_25F7
            Description: Intel(R) 5000 Series Chipset PCI Express x8 Port 4-5 - 25F8
            HardwareID = PCI\VEN_8086&DEV_25F8
            Description: Intel(R) 5000 Series Chipset PCI Express x8 Port 6-7 - 25F9
            HardwareID = PCI\VEN_8086&DEV_25F9
            Description: Intel(R) 5000X Chipset PCI Express x16 Port 4-7 - 25FA
            HardwareID = PCI\VEN_8086&DEV_25FA
            Description: Intel(R) 6311ESB/6321ESB PCI Express Upstream Port - 3500
            HardwareID = PCI\VEN_8086&DEV_3500
            Description: Intel(R) 6310ESB PCI Express Upstream Port - 3501
            HardwareID = PCI\VEN_8086&DEV_3501
            Description: Intel(R) 6311ESB/6321ESB I/OxAPIC Interrupt Controller - 3504
            HardwareID = PCI\VEN_8086&DEV_3504
            Description: Intel(R) 6310ESB I/OxAPIC Interrupt Controller - 3505
            HardwareID = PCI\VEN_8086&DEV_3505
            Description: Intel(R) 6311ESB/6321ESB PCI Express to PCI-X Bridge - 350C
            HardwareID = PCI\VEN_8086&DEV_350C
            Description: Intel(R) 6310ESB PCI Express to PCI-X Bridge - 350D
            HardwareID = PCI\VEN_8086&DEV_350D
            Description: Intel(R) 6311ESB/6321ESB PCI Express Downstream Port E1 - 3510
            HardwareID = PCI\VEN_8086&DEV_3510
            Description: Intel(R) 6310ESB PCI Express Downstream Port E1 - 3511
            HardwareID = PCI\VEN_8086&DEV_3511
            Description: Intel(R) 6311ESB/6321ESB PCI Express Downstream Port E2 - 3514
            HardwareID = PCI\VEN_8086&DEV_3514
            Description: Intel(R) 6310ESB PCI Express Downstream Port E2 - 3515
            HardwareID = PCI\VEN_8086&DEV_3515
            Description: Intel(R) 6311ESB/6321ESB PCI Express Downstream Port E3 - 3518
            HardwareID = PCI\VEN_8086&DEV_3518
            Description: Intel(R) 6310ESB PCI Express Downstream Port E3 - 3519
            HardwareID = PCI\VEN_8086&DEV_3519
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset LPC Interface Controller - 2670
            HardwareID = PCI\VEN_8086&DEV_2670
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset SMBus Controller - 269B
            HardwareID = PCI\VEN_8086&DEV_269B
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset PCI Express Root Port 1 - 2690
            HardwareID = PCI\VEN_8086&DEV_2690
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset PCI Express Root Port 2 - 2692
            HardwareID = PCI\VEN_8086&DEV_2692
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset PCI Express Root Port 3 - 2694
            HardwareID = PCI\VEN_8086&DEV_2694
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset PCI Express Root Port 4 - 2696
            HardwareID = PCI\VEN_8086&DEV_2696
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\852.inf
            Date = 08/25/2003
            Version = 5.1.0.1006
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82852/82855 GM/GME/PM/GMV to Processor I/O Controller - 3580
            HardwareID = PCI\VEN_8086&DEV_3580
            Description: Intel(R) 82852/82855 GM/GME/PM/GMV to Processor I/O Controller - 3584
            HardwareID = PCI\VEN_8086&DEV_3584
            Description: Intel(R) 82852/82855 GM/GME/PM/GMV to Processor I/O Controller - 3585
            HardwareID = PCI\VEN_8086&DEV_3585
            Description: Intel(R) 82852/82855 GM/GME/PM/GMV Processor to AGP Controller - 3581
            HardwareID = PCI\VEN_8086&DEV_3581
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\855.inf
            Date = 10/11/2002
            Version = 4.20.1007
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82855PM Processor to I/O Controller - 3340 
            HardwareID = PCI\VEN_8086&DEV_3340
            Description: Intel(R) 82855PM Processor to AGP Controller - 3341 
            HardwareID = PCI\VEN_8086&DEV_3341
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\865.inf
            Date = 03/25/2004
            Version = 5.1.0.1009
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82865G/PE/P/GV/82848P Processor to I/O Controller - 2570
            HardwareID = PCI\VEN_8086&DEV_2570
            Description: Intel(R) 82865G/PE/P/GV/82848P Processor to AGP Controller - 2571
            HardwareID = PCI\VEN_8086&DEV_2571
            Description: Intel(R) 82865G/PE/P/GV/82848P Processor to PCI to CSA bridge - 2573
            HardwareID = PCI\VEN_8086&DEV_2573
            Description: Intel(R) 82865G/PE/P/GV/82848P Processor to I/O Memory Interface - 2576
            HardwareID = PCI\VEN_8086&DEV_2576
            Description: Intel(R) 82875P/E7210 Memory Controller Hub - 2578
            HardwareID = PCI\VEN_8086&DEV_2578
            Description: Intel(R) 82875P Processor to AGP Controller - 2579
            HardwareID = PCI\VEN_8086&DEV_2579
            Description: Intel(R) 82875P/E7210 Processor to PCI to CSA bridge - 257B
            HardwareID = PCI\VEN_8086&DEV_257B
            Description: Intel(R) 82875P/E7210 Processor to I/O Memory Interface - 257E
            HardwareID = PCI\VEN_8086&DEV_257E
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\915.inf
            Date = 03/10/2005
            Version = 7.0.0.1019
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 915G/P/GV/GL/PL/910GE/GL Processor to I/O Controller - 2580
            HardwareID = PCI\VEN_8086&DEV_2580
            Description: Intel(R) 915G/P/GV/GL/PL/910GE/GL PCI Express Root Port - 2581
            HardwareID = PCI\VEN_8086&DEV_2581
            Description: Intel(R) 925X/XE Memory Controller Hub - 2584
            HardwareID = PCI\VEN_8086&DEV_2584
            Description: Intel(R) 925X/XE PCI Express Root Port - 2585
            HardwareID = PCI\VEN_8086&DEV_2585
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\915M.inf
            Date = 05/26/2004
            Version = 6.1.0.1008
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS
            Resolved Manufacturer = INTEL_SYS
            Description: Mobile Intel(R) 915GM/PM/GMS/910GML Express Processor to DRAM Controller - 2590
            HardwareID = PCI\VEN_8086&DEV_2590
