PC INFESTE

bonsoir,
ton pc est bien infecté
je ne sais pa si ton problème vient de ton fournisseur ou du pc.

si je regrad ebien ton rapport, tu as déjà urilisé pas mal de tool de nettoyage :

C:\Program Files\CCleaner
C:\Program Files\Malwarebytes' Anti-Malware
C:\UsbFix
C:\Program Files\Spyware Terminator

poste moi ce rapport en copier coller ou Ctrl+c, puius Ctrl+v, sur ton prochain message :

C:\UsbFix.txt

poste moi aussi le rapport de mbam

merci

Salut Electricien69,

Voici les deux rapports que j'ai eu. Par ailleurs je dois te signaler que je t'envoies ces messages depuis un cyber-café, car je n'ai plus de connection chez moi, qu'en plus, depuis hier soir, dés que je démarre le pc, l'écran s'arrête automatiquement tout seul, et je ne sais toujours pas à quoi c'est dû.

Faut il impérativement que je sois connecté sur le net pour pouvoir nettoyer ma machine?

bien voilà les rapports:

info.txt logfile of random's system information tool 1.06 2009-10-08 16:42:38

======Uninstall list======

-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Flash Player ActiveX-->C:\WINDOWS\System32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Belgium e-ID middleware 3.5.2 (build 5775)-->MsiExec.exe /I{824563DE-75AD-4166-9DC0-B6482F205775}
BitLord 1.1-->C:\Program Files\BitLord\uninst.exe
CachemanXP 1.8.0.14-->C:\PROGRA~1\CACHEM~1\UNINST~1\UNWISE.EXE C:\PROGRA~1\CACHEM~1\UNINST~1\install.log
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
C-Media 3D Audio-->C:\WINDOWS\CMIUnInstall.exe
C-Media WDM Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
doPDF 6.2 printer-->"C:\Program Files\Softland\doPDF 6\unins000.exe"
ExeGo-->"C:\Program Files\ExeGo28\unins000.exe"
Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Glary Utilities 2.10.0.622-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
hp psc 1200 series-->MsiExec.exe /X{C900EF06-2E76-49C7-8DB0-41F629B21DC5}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins001.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
PC Tools Firewall Plus 5.0-->C:\Program Files\PC Tools Firewall Plus\unins000.exe /LOG
Photo et imagerie HP 2.0 - All-in-One Pilote-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
Photo et imagerie HP 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
Photo et imagerie HP 2.0 - hp psc 1200 series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
PicBlock 3.0-->"C:\Program Files\PicBlock\unins000.exe"
Service Pack 1a pour Windows XP-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
SiS 900 PCI Fast Ethernet Adapter Driver-->C:\Progra~1\SiSLan\Uninst.exe
SiS Compatible VGA V2.12-->RUNDLL32 setuplib.dll,UnInstall ,315&ISUNINST -f"C:\PROGRA~1\SISCOM~1.12\DeIsL1.isu"&P.U 4 sisgr.inf&-1
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Tap'Touche 3-->C:\WINDOWS\IsUn0c0c.exe -f"C:\Program Files\Tap'Touche 3\Uninst.isu"
Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Webutility 7.7.5-->"C:\Program Files\Webutility\unins000.exe"
WiFi Station-->C:\Program Files\InstallShield Installation Information\{DECE22F4-EEDD-4615-BC56-2F4827FAD64B}\setup.exe -runfromtemp -l0x040c -removeonly
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live Sign-in Assistant-->MsiExec.exe /I{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe

======Security center information======

AV: Spyware Terminator
AV: ESET NOD32 Antivirus 4.0 (disabled)
FW: PC Tools Firewall Plus (disabled)

======System event log======

Computer Name: BS102
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 5670
Source Name: Cdrom
Time Written: 20091006105251.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 5669
Source Name: Cdrom
Time Written: 20091006105250.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 5668
Source Name: Cdrom
Time Written: 20091006105250.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 5667
Source Name: Cdrom
Time Written: 20091006105250.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 5666
Source Name: Cdrom
Time Written: 20091006105250.000000+120
Event Type: error
User:

=====Application event log=====

Computer Name: BS102
Event Code: 1000
Message: Application défaillante iexplore.exe, version 6.0.2800.1106, module défaillant mshtml.dll, version 6.0.2800.1491, adresse de défaillance 0x000c035d.

