Analyser mon scan

up ;-)

je suis contant pour toi que tu n'ais pas attendue leur réponse, lol
en tous cas, merci d'avoir suivi ce qu'on t'a demandé durant ce periple voyant au centre du monde informatique et éléctronique.
si tu rencontres un probleme ou tu as des questions, n'hesite pas de m'envoyer un mot en MP, tu sais ou me trouver,
bonne soirée sophie
yen-a-toujours marre ou pas???? ;-)

si ton pc fonctionne normalement et que tu n'as plus de soucis, tout est réglé ma petit sophie ;-)

le changement est probablement dû à un patch que tu as installé sur ton pc avec un autre logiciel, rien d'alarmantdu moment ou ceci nuit pas au fonctionnement de ton pc

bonjour, comment va le pc ?
les messages d'alertes sont à trier au fure et à mesure.
pour certains il faut les autoriser, pour d'autres, il faut les interdire, le seule moyen de savoir si un programme est légitime ou pas, c'est de tapper le nom du fichier ou programme sur ton moteur de recherches internet .

je vais retourner bosser, à +

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths]

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\AcroRd32.exe]
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\
@=C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\Aol.exe]
@=C:\Program Files\AOL 9.0c\Aol.exe
"Path"=C:\Program Files\AOL 9.0c

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\aolacsd.exe]
@=C:\Program Files\Fichiers communs\AOL\ACS\aolacsd.exe
"Path"=C:\Program Files\Fichiers communs\AOL\1239738832\ee

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\aoldial.exe]
@=C:\Program Files\Fichiers communs\AOL\ACS\aoldial.exe
"Path"=C:\Program Files\Fichiers communs\AOL\1239738832\ee

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\AOLLaunch.exe]
@=C:\Program Files\Fichiers communs\AOL\Launch\AOLLaunch.exe
"Path"=C:\Program Files\Fichiers communs\AOL\1239738832\ee

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\bckgzm.exe]
@=C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe]
@=C:\Program Files\CCleaner\ccleaner.exe
"Path"=C:\Program Files\CCleaner

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\chkrzm.exe]
@=C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\CONF.EXE]
@=C:\Program Files\NetMeeting\conf.exe
"Path"=C:\Program Files\NetMeeting;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\dialer.exe]
@=C:\Program Files\Windows NT\dialer.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe]
@=C:\Program Files\Mozilla Firefox\firefox.exe
"Path"=C:\Program Files\Mozilla Firefox

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\gimp-2.6.exe]
@=C:\Program Files\GIMP-2.6.4\bin\gimp-2.6.exe
"Path"=C:\Program Files\GIMP-2.6.4\bin

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\HELPCTR.EXE]
@=C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe]
@=C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
"Path"=C:\Program Files\Trend Micro\HijackThis

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\HPSdpApp.exe]
"Path"=C:\Program Files\Easy Internet signup\
@=C:\Program Files\Easy Internet signup\HPSdpApp.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\hrtzzm.exe]
@=C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\hypertrm.exe]
@="C:\Program Files\Windows NT\hypertrm.exe"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\ICWCONN1.EXE]
@="C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN1.EXE"
"Path"=C:\Program Files\Internet Explorer\Connection Wizard;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\ICWCONN2.EXE]
@="C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN2.EXE"
"Path"=C:\Program Files\Internet Explorer\Connection Wizard;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE]
@=C:\Program Files\Internet Explorer\iexplore.exe
"Path"=C:\Program Files\Internet Explorer;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\INETWIZ.EXE]
@="C:\Program Files\Internet Explorer\Connection Wizard\INETWIZ.EXE"
"Path"=C:\Program Files\Internet Explorer\Connection Wizard;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\install.exe]
"RunAsOnNonAdminInstall"=dword:00000001 (1)
"BlockOnTSNonInstallMode"=dword:00000001 (1)