            Description: Mobile Intel(R) 915GM/PM Express PCI Express Root Port - 2591
            HardwareID = PCI\VEN_8086&DEV_2591
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\945.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 945G/GZ/GC/P/PL Processor to I/O Controller - 2770
            HardwareID = PCI\VEN_8086&DEV_2770
            Description: Intel(R) 945G/GZ/GC/P/PL PCI Express Root Port - 2771
            HardwareID = PCI\VEN_8086&DEV_2771
            Description: Intel(R) 955X Memory Controller Hub - 2774
            HardwareID = PCI\VEN_8086&DEV_2774
            Description: Intel(R) 955X PCI Express Root Port - 2775
            HardwareID = PCI\VEN_8086&DEV_2775
            Description: Intel(R) 975X Memory Controller Hub - 277C
            HardwareID = PCI\VEN_8086&DEV_277C
            Description: Intel(R) 975X/3010 PCI Express Root Port - 277A
            HardwareID = PCI\VEN_8086&DEV_277A
            Description: Intel(R) 975X PCI Express Root Port - 277D
            HardwareID = PCI\VEN_8086&DEV_277D
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\945GM.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Mobile Intel(R) 945GM/GU/PM/GMS/940GML/943GML and Intel(R) 945GT Express Processor to DRAM Controller - 27A0
            HardwareID = PCI\VEN_8086&DEV_27A0
            Description: Mobile Intel(R) 945GM/GU/PM/GMS/940GML/943GML and Intel(R) 945GT Express PCI Express Root Port - 27A1
            HardwareID = PCI\VEN_8086&DEV_27A1
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\965g.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 946GZ/PL/GL Processor to I/O Controller - 2970
            HardwareID = PCI\VEN_8086&DEV_2970
            Description: Intel(R) 946GZ/PL/GL PCI Express Root Port - 2971
            HardwareID = PCI\VEN_8086&DEV_2971
            Description: Intel(R) Processor to I/O Controller - 2980
            HardwareID = PCI\VEN_8086&DEV_2980
            Description: Intel(R) PCI Express Root Port - 2981
            HardwareID = PCI\VEN_8086&DEV_2981
            Description: Intel(R) Q963/Q965 Processor to I/O Controller - 2990
            HardwareID = PCI\VEN_8086&DEV_2990
            Description: Intel(R) Q963/Q965 PCI Express Root Port - 2991
            HardwareID = PCI\VEN_8086&DEV_2991
            Description: Intel(R) P965/G965/G35 Processor to I/O Controller - 29A0
            HardwareID = PCI\VEN_8086&DEV_29A0
            Description: Intel(R) P965/G965/G35 PCI Express Root Port - 29A1
            HardwareID = PCI\VEN_8086&DEV_29A1
            Matched HardwareID = PCI\VEN_8086&DEV_29A0
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0020
            Matched HardwareID = PCI\VEN_8086&DEV_29A1
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0021
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\965m.inf
            Date = 12/06/2006
            Version = 8.2.0.1002
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Mobile Intel(R) PM965/GM965/GL960 Express Processor to DRAM Controller - 2A00 
            HardwareID = PCI\VEN_8086&DEV_2A00
            Description: Mobile Intel(R) PM965/GM965/GL960 Express PCI Express Root Port - 2A01
            HardwareID = PCI\VEN_8086&DEV_2A01
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\dmi_pci.inf
            Date = 01/10/2005
            Version = 7.0.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: High Precision Event Timer
            HardwareID = *PNP0103
            Description: Intel(R) 82801 PCI Bridge - 244E
            HardwareID = PCI\VEN_8086&DEV_244E
            Description: Intel(R) 82801 PCI Bridge - 2448
            HardwareID = PCI\VEN_8086&DEV_2448
            Matched HardwareID = PCI\VEN_8086&DEV_244E
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0013
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7220.inf
            Date = 01/10/2005
            Version = 7.0.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 6702PXH PCI Express-to-PCI Bridge A - 032C
            HardwareID = PCI\VEN_8086&DEV_032C
            Description: Intel(R) E7220/E7221 Memory Controller Hub - 2588
            HardwareID = PCI\VEN_8086&DEV_2588
            Description: Intel(R) E7220/E7221 PCI Express Root Port - 2589
            HardwareID = PCI\VEN_8086&DEV_2589
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7230.inf
            Date = 02/22/2006
            Version = 8.1.0.1002
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) E7230/3000/3010 Processor to I/O Controller - 2778
            HardwareID = PCI\VEN_8086&DEV_2778
            Description: Intel(R) E7230/3000/3010 PCI Express Root Port - 2779
            HardwareID = PCI\VEN_8086&DEV_2779
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E7520.inf
            Date = 03/09/2006
            Version = 7.3.0.1013
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) E7520 Memory Controller Hub - 3590
            HardwareID = PCI\VEN_8086&DEV_3590
            Description: Intel(R) E7525/E7520 Error Reporting Registers - 3591
            HardwareID = PCI\VEN_8086&DEV_3591
            Description: Intel(R) E7320 Memory Controller Hub - 3592
            HardwareID = PCI\VEN_8086&DEV_3592
            Description: Intel(R) E7320 Error Reporting Registers - 3593
            HardwareID = PCI\VEN_8086&DEV_3593
            Description: Intel(R) E7520 DMA Controller - 3594
            HardwareID = PCI\VEN_8086&DEV_3594
            Description: Intel(R) E7525/E7520/E7320 PCI Express Root Port A0 - 3595
            HardwareID = PCI\VEN_8086&DEV_3595
            Description: Intel(R) E7525/E7520/E7320 PCI Express Root Port A1 - 3596
            HardwareID = PCI\VEN_8086&DEV_3596
            Description: Intel(R) E7525/E7520 PCI Express Root Port B0 - 3597
            HardwareID = PCI\VEN_8086&DEV_3597
            Description: Intel(R) E7520 PCI Express Root Port B1 - 3598
            HardwareID = PCI\VEN_8086&DEV_3598
            Description: Intel(R) E7520 PCI Express Root Port C0 - 3599
            HardwareID = PCI\VEN_8086&DEV_3599