Record Number: 5135
Source Name: Application Error
Time Written: 20080826174246.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 1000
Message: Application défaillante iexplore.exe, version 6.0.2800.1106, module défaillant mshtml.dll, version 6.0.2800.1491, adresse de défaillance 0x000c0350.

Record Number: 5134
Source Name: Application Error
Time Written: 20080826173201.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 1000
Message: Application défaillante iexplore.exe, version 6.0.2800.1106, module défaillant mshtml.dll, version 6.0.2800.1491, adresse de défaillance 0x000c035d.

Record Number: 5133
Source Name: Application Error
Time Written: 20080826172118.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 1000
Message: Application défaillante iexplore.exe, version 6.0.2800.1106, module défaillant mshtml.dll, version 6.0.2800.1491, adresse de défaillance 0x0001a531.

Record Number: 5132
Source Name: Application Error
Time Written: 20080826170947.000000+120
Event Type: error
User:

Computer Name: BS102
Event Code: 1000
Message: Application défaillante iexplore.exe, version 6.0.2800.1106, module défaillant mshtml.dll, version 6.0.2800.1491, adresse de défaillance 0x0001a531.

Record Number: 5131
Source Name: Application Error
Time Written: 20080826170934.000000+120
Event Type: error
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Belgium Identity Card
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 7 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=0700
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=C:\Program Files\Belgium Identity Card

-----------------EOF-----------------Logfile of random's system information tool 1.06 (written by random/random)
Run by BONSAVOIR at 2009-10-08 16:41:26
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 8 GB (40%) free of 19 GB
Total RAM: 495 MB (24% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1185539489.job
C:\WINDOWS\tasks\GlaryInitialize.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-07-07 324416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-15 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-05-07 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-15 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"00PCTFW"=C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2009-02-27 2856856]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2009-02-27 2233856]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 136600]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1381712]
"beid"=C:\Program Files\Belgium Identity Card\beid35gui.exe [2009-06-04 2056192]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
RunDll32 cmicnfg.cpl,CMICtrlWnd []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\System32\ctfmon.exe [2004-08-19 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ExeGo]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS KHooker]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Tray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiSUSBRG]
C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bonsavoir.BONSAV-DPMN2X94^Menu Démarrer^Programmes^Démarrage^Reboot.exe]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SharedAccess"=3

C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
hp psc 1000 series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe

C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Menu Démarrer\Programmes\Démarrage
AutorunsDisabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2008-10-16 87352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoVisualStyleChoice"=0
"DisableTaskMgr"=1
"DisableRegistryTools"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoWindowsUpdate"=0
"NoFavoritesMenu"=0
"NoSMMyPictures"=0
"NoStartMenuMyMusic"=0
"NoRecentDocsHistory]"=1
"NoRecentDocsNetHood"=0
"NoFind"=0
"NoRun"=0
"NoUserNameInStartMenu"=1
"NoInstrumentation"=0
"NoStartMenuPinnedList"=0
"ForceStartMenuLogoff"=1
"NoSharedDocuments"=1
"NoSMBalloonTip"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoWindowsUpdate"=
"NoFavoritesMenu"=
"NoSMMyPictures"=
"NoStartMenuMyMusic"=
"NoRecentDocsNetHood"=
"NoFind"=
"NoRun"=
"NoInstrumentation"=
"NoSimpleStartMenu"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"F:\HerculesWGUSB2-54-V3.1.exe"="F:\HerculesWGUSB2-54-V3.1.exe:*:Enabled:ipsec"
"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:ipsec"
"C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe"="C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe:*:Enabled:ipsec"
"C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe"="C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe:*:Enabled:ipsec"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"="C:\Program Files\LogMeIn\x86\LogMeInSystray.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\Office12\EXCEL.EXE"="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE:*:Enabled:ipsec"
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe:*:Enabled:ipsec"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe:*:Enabled:ipsec"
"C:\Program Files\Notepad++\notepad++.exe"="C:\Program Files\Notepad++\notepad++.exe:*:Enabled:ipsec"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:ipsec"
"C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe:*:Enabled:ipsec"
"C:\Program Files\Hercules\WiFi Station\WifiStation.exe"="C:\Program Files\Hercules\WiFi Station\WifiStation.exe:*:Enabled:ipsec"
"C:\Program Files\Belgium Identity Card\beid35gui.exe"="C:\Program Files\Belgium Identity Card\beid35gui.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\Office12\WINWORD.EXE"="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE:*:Enabled:ipsec"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{35e206a0-22ba-11de-9fb5-000d8773cd25}]
shell\AutoRun\command - E:\0bcobed.exe
shell\open\command - E:\0bcobed.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe88ede5-a3a7-11de-9fd9-000d8773cd25}]
shell\AutoRun\command - E:\LaunchU3.exe -a

======List of files/folders created in the last 1 months======

2009-10-08 16:41:38 ----DC---- C:\Program Files\trend micro
2009-10-08 16:41:26 ----DC---- C:\rsit
2009-10-07 14:55:01 ----AC---- C:\UsbFix.txt
2009-10-06 15:49:58 ----DC---- C:\Program Files\Hercules
2009-10-05 14:19:18 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\InstallShield
2009-10-05 12:42:28 ----DC---- C:\WINDOWS\system32\beidpp
2009-10-05 12:41:15 ----DC---- C:\Program Files\Belgium Identity Card
2009-10-05 12:39:29 ----AC---- C:\WINDOWS\system32\usbr38.dll
2009-10-05 12:39:28 ----DC---- C:\drivers
2009-10-05 10:38:47 ----DC---- C:\Program Files\ESET
2009-10-05 10:38:47 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\ESET
2009-10-05 10:13:26 ----DC---- C:\Program Files\Fichiers communs\Adobe
2009-10-02 20:00:03 ----DC---- C:\Program Files\Notepad++
2009-10-02 20:00:03 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\Notepad++
2009-09-24 17:52:22 ----RSHC---- C:\zPharaoh.exe
2009-09-20 01:15:00 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\U3
2009-09-19 23:44:37 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\dvdcss
2009-09-18 11:08:23 ----DC---- C:\Program Files\CCleaner
2009-09-18 10:32:30 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\Malwarebytes
2009-09-18 10:30:50 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
2009-09-18 10:30:49 ----DC---- C:\Program Files\Malwarebytes' Anti-Malware
2009-09-18 10:26:27 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\vlc
2009-09-18 10:19:18 ----DC---- C:\Program Files\VideoLAN
2009-09-18 10:09:59 ----RSHDC---- C:\autorun.inf
2009-09-18 09:44:37 ----DC---- C:\UsbFix
2009-09-17 18:49:45 ----DC---- C:\Program Files\Adobe
2009-09-17 18:38:08 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Hewlett-Packard
2009-09-17 18:37:17 ----AC---- C:\WINDOWS\system32\hpz3l5mu.dll
2009-09-17 18:37:15 ----RAC---- C:\WINDOWS\system32\hpzids01.dll
2009-09-17 18:33:21 ----RAC---- C:\WINDOWS\system32\hppldcoi.dll
2009-09-17 18:33:21 ----RAC---- C:\WINDOWS\system32\hpovst11.dll
2009-09-17 18:33:21 ----RAC---- C:\WINDOWS\system32\difxapi.dll
2009-09-17 18:33:20 ----RAC---- C:\WINDOWS\system32\hpwtscl3.dll
2009-09-17 18:33:19 ----RAC---- C:\WINDOWS\system32\hpwwiax4.dll
2009-09-17 18:18:00 ----RAC---- C:\WINDOWS\hpzshl01.exe
2009-09-17 18:17:59 ----RAC---- C:\WINDOWS\hpzmsi01.exe
2009-09-17 18:17:58 ----DC---- C:\WINDOWS\yellowtail
2009-09-17 18:17:40 ----DC---- C:\Program Files\HP
2009-09-17 18:16:37 ----HDC---- C:\Config.Msi
2009-09-17 02:58:04 ----AC---- C:\WINDOWS\system32\wmpns.dll