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\ISIGNUP.EXE]
@="C:\Program Files\Internet Explorer\Connection Wizard\ISIGNUP.EXE"
"Path"=C:\Program Files\Internet Explorer\Connection Wizard;

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\ISPSignup.exe]
@=C:\Program Files\Easy Internet signup\ISPSignup.exe
"Path"=C:\Program Files\Easy Internet signup\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\iTunes.exe]
@=C:\Program Files\iTunes\iTunes.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\javaws.exe]
@=C:\Program Files\Java\jre6\bin\javaws.exe
"Path"=C:\Program Files\Java\jre6\bin

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\LUALL.EXE]
@=C:\Program Files\Symantec\LiveUpdate\LUALL.EXE
"Path"=C:\Program Files\Symantec\LiveUpdate

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\mdminstallersystem-annuaire.exe]
@=C:\Program Files\Annuaire W-Link\annuaire.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\MediaHub.exe]
"Path"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\
@=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Mediahub.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\migwiz.exe]
@=%SystemRoot%\system32\usmt\migwiz.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\moviemk.exe]
@=C:\Program Files\Movie Maker\moviemk.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\mplayer2.exe]
@="C:\Program Files\Windows Media Player\mplayer2.exe"
"Path"="C:\Program Files\Windows Media Player"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE]
@=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\msimn.exe]
@=%ProgramFiles%\Outlook Express\msimn.exe
"Path"=%ProgramFiles%\Outlook Express

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\msinfo32.exe]
@=C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\MSInfo32.exe
"Path"=C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\MSNMSGR.EXE]
@=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
"Path"=C:\Program Files\Windows Live\Messenger\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\msworks.exe]
@=c:\Program Files\Microsoft Works\msworks.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\MyDVD.exe]
"Path"=c:\Program Files\Sonic\MyDVD\
@=c:\Program Files\Sonic\MyDVD\MyDVD.EXE

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\pbrush.exe]
@=%SystemRoot%\system32\mspaint.exe
"Path"=%SystemRoot%\system32

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\Pcdrw32.exe]
"Path"=C:\Program Files\PC-Doctor for Windows\
"(Default)"=C:\Program Files\PC-Doctor for Windows\Pcdrw32.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\PictureViewer.exe]
@=C:\Program Files\QuickTime\PictureViewer.exe
"Path"=C:\Program Files\QuickTime\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\pinball.exe]
@=C:\Program Files\Windows NT\Pinball\pinball.exe
"Path"=C:\Program Files\Windows NT\Pinball

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\QuickTimePlayer.exe]
@=C:\Program Files\QuickTime\QuickTimePlayer.exe
"Path"=C:\Program Files\QuickTime\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\RealPlay.exe]
@=C:\Program Files\Real\RealPlayer\realplay.exe
"Path"=C:\Program Files\Real\RealPlayer

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\rvsezm.exe]
@=C:\Program Files\MSN Gaming Zone\Windows\rvsezm.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\sbase.exe]
@=C:\Program Files\OpenOffice.org 3\program\sbase.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\scalc.exe]
@=C:\Program Files\OpenOffice.org 3\program\scalc.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\Scribus.exe]
@=C:\Program Files\Scribus 1.3.4\Scribus.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\sdraw.exe]
@=C:\Program Files\OpenOffice.org 3\program\sdraw.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\shvlzm.exe]
@=C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\simpress.exe]
@=C:\Program Files\OpenOffice.org 3\program\simpress.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\sinf.exe]
@=C:\Program Files\Fichiers communs\AOL\System Information\sinf.exe
"Path"=C:\Program Files\Fichiers communs\AOL\1239738832\ee

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\smath.exe]
@=C:\Program Files\OpenOffice.org 3\program\smath.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\soffice.exe]
@=C:\Program Files\OpenOffice.org 3\program\soffice.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\swriter.exe]
@=C:\Program Files\OpenOffice.org 3\program\swriter.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\table30.exe]
"UseShortName"=