            Description: Intel(R) E7520 PCI Express Root Port C1 - 359A
            HardwareID = PCI\VEN_8086&DEV_359A
            Description: Intel(R) E7525/E7520/E7320 Extended Configuration Registers - 359B
            HardwareID = PCI\VEN_8086&DEV_359B
            Description: Intel(R) E7525 Memory Controller Hub - 359E
            HardwareID = PCI\VEN_8086&DEV_359E
            Description: Intel(R) 6700/6702PXH I/OxAPIC Interrupt Controller A - 0326
            HardwareID = PCI\VEN_8086&DEV_0326
            Description: Intel(R) 6700PXH I/OxAPIC Interrupt Controller B - 0327
            HardwareID = PCI\VEN_8086&DEV_0327
            Description: Intel(R) 6700PXH PCI Express-to-PCI Bridge A - 0329
            HardwareID = PCI\VEN_8086&DEV_0329
            Description: Intel(R) 6700PXH PCI Express-to-PCI Bridge B - 032A
            HardwareID = PCI\VEN_8086&DEV_032A
            Description: Intel(R) 80332 PCI Express-to-PCI Bridge A - 0330
            HardwareID = PCI\VEN_8086&DEV_0330
            Description: Intel(R) 80332 I/OxAPIC Interrupt Controller A - 0331
            HardwareID = PCI\VEN_8086&DEV_0331
            Description: Intel(R) 80332 PCI Express-to-PCI Bridge B - 0332
            HardwareID = PCI\VEN_8086&DEV_0332
            Description: Intel(R) 80332 I/OxAPIC Interrupt Controller B - 0333
            HardwareID = PCI\VEN_8086&DEV_0333
            Description: Intel(R) 80332 Memory Controller - 0334
            HardwareID = PCI\VEN_8086&DEV_0334
            Description: Intel(R) 80333 PCI Express-to-PCI Bridge A - 0370
            HardwareID = PCI\VEN_8086&DEV_0370
            Description: Intel(R) 80333 I/OxAPIC Interrupt Controller A - 0371
            HardwareID = PCI\VEN_8086&DEV_0371
            Description: Intel(R) 80333 PCI Express-to-PCI Bridge B - 0372
            HardwareID = PCI\VEN_8086&DEV_0372
            Description: Intel(R) 80333 I/OxAPIC Interrupt Controller B - 0373
            HardwareID = PCI\VEN_8086&DEV_0373
            Description: Intel(R) 80333 Memory Controller - 0374
            HardwareID = PCI\VEN_8086&DEV_0374
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\E8500.inf
            Date = 09/13/2005
            Version = 7.2.2.1001
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NT.5.1,NTamd64
            Resolved Manufacturer = INTEL_SYS.NT.5.1
            Description: Intel(R) E8500/E8501 Hub Interface - 2600
            HardwareID = PCI\VEN_8086&DEV_2600
            Description: Intel(R) E8500/E8501 PCI Express x4 Port D - 2601
            HardwareID = PCI\VEN_8086&DEV_2601
            Description: Intel(R) E8500/E8501 PCI Express x4 Port C0 - 2602
            HardwareID = PCI\VEN_8086&DEV_2602
            Description: Intel(R) E8500/E8501 PCI Express x4 Port C1 - 2603
            HardwareID = PCI\VEN_8086&DEV_2603
            Description: Intel(R) E8500/E8501 PCI Express x4 Port B0 - 2604
            HardwareID = PCI\VEN_8086&DEV_2604
            Description: Intel(R) E8500/E8501 PCI Express x4 Port B1 - 2605
            HardwareID = PCI\VEN_8086&DEV_2605
            Description: Intel(R) E8500/E8501 PCI Express x4 Port A0 - 2606
            HardwareID = PCI\VEN_8086&DEV_2606
            Description: Intel(R) E8500/E8501 PCI Express x4 Port A1 - 2607
            HardwareID = PCI\VEN_8086&DEV_2607
            Description: Intel(R) E8500/E8501 PCI Express x8 Port C - 2608
            HardwareID = PCI\VEN_8086&DEV_2608
            Description: Intel(R) E8500/E8501 PCI Express x8 Port B - 2609
            HardwareID = PCI\VEN_8086&DEV_2609
            Description: Intel(R) E8500/E8501 PCI Express x8 Port A - 260A
            HardwareID = PCI\VEN_8086&DEV_260A
            Description: Intel(R) E8500/E8501 IMI Registers - 260C
            HardwareID = PCI\VEN_8086&DEV_260C
            Description: Intel(R) E8500/E8501 Interrupt Registers - 2610
            HardwareID = PCI\VEN_8086&DEV_2610
            Description: Intel(R) E8500/E8501 Address Mapping Registers - 2611
            HardwareID = PCI\VEN_8086&DEV_2611
            Description: Intel(R) E8500/E8501 RAS Registers - 2612
            HardwareID = PCI\VEN_8086&DEV_2612
            Description: Intel(R) E8500/E8501 Registers - 2613
            HardwareID = PCI\VEN_8086&DEV_2613
            Description: Intel(R) E8500/E8501 Registers - 2614
            HardwareID = PCI\VEN_8086&DEV_2614
            Description: Intel(R) E8500/E8501 Registers - 2615
            HardwareID = PCI\VEN_8086&DEV_2615
            Description: Intel(R) E8500/E8501 Registers - 2617
            HardwareID = PCI\VEN_8086&DEV_2617
            Description: Intel(R) E8500/E8501 Registers - 2618
            HardwareID = PCI\VEN_8086&DEV_2618
            Description: Intel(R) E8500/E8501 Registers - 2619
            HardwareID = PCI\VEN_8086&DEV_2619
            Description: Intel(R) E8500/E8501 Registers - 261A
            HardwareID = PCI\VEN_8086&DEV_261A
            Description: Intel(R) E8500/E8501 Registers - 261B
            HardwareID = PCI\VEN_8086&DEV_261B
            Description: Intel(R) E8500/E8501 Registers - 261C
            HardwareID = PCI\VEN_8086&DEV_261C
            Description: Intel(R) E8500/E8501 Registers - 261D
            HardwareID = PCI\VEN_8086&DEV_261D
            Description: Intel(R) E8500/E8501 Registers - 261E
            HardwareID = PCI\VEN_8086&DEV_261E
            Description: Intel(R) E8500/E8501 eXternal Memory Bridge - 2620
            HardwareID = PCI\VEN_8086&DEV_2620
            Description: Intel(R) E8500/E8501 XMB Control Registers - 2621
            HardwareID = PCI\VEN_8086&DEV_2621
            Description: Intel(R) E8500/E8501 XMB Memory Interleaving Registers - 2622
            HardwareID = PCI\VEN_8086&DEV_2622
            Description: Intel(R) E8500/E8501 XMB DDR Initialization and Calibration - 2623
            HardwareID = PCI\VEN_8086&DEV_2623
            Description: Intel(R) E8500/E8501 XMB Registers - 2624
            HardwareID = PCI\VEN_8086&DEV_2624
            Description: Intel(R) E8500/E8501 XMB Registers - 2625
            HardwareID = PCI\VEN_8086&DEV_2625