======List of files/folders modified in the last 1 months======

2009-10-08 16:41:38 ----RDC---- C:\Program Files
2009-10-08 16:41:15 ----DC---- C:\WINDOWS\Temp
2009-10-08 15:42:26 ----ADC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2009-10-08 15:39:11 ----DC---- C:\WINDOWS\system32\config
2009-10-08 15:23:57 ----SHDC---- C:\WINDOWS\Installer
2009-10-08 15:20:08 ----DC---- C:\WINDOWS\system32\CatRoot2
2009-10-08 15:11:26 ----DC---- C:\WINDOWS\system32\drivers
2009-10-08 11:40:52 ----DC---- C:\Program Files\Spyware Terminator
2009-10-08 11:40:44 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\Spyware Terminator
2009-10-08 11:23:11 ----DC---- C:\Documents and Settings
2009-10-07 16:44:40 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spyware Terminator
2009-10-07 15:48:41 ----DC---- C:\WinConfig
2009-10-07 15:37:41 ----DC---- C:\WINDOWS\system32
2009-10-07 13:27:25 ----SDC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\Microsoft
2009-10-07 13:27:23 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
2009-10-07 13:08:45 ----DC---- C:\WINDOWS
2009-10-06 15:50:21 ----HDC---- C:\WINDOWS\inf
2009-10-06 15:49:52 ----HDC---- C:\Program Files\InstallShield Installation Information
2009-10-06 13:15:27 ----SDC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
2009-10-06 12:36:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-06 12:36:01 ----RDC---- C:\Program Files\Windows Media Player
2009-10-06 12:35:55 ----RDC---- C:\Program Files\Outlook Express
2009-10-06 12:35:42 ----DC---- C:\Program Files\Movie Maker
2009-10-06 12:35:29 ----DC---- C:\Program Files\Internet Explorer
2009-10-06 12:35:08 ----DC---- C:\Program Files\Windows NT
2009-10-06 12:34:58 ----RDC---- C:\Program Files\NetMeeting
2009-10-06 12:33:59 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-05 12:41:40 ----DC---- C:\WINDOWS\WinSxS
2009-10-05 10:52:18 ----DC---- C:\Documents and Settings\Bonsavoir.BONSAV-DPMN2X94\Application Data\Adobe
2009-10-05 10:13:26 ----DC---- C:\Program Files\Fichiers communs
2009-09-24 17:58:17 ----DC---- C:\Program Files\MSN Messenger
2009-09-24 17:56:25 ----DC---- C:\Program Files\C-Media 3D Audio
2009-09-24 17:52:33 ----DC---- C:\Program Files\BitLord
2009-09-21 20:17:45 ----DC---- C:\Program Files\Webutility
2009-09-21 20:17:42 ----SHDC---- C:\FOUND.003
2009-09-21 20:17:42 ----SHDC---- C:\FOUND.002
2009-09-21 20:17:42 ----SHDC---- C:\FOUND.001
2009-09-21 20:17:42 ----RDC---- C:\WINDOWS\Web
2009-09-21 20:17:42 ----DC---- C:\WINDOWS\Help
2009-09-21 20:17:42 ----DC---- C:\Program Files\Tap'Touche 3
2009-09-21 20:17:42 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Application Data\QuickTime
2009-09-18 11:16:20 ----DC---- C:\WINDOWS\Minidump
2009-09-18 11:16:20 ----DC---- C:\WINDOWS\Debug
2009-09-17 19:28:20 ----AC---- C:\WINDOWS\system.ini
2009-09-17 18:36:27 ----DC---- C:\WINDOWS\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-19 41600]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2002-11-26 8576]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-10-06 21419]
R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\System32\drivers\CdaC15BA.SYS []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 Nbf;Protocole NetBEUI; C:\WINDOWS\System32\DRIVERS\nbf.sys [2001-09-30 98176]
R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
R3 abp470n5;abp470n5; \??\C:\WINDOWS\system32\drivers\ltthdr.sys []
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2004-06-25 818816]
R3 lmimirr;lmimirr; C:\WINDOWS\System32\DRIVERS\lmimirr.sys [2008-07-24 10144]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-28 5888]
R3 RT73;Hercules Wireless USB Dongle Driver ; C:\WINDOWS\system32\DRIVERS\rt73.sys [2006-12-21 429440]
R3 SFilter;PCTools Driver; C:\WINDOWS\system32\DRIVERS\pctfw.sys [2008-09-22 97408]
R3 SiS315;SiS315; C:\WINDOWS\System32\DRIVERS\sisgrp.sys [2002-12-02 250368]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-04 17024]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 ACSSCR;ACR38 Smart Card Reader; C:\WINDOWS\system32\DRIVERS\a38usb.sys [2009-10-05 33536]
S3 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2007-01-17 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2007-01-17 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2007-01-17 21568]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\System32\DRIVERS\sisnic.sys [2001-01-05 34387]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-03 15104]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2008-12-11 146800]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-02-27 540672]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-19 14336]
S2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2004-08-03 15872]
S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-07-20 69120]
S3 CachemanXPService;CachemanXP; C:\PROGRA~1\CACHEM~1\CachemanXP.exe [2009-01-11 355840]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-07 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S4 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S4 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\System32\wdfmgr.exe [2004-08-10 38912]