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\thunderbird.exe]
@=C:\Program Files\Mozilla Thunderbird\thunderbird.exe
"Path"=C:\Program Files\Mozilla Thunderbird

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\unopkg.exe]
@=C:\Program Files\OpenOffice.org 3\program\unopkg.exe
"Path"=C:\Program Files\OpenOffice.org 3\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wab.exe]
@=%ProgramFiles%\Outlook Express\wab.exe
"Path"=%ProgramFiles%\Outlook Express

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wabmig.exe]
@=%ProgramFiles%\Outlook Express\wabmig.exe
"Path"=%ProgramFiles%\Outlook Express

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WinDVD.exe]
"Path"=C:\Program Files\InterVideo\WinDVD
@=C:\Program Files\InterVideo\WinDVD\WinDVD.exe

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\winnt32.exe]
"RunAsOnNonAdminInstall"=dword:00000001 (1)

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WinsockFix.exe]
@=C:\Program Files\Fichiers communs\AOL\WinsockFix\en-US\WinsockFix.exe
"Path"=C:\Program Files\Fichiers communs\AOL\1239738832\ee

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WKPLMSTP.EXE]
@=c:\Program Files\Microsoft Works\wkplmstp.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WKSAB.EXE]
@=c:\Program Files\Microsoft Works\WKSAB.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wkscal.exe]
@=c:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe
"Path"=c:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wksdb.exe]
@=c:\Program Files\Microsoft Works\wksdb.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WKSSB.EXE]
@=c:\Program Files\Microsoft Works\WKSSB.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wksss.exe]
@=c:\Program Files\Microsoft Works\wksss.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wkswp.exe]
@=c:\Program Files\Microsoft Works\wkswp.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WKWCESTP.EXE]
@=c:\Program Files\Microsoft Works\wkwcestp.exe
"Path"=c:\Program Files\Microsoft Works\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wlmail.exe]
@=C:\Program Files\Windows Live\Mail\wlmail.exe
"Path"=C:\Program Files\Windows Live\Mail\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe]
@=C:\Program Files\Windows Media Player\wmplayer.exe
"Path"=C:\Program Files\Windows Media Player

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WORDPAD.EXE]
@="%ProgramFiles%\Windows NT\Accessoires\WORDPAD.EXE"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\WRITE.EXE]
@="%ProgramFiles%\Windows NT\Accessoires\WORDPAD.EXE"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\App Paths\Zattoo.exe]
@=C:\Program Files\Zattoo\Zattoo.exe

******************************************************************************

C:\Program Files\Pack Sécurité\Anti-Spyware
DIRECTORY
Last access time : 2009.05.07 16:54:18
Creation time : 2009.31.03 12:27:20
Last modification time : 2009.31.03 13:15:50
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Anti-Virus
DIRECTORY
Last access time : 2009.05.07 17:20:27
Creation time : 2009.31.03 12:26:30
Last modification time : 2009.05.07 17:20:27
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Common
DIRECTORY
Last access time : 2009.05.07 17:30:49
Creation time : 2009.31.03 11:57:58
Last modification time : 2009.05.07 10:29:13
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\config.xml.P00000444
Last access time : 2009.05.07 06:30:49
Creation time : 2009.31.03 13:05:57
Last modification time : 2009.31.03 13:20:27
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 31221 bytes