            Description: Intel(R) E8500/E8501 XMB Registers - 2626
            HardwareID = PCI\VEN_8086&DEV_2626
            Description: Intel(R) E8500/E8501 XMB Registers - 2627
            HardwareID = PCI\VEN_8086&DEV_2627
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2id2.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(intelide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset Serial ATA Storage Controller - 2680
            HardwareID = PCI\VEN_8086&DEV_2680
            Description: Intel(R) 631xESB/6321ESB Ultra ATA Storage Controller - 269E
            HardwareID = PCI\VEN_8086&DEV_269E
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2ide.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(pciide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset Serial ATA Storage Controller - 2680
            HardwareID = PCI\VEN_8086&DEV_2680
            Description: Intel(R) 631xESB/6321ESB Ultra ATA Storage Controller - 269E
            HardwareID = PCI\VEN_8086&DEV_269E
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ESB2usb.inf
            Date = 05/15/2006
            Version = 7.4.0.1005
            ClassGUID = {36FC9E60-C465-11CF-8056-444553540000}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = Intel,NT.5.1,NTamd64
            Resolved Manufacturer = Intel.NT.5.1
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset USB Universal Host Controller - 2688
            HardwareID = PCI\VEN_8086&DEV_2688
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset USB Universal Host Controller - 2689
            HardwareID = PCI\VEN_8086&DEV_2689
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset USB Universal Host Controller - 268A
            HardwareID = PCI\VEN_8086&DEV_268A
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset USB Universal Host Controller - 268B
            HardwareID = PCI\VEN_8086&DEV_268B
            Description: Intel(R) 631xESB/6321ESB/3100 Chipset USB2 Enhanced Host Controller - 268C
            HardwareID = PCI\VEN_8086&DEV_268C
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\g33q35.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) Q35 Express Chipset Processor to I/O Controller - 29B0
            HardwareID = PCI\VEN_8086&DEV_29B0
            Description: Intel(R) Q35 Express Chipset PCI Express Root Port - 29B1
            HardwareID = PCI\VEN_8086&DEV_29B1
            Description: Intel(R) G33/G31/P35 Express Chipset Processor to I/O Controller - 29C0
            HardwareID = PCI\VEN_8086&DEV_29C0
            Description: Intel(R) G33/G31/P35 Express Chipset PCI Express Root Port - 29C1
            HardwareID = PCI\VEN_8086&DEV_29C1
            Description: Intel(R) Q33 Express Chipset Processor to I/O Controller - 29D0
            HardwareID = PCI\VEN_8086&DEV_29D0
            Description: Intel(R) Q33 Express Chipset PCI Express Root Port - 29D1
            HardwareID = PCI\VEN_8086&DEV_29D1
            Description: Intel(R) X38 Express Chipset Processor to I/O Controller - 29E0
            HardwareID = PCI\VEN_8086&DEV_29E0
            Description: Intel(R) X38 Express Chipset PCI Express Root Port - 29E1
            HardwareID = PCI\VEN_8086&DEV_29E1
            Description: Intel(R) DRAM Controller - 29F0
            HardwareID = PCI\VEN_8086&DEV_29F0
            Description: Intel(R) Host-Primary PCI Express Bridge - 29F1
            HardwareID = PCI\VEN_8086&DEV_29F1
            Description: Intel(R) Host-Secondary PCI Express Bridge - 29F9
            HardwareID = PCI\VEN_8086&DEV_29F9
            Description: Intel(R) Trusted Execution Technology - 8002
            HardwareID = PCI\VEN_8086&DEV_8002
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5core.inf
            Date = 01/10/2005
            Version = 7.0.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82801EB LPC Interface Controller - 24D0
            HardwareID = PCI\VEN_8086&DEV_24D0
            Description: Intel(R) 82801EB LPC Interface Controller - 24DC
            HardwareID = PCI\VEN_8086&DEV_24DC
            Description: Intel(R) 82801EB SMBus Controller - 24D3
            HardwareID = PCI\VEN_8086&DEV_24D3
            Description: Intel(R) 6300ESB LPC Interface Controller - 25A1
            HardwareID = PCI\VEN_8086&DEV_25A1
            Description: Intel(R) 6300ESB SMBus Controller - 25A4
            HardwareID = PCI\VEN_8086&DEV_25A4
            Description: Intel(R) 6300ESB Watchdog Timer - 25AB
            HardwareID = PCI\VEN_8086&DEV_25AB
            Description: Intel(R) 6300ESB 64-bit PCI-X Bridge - 25AE
            HardwareID = PCI\VEN_8086&DEV_25AE
            Description: Intel(R) 6300ESB I/O Advanced Programmable Interrupt Controller - 25AC
            HardwareID = PCI\VEN_8086&DEV_25AC
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5id2.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(intelide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801EB Ultra ATA Storage Controllers
            HardwareID = PCI\VEN_8086&DEV_24D1
            Description: Intel(R) 82801EB Ultra ATA Storage Controllers
            HardwareID = PCI\VEN_8086&DEV_24DB
            Description: Intel(R) 6300ESB Ultra ATA Storage Controller - 25A2
            HardwareID = PCI\VEN_8086&DEV_25A2
            Description: Intel(R) 6300ESB Ultra ATA Storage/SATA Controller - 25A3
            HardwareID = PCI\VEN_8086&DEV_25A3
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5ide.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(pciide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801EB Ultra ATA Storage Controllers
            HardwareID = PCI\VEN_8086&DEV_24D1
            Description: Intel(R) 82801EB Ultra ATA Storage Controllers
            HardwareID = PCI\VEN_8086&DEV_24DB
            Description: Intel(R) 6300ESB Ultra ATA Storage Controller - 25A2
            HardwareID = PCI\VEN_8086&DEV_25A2
            Description: Intel(R) 6300ESB Ultra ATA Storage/SATA Controller - 25A3
            HardwareID = PCI\VEN_8086&DEV_25A3
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich5usb.inf