-----------------EOF-----------------

hello,
pas de soucis je regradei ton rapport quand je l'aurai :-)

à++++

bonjour,

en attendant, pas de nouvelles de l'ineressé !!!! ????

bonne journée à tous

re

ben si, je sait lire, et toi ? c'est facile de surligner uniquement ce qui va dans ton sens regarde
quelqu'un peut il me dire quels sont les meilleurs logiciels pour me protéger, le nettoyer et tout ce qui s'en suit.
merci
tu lui a demander un rapport , c'est trés bien,
lui, il pose des questions , on essaie de lui repondre

re,
hé les gars, on parle d'aider à nettoyer, pas seulement de faire des mises à jour :

j'ai un problème avec mon pc qui est infesté, quelqu'un peut il me dire quels sont les meilleurs logiciels pour me protéger, le nettoyer et tout ce qui s'en suit.

ou vous ne savez pas lire, ou vous le faites semblant, à vous de voir, mais on va désinfecter ce pc, s'il y a un rapport !!!

sur ce bonne nuit

Mettre à jour tous ses logiciels aussi, ça aide. Comme passer d'Internet Explorer 6 à Internet Explorer 8.

Sinon, il n'y a pas de "meilleurs logiciels" pour protéger ton PC. Il te faut juste un antivirus, un pare-feu (quoique perso, je m'en passe) et éventuellement un anti-spyware.

Mais tu pourras mettre tous les logiciels de protection que tu voudras, ça n'empêchera pas ton PC de se prendre un virus si toi, le maître de la machine, tu ne fais pas un minimum attention aux sites que tu visites (sans parler des téléchargements).

bonjour,
on va déjà commencer par vérifier si ton pc est infecté ou non :
Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
http://images.malwareremoval.com/random/RSIT.exe

Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Double clique sur RSIT.exe pour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
(log.txt & info.txt)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Est ce que tu as un antivirus installer sur ton ordinateur ?