C:\Program Files\Pack Sécurité\DAAS
DIRECTORY
Last access time : 2009.05.07 16:54:25
Creation time : 2009.31.03 12:27:21
Last modification time : 2009.31.03 13:15:49
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\DAAS2
DIRECTORY
Last access time : 2009.05.07 16:54:25
Creation time : 2009.31.03 13:16:14
Last modification time : 2009.31.03 13:17:41
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\FSAUA
DIRECTORY
Last access time : 2009.05.07 17:30:14
Creation time : 2009.31.03 13:15:12
Last modification time : 2009.05.07 17:30:14
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\fsdeph.dll
Last access time : 2009.05.07 06:32:56
Creation time : 2009.31.03 12:26:19
Last modification time : 2006.29.03 03:30:58
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 155696 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = F-Secure Dependency Handler DLL
FileVersion = 6.10.23120
InternalName = FSDEPH
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSDEPH.DLL
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\FSGUI
DIRECTORY
Last access time : 2009.05.07 17:20:26
Creation time : 2009.31.03 12:26:58
Last modification time : 2009.05.07 17:20:26
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\fsisu.dll
Last access time : 2009.05.07 06:33:10
Creation time : 2009.31.03 12:26:18
Last modification time : 2009.31.03 12:24:30
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 233519 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = F-Secure Installation Support DLL
FileVersion = 6.10.23120
InternalName = FSISU
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSISU.DLL
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\fsisuNT.dll
Last access time : 2009.05.07 06:33:11
Creation time : 2009.31.03 12:26:19
Last modification time : 2009.31.03 12:24:30
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 180273 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = F-Secure Installation Support DLL (NT)
FileVersion = 6.10.23120
InternalName = FSISUNT
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSISUNT.DLL
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\FSPC
DIRECTORY
Last access time : 2009.05.07 17:08:57
Creation time : 2009.31.03 12:28:00
Last modification time : 2009.24.04 04:30:30
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\FSPS
DIRECTORY
Last access time : 2009.05.07 16:54:39
Creation time : 2009.31.03 12:27:32
Last modification time : 2009.31.03 13:16:09
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\fssg.xml.P00000444
Last access time : 2009.05.07 06:33:13
Creation time : 2009.31.03 13:09:07
Last modification time : 2009.31.03 13:10:38
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 6659 bytes

C:\Program Files\Pack Sécurité\fsuninst.ENG
Last access time : 2009.05.07 06:33:14
Creation time : 2009.31.03 12:26:19
Last modification time : 2006.29.03 03:30:58
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 126976 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = F-Secure Uninstaller English resources
FileVersion = 6.10.23120
InternalName = FSUNINST
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSUNINST.ENG
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\fsuninst.exe
Last access time : 2009.05.07 06:33:14
Creation time : 2009.31.03 12:26:19
Last modification time : 2006.29.03 03:30:58
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 376882 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = F-Secure Uninstaller
FileVersion = 6.10.23120
InternalName = FSUNINST
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSUNINST.EXE
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\fsuninst.FRA
Last access time : 2009.05.07 06:33:14
Creation time : 2009.31.03 12:26:19
Last modification time : 2006.29.03 02:56:12
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 131072 bytes
File Version Info:
==================
CompanyName = F-Secure Corporation
FileDescription = Ressources en français de F-Secure Uninstaller
FileVersion = 6.10.23120
InternalName = FSUNINST
LegalCopyright = Copyright © 1998-2006 F-Secure Corporation. All rights reserved.
LegalTrademarks = F-Secure ® is a registered trademark of F-Secure Corporation.
OriginalFilename = FSUNINST.FRA
ProductName = F-Secure Setup
ProductVersion = 6.10 Build 23120
==================

C:\Program Files\Pack Sécurité\FW
DIRECTORY
Last access time : 2009.05.07 16:54:17
Creation time : 2009.31.03 12:26:36
Last modification time : 2009.31.03 13:15:07
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\FWES
DIRECTORY
Last access time : 2009.05.07 16:51:45
Creation time : 2009.31.03 12:26:42
Last modification time : 2009.31.03 13:24:29
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Gemini
DIRECTORY
Last access time : 2009.05.07 16:54:39
Creation time : 2009.31.03 13:16:10
Last modification time : 2009.01.06 15:30:01
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\HIPS
DIRECTORY
Last access time : 2009.05.07 16:54:39
Creation time : 2009.31.03 13:16:11
Last modification time : 2009.05.07 01:24:39
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\hotfix.xml
Last access time : 2009.05.07 06:33:19
Creation time : 2009.31.03 13:55:36
Last modification time : 2009.31.03 13:56:12
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 10117 bytes