            Date = 09/13/2006
            Version = 8.2.0.1008
            ClassGUID = {36FC9E60-C465-11CF-8056-444553540000}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = Intel,NT.5.1,NT.5.2,NT.6.0,NTamd64
            Resolved Manufacturer = Intel.NT.6.0
            Description: Intel(R) 82801EB USB Universal Host Controller - 24D2
            HardwareID = PCI\VEN_8086&DEV_24D2
            Description: Intel(R) 82801EB USB Universal Host Controller - 24D4
            HardwareID = PCI\VEN_8086&DEV_24D4
            Description: Intel(R) 82801EB USB Universal Host Controller - 24D7
            HardwareID = PCI\VEN_8086&DEV_24D7
            Description: Intel(R) 82801EB USB Universal Host Controller - 24DE
            HardwareID = PCI\VEN_8086&DEV_24DE
            Description: Intel(R) 82801EB USB2 Enhanced Host Controller - 24DD
            HardwareID = PCI\VEN_8086&DEV_24DD
            Description: Intel(R) 6300ESB USB Universal Host Controller - 25A9
            HardwareID = PCI\VEN_8086&DEV_25A9
            Description: Intel(R) 6300ESB USB Universal Host Controller - 25AA
            HardwareID = PCI\VEN_8086&DEV_25AA
            Description: Intel(R) 6300ESB USB2 Enhanced Host Controller - 25AD
            HardwareID = PCI\VEN_8086&DEV_25AD
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6core.inf
            Date = 01/10/2005
            Version = 7.0.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82801FB LPC Interface Controller - 2640
            HardwareID = PCI\VEN_8086&DEV_2640
            Description: Intel(R) 82801FBM LPC Interface Controller - 2641
            HardwareID = PCI\VEN_8086&DEV_2641
            Description: Intel(R) 82801FB LPC Interface Controller - 2642
            HardwareID = PCI\VEN_8086&DEV_2642
            Description: Intel(R) 82801FB/FBM SMBus Controller - 266A
            HardwareID = PCI\VEN_8086&DEV_266A
            Description: Intel(R) 82801FB/FBM PCI Express Root Port - 2660
            HardwareID = PCI\VEN_8086&DEV_2660
            Description: Intel(R) 82801FB/FBM PCI Express Root Port - 2662
            HardwareID = PCI\VEN_8086&DEV_2662
            Description: Intel(R) 82801FB/FBM PCI Express Root Port - 2664
            HardwareID = PCI\VEN_8086&DEV_2664
            Description: Intel(R) 82801FB/FBM PCI Express Root Port - 2666
            HardwareID = PCI\VEN_8086&DEV_2666
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6id2.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(intelide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801FB Ultra ATA Storage Controllers - 2651
            HardwareID = PCI\VEN_8086&DEV_2651&CC_0101
            Description: Intel(R) 82801FB Ultra ATA Storage Controllers - 2652
            HardwareID = PCI\VEN_8086&DEV_2652&CC_0101
            Description: Intel(R) 82801FBM Ultra ATA Storage Controllers - 2653
            HardwareID = PCI\VEN_8086&DEV_2653&CC_0101
            Description: Intel(R) 82801FB/FBM Ultra ATA Storage Controllers - 266F
            HardwareID = PCI\VEN_8086&DEV_266F
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6ide.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(pciide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801FB Ultra ATA Storage Controllers - 2651
            HardwareID = PCI\VEN_8086&DEV_2651&CC_0101
            Description: Intel(R) 82801FB Ultra ATA Storage Controllers - 2652
            HardwareID = PCI\VEN_8086&DEV_2652&CC_0101
            Description: Intel(R) 82801FBM Ultra ATA Storage Controllers - 2653
            HardwareID = PCI\VEN_8086&DEV_2653&CC_0101
            Description: Intel(R) 82801FB/FBM Ultra ATA Storage Controllers - 266F
            HardwareID = PCI\VEN_8086&DEV_266F
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich6usb.inf
            Date = 09/13/2006
            Version = 8.2.0.1008
            ClassGUID = {36FC9E60-C465-11CF-8056-444553540000}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = Intel,NT.5.1,NT.5.2,NT.6.0,NTamd64
            Resolved Manufacturer = Intel.NT.6.0
            Description: Intel(R) 82801FB/FBM USB Universal Host Controller - 2658
            HardwareID = PCI\VEN_8086&DEV_2658
            Description: Intel(R) 82801FB/FBM USB Universal Host Controller - 2659
            HardwareID = PCI\VEN_8086&DEV_2659
            Description: Intel(R) 82801FB/FBM USB Universal Host Controller - 265A
            HardwareID = PCI\VEN_8086&DEV_265A
            Description: Intel(R) 82801FB/FBM USB Universal Host Controller - 265B
            HardwareID = PCI\VEN_8086&DEV_265B
            Description: Intel(R) 82801FB/FBM USB2 Enhanced Host Controller - 265C
            HardwareID = PCI\VEN_8086&DEV_265C
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7core.inf
            Date = 02/06/2007
            Version = 8.3.0.1011
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) 82801GH (ICH7DH) LPC Interface Controller - 27B0
            HardwareID = PCI\VEN_8086&DEV_27B0
            Description: Intel(R) 82801GB/GR (ICH7 Family) LPC Interface Controller - 27B8
            HardwareID = PCI\VEN_8086&DEV_27B8
            Description: Intel(R) 82801GBM (ICH7-M/U) LPC Interface Controller - 27B9
            HardwareID = PCI\VEN_8086&DEV_27B9
            Description: Intel(R) 82801GHM (ICH7-M/U DH) LPC Interface Controller - 27BD
            HardwareID = PCI\VEN_8086&DEV_27BD
            Description: Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA
            HardwareID = PCI\VEN_8086&DEV_27DA
            Description: Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D0
            HardwareID = PCI\VEN_8086&DEV_27D0
            Description: Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D2
            HardwareID = PCI\VEN_8086&DEV_27D2
            Description: Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D4
            HardwareID = PCI\VEN_8086&DEV_27D4
            Description: Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D6
            HardwareID = PCI\VEN_8086&DEV_27D6
            Description: Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E0
            HardwareID = PCI\VEN_8086&DEV_27E0
            Description: Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E2
            HardwareID = PCI\VEN_8086&DEV_27E2
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7id2.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(intelide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0
            HardwareID = PCI\VEN_8086&DEV_27C0
            Description: Intel(R) 82801GBM/GHM (ICH7-M Family) Serial ATA Storage Controller - 27C4
            HardwareID = PCI\VEN_8086&DEV_27C4
            Description: Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF
            HardwareID = PCI\VEN_8086&DEV_27DF
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7ide.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(pciide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0
            HardwareID = PCI\VEN_8086&DEV_27C0
            Description: Intel(R) 82801GBM/GHM (ICH7-M Family) Serial ATA Storage Controller - 27C4
            HardwareID = PCI\VEN_8086&DEV_27C4
            Description: Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF
            HardwareID = PCI\VEN_8086&DEV_27DF
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich7usb.inf
            Date = 09/13/2006
            Version = 8.2.0.1008
            ClassGUID = {36FC9E60-C465-11CF-8056-444553540000}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = Intel,NT.5.1,NT.5.2,NT.6.0,NTamd64
            Resolved Manufacturer = Intel.NT.6.0
            Description: Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8
            HardwareID = PCI\VEN_8086&DEV_27C8
            Description: Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9
            HardwareID = PCI\VEN_8086&DEV_27C9
            Description: Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA
            HardwareID = PCI\VEN_8086&DEV_27CA
            Description: Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB
            HardwareID = PCI\VEN_8086&DEV_27CB
            Description: Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC
            HardwareID = PCI\VEN_8086&DEV_27CC
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8core.inf
            Date = 02/28/2007
            Version = 8.3.0.1013
            ClassGUID = {4D36E97D-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            Manufacturer = INTEL_SYS,NTamd64
            Resolved Manufacturer = INTEL_SYS
            Description: Intel(R) ICH8/ICH8R Family LPC Interface Controller - 2810
            HardwareID = PCI\VEN_8086&DEV_2810
            Description: Intel(R) ICH8M-E LPC Interface Controller - 2811
            HardwareID = PCI\VEN_8086&DEV_2811
            Description: Intel(R) ICH8DH LPC Interface Controller - 2812
            HardwareID = PCI\VEN_8086&DEV_2812
            Description: Intel(R) ICH8DO LPC Interface Controller - 2814
            HardwareID = PCI\VEN_8086&DEV_2814
            Description: Intel(R) ICH8M LPC Interface Controller - 2815
            HardwareID = PCI\VEN_8086&DEV_2815
            Description: Intel(R) ICH8 Family PCI Express Root Port 1 - 283F
            HardwareID = PCI\VEN_8086&DEV_283F
            Description: Intel(R) ICH8 Family PCI Express Root Port 2 - 2841
            HardwareID = PCI\VEN_8086&DEV_2841
            Description: Intel(R) ICH8 Family PCI Express Root Port 3 - 2843
            HardwareID = PCI\VEN_8086&DEV_2843
            Description: Intel(R) ICH8 Family PCI Express Root Port 4 - 2845
            HardwareID = PCI\VEN_8086&DEV_2845
            Description: Intel(R) ICH8 Family PCI Express Root Port 5 - 2847
            HardwareID = PCI\VEN_8086&DEV_2847
            Description: Intel(R) ICH8 Family PCI Express Root Port 6 - 2849
            HardwareID = PCI\VEN_8086&DEV_2849
            Description: Intel(R) ICH8 Family Thermal Reporting Device - 284F
            HardwareID = PCI\VEN_8086&DEV_284F
            Matched HardwareID = PCI\VEN_8086&DEV_2810
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0014
            Matched HardwareID = PCI\VEN_8086&DEV_283F
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0016
            Matched HardwareID = PCI\VEN_8086&DEV_2843
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0017
            Matched HardwareID = PCI\VEN_8086&DEV_2845
            Installed Driver = {4d36e97d-e325-11ce-bfc1-08002be10318}\0018
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8id2.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(intelide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) ICH8 4 port Serial ATA Storage Controller - 2820
            HardwareID = PCI\VEN_8086&DEV_2820
            Description: Intel(R) ICH8 2 port Serial ATA Storage Controller - 2825
            HardwareID = PCI\VEN_8086&DEV_2825
            Description: Intel(R) ICH8M 3 port Serial ATA Storage Controller - 2828
            HardwareID = PCI\VEN_8086&DEV_2828
            Description: Intel(R) ICH8M Ultra ATA Storage Controllers - 2850
            HardwareID = PCI\VEN_8086&DEV_2850
            Matched HardwareID = PCI\VEN_8086&DEV_2820
            Installed Driver = {4d36e96a-e325-11ce-bfc1-08002be10318}\0000
            Matched HardwareID = PCI\VEN_8086&DEV_2825
            Installed Driver = {4d36e96a-e325-11ce-bfc1-08002be10318}\0001
          {INF Info}
            Current INF = C:\Users\anais\Desktop\Intel_INF_V8301013_2kxpvista\INF\All\ich8ide.inf
            Date = 11/15/2006
            Version = 8.2.0.1011
            ClassGUID = {4D36E96A-E325-11CE-BFC1-08002BE10318}
            PackageInfo.Name = 
            PackageInfo.Sequence = 0
            PackageInfo.INFSource = 
            PackageInfo.ConditionIfNotInstalledDriverName = InstalledDriverSection(pciide_Inst)
            Manufacturer = INTEL_HDC,NTamd64
            Resolved Manufacturer = INTEL_HDC
            Description: Intel(R) ICH8 4 port Serial ATA Storage Controller - 2820
            HardwareID = PCI\VEN_8086&DEV_2820
            Description: Intel(R) ICH8 2 port Serial ATA Storage Controller - 2825
            HardwareID = PCI\VEN_8086&DEV_2825