C:\Program Files\Pack Sécurité\ih8.cfg
Last access time : 2009.05.07 06:33:19
Creation time : 2009.31.03 13:56:12
Last modification time : 2009.31.03 13:56:12
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 6 bytes

C:\Program Files\Pack Sécurité\install.ini
Last access time : 2009.05.07 06:33:19
Creation time : 2009.31.03 12:26:19
Last modification time : 2009.31.03 12:28:02
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 1795 bytes

C:\Program Files\Pack Sécurité\ISPNews
DIRECTORY
Last access time : 2009.05.07 16:54:39
Creation time : 2009.31.03 13:16:17
Last modification time : 2009.31.03 13:16:17
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\licenses-fsewin.txt
Last access time : 2009.05.07 10:29:13
Creation time : 2009.05.07 10:29:13
Last modification time : 2009.05.07 10:28:59
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 0 bytes

C:\Program Files\Pack Sécurité\licenses-fsuss.txt
Last access time : 2009.05.07 06:33:19
Creation time : 2009.26.06 11:12:43
Last modification time : 2009.31.03 13:57:31
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 5991 bytes

C:\Program Files\Pack Sécurité\licenses-orsp.txt
Last access time : 2009.05.07 06:33:19
Creation time : 2009.31.03 13:17:41
Last modification time : 2008.23.09 15:37:54
Attributes: FILE_ATTRIBUTE_ARCHIVE
File size : 1089 bytes

C:\Program Files\Pack Sécurité\localization
DIRECTORY
Last access time : 2009.05.07 16:50:55
Creation time : 2009.31.03 12:26:17
Last modification time : 2009.31.03 13:16:11
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\ORSP Client
DIRECTORY
Last access time : 2009.05.07 16:54:40
Creation time : 2009.31.03 13:16:14
Last modification time : 2009.31.03 13:16:14
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Pegasus
DIRECTORY
Last access time : 2009.05.07 16:54:40
Creation time : 2009.31.03 13:16:13
Last modification time : 2009.02.07 13:17:47
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Scanner-Interface
DIRECTORY
Last access time : 2009.05.07 16:54:40
Creation time : 2009.31.03 12:28:02
Last modification time : 2009.31.03 13:16:10
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Spam Control
DIRECTORY
Last access time : 2009.05.07 17:16:46
Creation time : 2009.31.03 12:27:10
Last modification time : 2009.23.06 21:01:11
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\TNB
DIRECTORY
Last access time : 2009.05.07 17:30:49
Creation time : 2009.31.03 12:26:38
Last modification time : 2009.31.03 13:21:33
Attributes: FILE_ATTRIBUTE_DIRECTORY

C:\Program Files\Pack Sécurité\Uninstall
DIRECTORY
Last access time : 2009.05.07 16:54:42
Creation time : 2009.31.03 13:16:16
Last modification time : 2009.31.03 13:16:16
Attributes: FILE_ATTRIBUTE_DIRECTORY

*******************************************************************************

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.fskey]
@=F-Secure.License
"Content Type"=F-Secure/FSLicenseFile
********************************************************************************

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.FSFIX]
@=FSFIX
*******************************************************************************

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\{23814B80-52A2-11d0-BC1A-004095606CB9}]
@=F-Secure
******************************************************************************

Voilà, j'espère t'avoir tout mis (je ne connais pas trop les intitulés de dossier!!)
Si il manque qque chose, merci de me donner le nom du dossier, j'ai déjà envoyé "access_control"

Je peux toujours mettre en gras les mots des fenêtres de F-Secure ;-(

Mon pare-feu est bien activé.
Comment je fais pour te faire parvenir le dossier fsdiag.tar.gz ?(je l'ai décompressé) merci

verifie que le parfeu de windows soit activé

!!!!!!! j'ai 5/6 fenêtres "contrôle d'application" qui se sont emballées en bas à droite de mon écran!! Il essaye de rentrer par I.E. en ajoutant des codes aux clés de registre!!!!!