keta42 · Answer

et j allais oublier de faire le raport avec hijackthis donc il suit : merci de m aider sait vraiment cool merci



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:45:42, on 04/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

sandul · Answer

Hum. Redis-moi quelle a été exactement la séquence des opérations, car il y a une chose qui m'échappe: MBAM a bien détecté le malware et il dit qu'une partie a été mise en quarantaine et l'autre partie sera supprimée après redemarrage ==> as-tu fait un redémarrage?

Si oui, est-ce que le rapport hijackthis a été fait avant ou après le redémarrage? Car le rapport indique que l'infection est toujours présente.

Réouvre MBAM et vide la quarantaine.

Si tu n'en est pas sûr/tu ne t'en rappelle plus, refais un hijackthis maintenant et poste-le.
++

keta42 · Answer

pour le dossier MBAM je doit reouvrir le dossier MBAM-set up. exe

sandul · Answer

Non, tu relances normalement MBAM avec Démarrer/Programmes...

keta42 · Answer

alors oui j ai due redemmarre l ordi et pares j ai fait un rapport hijackthis .............

mais la je conprent pas trop pour le dossier MBAM la manipulation que je doit faire               merci

sandul · Answer

Lance à nouveau MBAM (ne le réinstalle pas à nouveau, juste démarre-le); vas sur l'onglet Quarantaine et supprime tout. Ferme MBAM par la suite.

Télécharge ceci: http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valide.

Patiente jusqu'au message :
*** Analyse Terminée le ..... ***
Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le bloc note.
Le rapport est en outre sauvegardé à la racine du disque (C:\fixnavi.txt) poste le rapport obtenu

keta42 · Answer

alors ok j ai telecharge le dernier logociel bien et des que je clic sur le raccourci une fenetre bleu s ouvre me demande de choisir ma langue avec une lettre je fait f entre et le ca me dit le programme GETPATHS.exe a cesse de fonctionner que doit je faire

sandul · Answer

Oui, tu es sur Vista...
Regarde par ici: http://www.commentcamarche.net/faq/sujet 2490 popups ouverture de fenetres internet publicitaires pop up#utiliser navilog bat d il mafioso sous vista

Avant de procéder au lancement, désactive également la protection Antivir; tu vas la réactiver par la suite.

keta42 · Answer

olors voilla le dernier rapport de fixnavi


Search Navipromo version 3.6.9 commencé le 05/12/2008 à 14:27:24,05

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "anais" 

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000 
Internet Explorer : 7.0.6000.16757 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\Windows" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Recherche dossiers dans "C:\ProgramData" ***


*** Recherche dossiers dans "c:\users\anais\appdataoaming\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "C:\Users\anais\AppData\Local\virtualstore\Program Files" ***


*** Recherche dossiers dans "C:\Users\anais\AppData\Roaming" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\anais\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\anais\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\anais\AppData\Local" *



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\Windows\system32" :


* Dans "C:\Users\anais\AppData\Local\Microsoft" :


* Dans "C:\Users\anais\AppData\Local\virtualstore\windows\system32" :


* Dans "C:\Users\anais\AppData\Local" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 05/12/2008 à 14:37:47,80 ***

sandul · Answer

OK. On va essayer autre chose:
Menu démarrer / Panneau de configuration / Ajout-Suppression de programmes

Désinstaller tout ce qui a trait a Eorezo, voici quelques exemples :

eorezo
eoWeather
eoEngine (3.4)

Redémarrer l'ordinateur.

Supprimer s'ils existent encore les répertoires résiduels :

C:\Program Files\eoRezo
C:\Documents and Settings\****\Application Data\EoRezo
(tu remplaces **** par ce que tu trouves sur ton ordi, par exemple anais)


Après le redémarrage, reposte un rapport hijackthis s'il te plaît.

keta42 · Answer

alors j ai tout dessintalle les ERO..... et reffait un rapport hijackthis 



LE VOILA 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:05:12, on 05/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

sandul · Answer

Relance hijackThis et coche ces lignes:
- R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
- O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing) 
- O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
- O4 - HKCU\..\Run: [qwwsmwi] "c:\users\anais\appdata\local\qwwsmwi.exe" qwwsmwi

Fais Fix checked et ferme HijackThis

- Réouvre MBAM
- Vas sur l'onglet Autres outils et appuie sur le bouton Lancer l'outil
- Dans la fenêtre qui s'ouvre, dans la zone Nom du fichier, copie ceci
c:\users\anais\appdata\local\qwwsmwi.exe
- Clique sur Ouvrir
Valide, ferme toutes les fenêtres et redémarre

Reposte un hijackthis par la suite.

keta42 · Answer

ok sait fait      et juste un truc j ai pas remit parametre compte utilisateur 



voici le nouveau raport hijacktis 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:39:59, on 05/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

keta42 · Answer

alors je reposte le dernier raport hijacktis       

et j ai pas remit parametre compte utilisateur je le fait ou plus tard 


voila le    hijacktis



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:57:06, on 05/12/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
D:\Telechargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.ldlc.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par LDLC.Com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Torrent-Search Toolbar - {e0c7b854-d5ce-4db6-9804-be1438603d89} - C:\Program Files\Torrent-Search	bTor1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix: 
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

sandul · Answer

Super. Réouvre hijackthis, coche ceci
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
et fais fix checked.
Referme hijackthis.

Ce qu'il reste à faire: du nettoyage général et optimisation. Mais il n'y a plus d'infection apparente.

Télécharge ToolsCleaner et fais Recherche/Suppression. Infos par ici: http://www.commentcamarche.net/faq/sujet 8341 toolscleaner suppression des fix de force brute

Télécharge CCleaner et fais un nettoyage. Infos par ici: https://forums.cnetfrance.fr

Il te faudrait un pare-feu, plusieurs sont disponibles, dont Sunbelt, Commodo, ZoneAlarm. Plus d'infos ici: http://www.tuto-logiciel-info.com/forumdisplay.php?s=&daysprune=&f=35

Tu as un certain nombre de trucs complètement inutiles sur ton PC. Exemple: l'indexation Nero. Je parie que tu ne t'en sers pas. En fonction de la version Nero, tu peux lire ceci http://www.help2go.com/... ou cela http://www.help2go.com/...

Pourquoi 10 000 toolbars sur ton système? Torrent Search, Google, Live search... Franchement tout ça est inutile. Je n'ai pas de toolbar et je me porte bien. Pas d'encombrement de l'espace visuel du navigateur. Désinstalle les toolbars. Passe à Firefox 3.  Installe Adblock Plus comme Add-on dans Firefox et tu n'auras plus de soucis de pub par la suite.

Regarde avec CCleaner les process inutiles lancés au démarrage. Regarde les services inutiles aussi. Mais têtre on va s'arrêter là, le sujet de ton post étant (d'après moi) résolu.

keta42 · Answer

bon ok merci probleme resolu dur pour un novice mais je l ai fait grace a toi  SANDUL je te remercirait jamais assez merci..

et oui j ai plein de truc inutile oui et non je sait pas trop a quoi ca sert j ai peur d effacer n importe quoi . voila pourquoi tout ca

sandul · Answer

Re,

OK, si tu veux continuer: reposte un hijackthis, s'il te plaît.

Ouvre CCleaner, ==> outils/démarrage. Copie ici le contenu de cette fenêtre (ou bien, si trop de choses à copier, arrange-toi pour envoyer une copie d'écran quelque part et poste un link vers celle-ci).

++

Probleme programme qwwsmmwi.exe

47 réponses

Discussions similaires