Je fais un scan...

ok, passe un scan complet de ton antivirus et poste son rapport

Il est certain qu'il se passe encore quelque chose (cf: le curseur qui colorie certain texte dans ma fenêtre F-Secure!!!)

******************************************************************************

Fix Navipromo version 4.0.0 commencé le 05/07/2009 à 16:52:52,34

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 19.06.2009 à 20h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : SOF ( Administrator )
BOOT : Normal boot

Antivirus : Pack sécurité 8.00 8.00 (Not Activated)
Firewall : Pack sécurité 8.00 8.00 (Activated)

C:\ (Local Disk) - NTFS - Total:180 Go (Free:128 Go)
D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
E:\ (CD or DVD)

Recherche exécutée en mode normal

[b]No Infection Navipromo/Egdaccess Found/b

*** Scan terminé le 05/07/2009 à 17:01:55,00 ***

fais le p0ste 48

http://www.commentcamarche.net/forum/affich 13194446 analyser mon scan?page=2#48

poste le rapport STP :-)

Salut Nic00 et Elec69

Bien?? Cette nuit, alerte "Backdoor.win32.Agent.ahuv - chemin: c:\genproc\outil
Pourquoi le détecte t-il seulement à 05h45??? Merci
Puis-je quand même faire ce que tu me demandes plus haut???

Pour F-secure version payante pack9 (sfr)

Lol, oui on va attendre, ya que ça à faire ;-)

elle a du bruler son oridanateur, on passe à autre chose en attendant d'avoir des nouvelles si tu es d'accord ;-)

Nan, R.A.S pour le moment.

salut nic00,
pas de nouvelle de yen-a marre ?

Salut fifi brin d'acier,

crée ton propre sujet pour qu'on puisse te prendre à part:

http://www.commentcamarche.net/forum/forum 7 virus securite#ecrire

Merci

bonjour..........je vous envois moi aussi un scan ...je sais pq si j'ai un virus en tout cas mon pc ne veut plus fonctionner normalement j'ai meme eu un message de vidage de memoire..j'ai eteinds de suite mon pc et rallume en mode sans echec.....je vous remercie d'avance pour vos reponse!

0x8007043CLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:01, on 05/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Adobe\Updater6\Adobe_Updater.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\regine guerrot.MAISON\Local Settings\Temporary Internet Files\Content.IE5\HZ615C52\windows-kb890830-v2.11[1].exe
d:\745f61073aba19ce748f0da640\mrtstub.exe
C:\WINDOWS\system32\MRT.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://gamespace.daemon-tools.cc/fra/home

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "D:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{D673EEEC-4DB4-4193-BA41-F825F0836A9E}: NameServer = 212.27.53.252,212.27.54.252
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Undelete (UndeleteService) - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Undelete\UdServe.exe
O24 - Desktop Component 0: (no name) - D:\Photos\DSCF0552.JPG

Pour F-Secure, c'est la version gratuite ou payante que tu possède ?

C'est pas logique tout ça: GenProc détecte une infection Navipromo et le rapport Hijackthis en dément ^^

On vérifie:

>> Télécharge Navilog sur ton bureau:

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

/!\ si tu as Vista, désactive l’UAC le temps de la désinfection : Panneau de configuration>comptes utilisateurs>activer/désactiver le contrôle des comptes utilisateurs>décoche la cas puis fais OK

>> Désactives ton antivirus également.
>> Lance l’application ( clic-droit : exécuter en tant qu'administrateur si tu es sous Vista )
>> Arriver au menu principal, choisis l'option 1 et valide.
>> Patiente jusqu'au message : Analyse Termine le ...
>> Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt)