"log hijackthis help"
Bonjour,
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:45:56, on 22/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Users\NATH\AppData\Local\aztmgasm.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hugedomains.com/domain_profile.cfm?d=duxet&e=com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hugedomains.com/domain_profile.cfm?d=duxet&e=com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [cekgc] "c:\users\nath\appdata\local\cekgc.exe" cekgc
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [aztmgasm] "c:\users\nath\appdata\local\aztmgasm.exe" aztmgasm
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-fr.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
--
End of file - 10408 bytes
--
j y comprends rien mais si on m'explique je comprends mieux
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:45:56, on 22/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\Philips\SPC220NC\Monitor.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Users\NATH\AppData\Local\aztmgasm.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hugedomains.com/domain_profile.cfm?d=duxet&e=com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hugedomains.com/domain_profile.cfm?d=duxet&e=com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyB1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Monitor] C:\Windows\Philips\SPC220NC\Monitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [cekgc] "c:\users\nath\appdata\local\cekgc.exe" cekgc
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [aztmgasm] "c:\users\nath\appdata\local\aztmgasm.exe" aztmgasm
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O4 - Global Startup: TrayMin220.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-fr.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
--
End of file - 10408 bytes
--
j y comprends rien mais si on m'explique je comprends mieux
Configuration: Windows Vista Internet Explorer 7.0
48 réponses
Résumé de la discussion
Plusieurs éléments du rapport HijackThis et des réponses associées indiquent une infection potentielle, avec des redirections du navigateur et des barres d’outils indésirables. Des solutions proposées incluent l’exécution en mode sans échec de Lop S&D et GenProc, l’utilisation de CCleaner, puis UsbFix et RSIT pour identifier et supprimer les éléments malveillants. Certaines réponses évoquent des services et démarrages suspects, recommandant une vérification des clés de registre et des outils externes, puis un redémarrage pour obtenir des rapports actualisés. Des éléments complémentaires mentionnent une infection liée à un support amovible et recommandent UsbFix, tandis que d’autres incitent à sauvegarder les rapports et à évaluer l’évolution après intervention.
-
il y a rien
-
il faut attendre que le rapport s'ouvre tout seul
-
voici la réponse du test tests rootkits
j y comprends rien mais si on m'explique je comprends mieux -
Peu importe c'est le même...
a+ -
rappel :
▶ dezippe-le , (clic droit/ extraire.....)
Il ne necessite pas d'installation
▶double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan
choisis la langue puis choisis l'option 1 = Mode Recherche
▶laisse travailler l'outil
▶Poste le contenu du rapport qui s'ouvre
-
le mode 1ou le 2--
j y comprends rien mais si on m'explique je comprends mieux -
--et je prend koi
j y comprends rien mais si on m'explique je comprends mieux -
Excuses...le lien:
http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem.zip
a+ -
le lien :
http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem.zip -
Fais ceci stp
Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent
▶ Télécharge List&Kill'em et enregistre le sur ton bureau
▶ dezippe-le , (clic droit/ extraire.....)
Il ne necessite pas d'installation
▶double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan
choisis la langue puis choisis l'option 1 = Mode Recherche
▶laisse travailler l'outil
▶colle le contenu dans ta prochaine réponse , un fois la fenetre refermée :
C:\List'em.txt
a+ -
--pense tu avoir fini dans lontemps car chui pas chez moi et mon fils veux rentré désolé
j y comprends rien mais si on m'explique je comprends mieux -
--pareil pourkoi
j y comprends rien mais si on m'explique je comprends mieux -
Ne t'inquiète pas ...c'est CCM qui bug !!!!!
Comment va le pc maintenant ?
a+ -
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Sempron(tm) Dual Core Processor 2100 )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : NATH ( Not Administrator ! )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 081222-0] 4.8.1296 (Activated)
C:\ (Local Disk) - NTFS - Total:222 Go (Free:145 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB) - FAT - Total:1911 Mo (Free:1 Go)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (USB) - FAT - Total:1875 Mo (Free:1 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 22/11/2009|19:25 )
[ UAC => 0 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\NATH\AppData\Roaming\MICROS~1\Windows\Cookies\nath@advertising[2].txt
Supprime! - C:\Users\NATH\AppData\Roaming\MICROS~1\Windows\Cookies\nath@advertising[3].txt
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[28/10/2009|02:18] C:\Users\NATH\AppData\Local\Adobe
[12/01/2009|22:19] C:\Users\NATH\AppData\Local\Ahead
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Application Data
[17/10/2008|14:19] C:\Users\NATH\AppData\Local\d3d9caps.dat
[01/11/2009|15:35] C:\Users\NATH\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[22/11/2009|16:07] C:\Users\NATH\AppData\Local\edvvn.bat
[20/09/2009|00:40] C:\Users\NATH\AppData\Local\GDIPFONTCACHEV1.DAT
[22/11/2009|12:36] C:\Users\NATH\AppData\Local\Google
[18/10/2008|18:15] C:\Users\NATH\AppData\Local\Hewlett-Packard
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Historique
[29/10/2009|21:24] C:\Users\NATH\AppData\Local\HP Guide
[22/11/2009|18:18] C:\Users\NATH\AppData\Local\IconCache.db
[20/09/2009|00:54] C:\Users\NATH\AppData\Local\IM
[24/06/2009|17:58] C:\Users\NATH\AppData\Local\Microsoft
[20/10/2009|00:16] C:\Users\NATH\AppData\Local\Microsoft Games
[04/02/2009|22:31] C:\Users\NATH\AppData\Local\Nero
[02/03/2009|21:01] C:\Users\NATH\AppData\Local\rvhlec.bat
[25/11/2008|18:23] C:\Users\NATH\AppData\Local\Shareaza
[22/11/2009|19:25] C:\Users\NATH\AppData\Local\Temp
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Temporary Internet Files
[26/10/2008|23:25] C:\Users\NATH\AppData\Local\VirtualStore
[04/10/2009|00:46] C:\Users\NATH\AppData\Local\Zylom Games
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[22/11/2009 18:21][--a------] C:\Windows\tasks\HPCeeScheduleForNATH.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{381D853B-52E5-44BC-A0CE-530A0ABD168D}.job
[07/01/2009 21:31][--a------] C:\Windows\tasks\HPCeeScheduleForARMAND.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{F3A2D6AA-B4B8-4C06-9FE3-F03D0BC46051}.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{E56B234B-9CFA-4999-B2E3-736EB9C5BD77}.job
[22/11/2009 18:21][--ah-----] C:\Windows\tasks\SA.DAT
[22/11/2009 18:18][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[28/10/2009|02:46] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[20/11/2008|19:17] C:\ProgramData\Arcade Lab
[17/10/2008|14:01] C:\ProgramData\Bureau
[11/11/2008|18:57] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[27/10/2009|08:17] C:\ProgramData\Downloaded Installations
[17/10/2008|14:01] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[10/09/2009|17:37] C:\ProgramData\FaxCtr
[19/02/2009|13:58] C:\ProgramData\Fugazo
[12/03/2009|20:04] C:\ProgramData\GameHouse
[22/11/2009|12:36] C:\ProgramData\Google
[17/10/2008|14:13] C:\ProgramData\Hewlett-Packard
[27/09/2009|14:55] C:\ProgramData\HipSoft
[17/02/2008|01:24] C:\ProgramData\HP
[17/02/2008|01:24] C:\ProgramData\hpzinstall.log
[20/09/2009|00:39] C:\ProgramData\IM
[20/09/2009|00:38] C:\ProgramData\IncrediMail
[01/06/2009|12:07] C:\ProgramData\InterAction studios
[23/10/2009|14:42] C:\ProgramData\LauncherAccess.dt
[11/01/2009|17:35] C:\ProgramData\Lavasoft
[20/10/2009|00:18] C:\ProgramData\LightScribe
[10/11/2009|09:17] C:\ProgramData\Lx_cats
[22/11/2009|16:46] C:\ProgramData\Malwarebytes
[18/10/2009|08:05] C:\ProgramData\McAfee
[17/10/2009|03:17] C:\ProgramData\McAfee Security Scan
[17/10/2008|14:01] C:\ProgramData\Menu D‚marrer
[07/11/2009|09:58] C:\ProgramData\Messenger Plus!
[06/11/2009|07:11] C:\ProgramData\Microsoft
[17/10/2008|14:01] C:\ProgramData\ModŠles
[17/02/2008|01:33] C:\ProgramData\muvee Technologies
[20/10/2009|00:23] C:\ProgramData\Nero
[22/11/2009|16:06] C:\ProgramData\NVIDIA
[17/02/2008|01:39] C:\ProgramData\PC-Doctor
[30/09/2009|16:12] C:\ProgramData\PlayFirst
[30/09/2009|15:57] C:\ProgramData\SPL44EB.tmp
[07/10/2009|00:42] C:\ProgramData\SPLDC0F.tmp
[30/09/2009|00:02] C:\ProgramData\SPLE5EB.tmp
[02/11/2006|14:02] C:\ProgramData\Start Menu
[25/11/2008|15:12] C:\ProgramData\Symantec
[02/11/2006|14:02] C:\ProgramData\Templates
[10/09/2009|17:45] C:\ProgramData\UpdaterLog.txt
[20/12/2008|12:09] C:\ProgramData\VisualShape
[21/10/2009|09:42] C:\ProgramData\WildTangent
[04/04/2009|11:19] C:\ProgramData\WildWestQuest2
[11/01/2009|17:51] C:\ProgramData\WLInstaller
[28/04/2009|17:11] C:\ProgramData\Zylom
--------------------\\ Listing des dossiers dans C:\Program Files
[10/09/2009|17:37] C:\Program Files\Abbyy FineReader 6.0 Sprint
[28/10/2009|02:17] C:\Program Files\Adobe
[25/11/2008|15:16] C:\Program Files\Alwil Software
[28/11/2008|15:59] C:\Program Files\ArcSoft
[07/11/2009|03:17] C:\Program Files\Babylon
[22/11/2009|13:02] C:\Program Files\BitComet
[25/11/2008|18:04] C:\Program Files\CCleaner
[11/01/2009|22:52] C:\Program Files\Common Files
[07/11/2009|03:17] C:\Program Files\Conduit
[17/02/2008|01:32] C:\Program Files\CyberLink
[17/02/2008|08:40] C:\Program Files\EasyBits
[06/01/2009|14:59] C:\Program Files\El Juky
[17/10/2008|14:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[22/11/2009|12:54] C:\Program Files\Google
[17/02/2008|01:40] C:\Program Files\Hewlett-Packard
[19/12/2008|18:22] C:\Program Files\HP
[21/10/2009|09:42] C:\Program Files\HP Games
[16/10/2009|18:38] C:\Program Files\InstallShield Installation Information
[29/10/2009|09:38] C:\Program Files\Internet Explorer
[04/09/2009|02:36] C:\Program Files\Java
[25/11/2008|17:59] C:\Program Files\K-Lite Codec Pack
[11/01/2009|16:48] C:\Program Files\Lavalys
[11/01/2009|17:34] C:\Program Files\Lavasoft
[10/09/2009|17:45] C:\Program Files\Lexmark 3600-4600 Series
[10/09/2009|17:38] C:\Program Files\Lexmark Fax Solutions
[10/09/2009|17:47] C:\Program Files\Lexmark Toolbar
[22/11/2009|16:56] C:\Program Files\Malwarebytes' Anti-Malware
[17/10/2009|03:17] C:\Program Files\McAfee Security Scan
[07/11/2009|04:44] C:\Program Files\Messenger Plus! Live
[06/11/2009|07:08] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[17/04/2009|16:47] C:\Program Files\Microsoft Office
[09/09/2009|09:11] C:\Program Files\Microsoft Silverlight
[22/11/2009|13:09] C:\Program Files\Microsoft SQL Server Compact Edition
[24/06/2009|16:37] C:\Program Files\Microsoft Works
[25/04/2009|11:12] C:\Program Files\Midnight Racing
[03/07/2009|15:57] C:\Program Files\Movie Maker
[02/11/2006|13:37] C:\Program Files\MSBuild
[17/04/2009|16:47] C:\Program Files\MSECache
[12/01/2009|22:58] C:\Program Files\MSXML 4.0
[17/02/2008|01:33] C:\Program Files\muvee Technologies
[07/11/2009|03:18] C:\Program Files\myBabylon_English4
[22/11/2009|16:28] C:\Program Files\Navilog1
[11/01/2009|22:52] C:\Program Files\Nero
[17/10/2008|14:05] C:\Program Files\Online Services
[25/11/2008|17:40] C:\Program Files\OpenOffice.org 2.4
[17/02/2008|01:55] C:\Program Files\PC-Doctor 5 for Windows
[28/11/2008|15:57] C:\Program Files\Philips
[29/10/2009|15:34] C:\Program Files\Picasa2
[19/12/2008|18:17] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/02/2009|16:21] C:\Program Files\Ri-li
[16/10/2009|18:33] C:\Program Files\Samsung
[03/02/2009|09:51] C:\Program Files\SuperOthello
[22/11/2009|17:09] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/11/2008|18:00] C:\Program Files\VideoLAN
[27/10/2009|08:19] C:\Program Files\VirginMega
[03/07/2009|15:57] C:\Program Files\Windows Calendar
[03/07/2009|15:57] C:\Program Files\Windows Collaboration
[03/07/2009|15:57] C:\Program Files\Windows Defender
[03/07/2009|15:57] C:\Program Files\Windows Journal
[22/11/2009|13:10] C:\Program Files\Windows Live
[23/12/2008|19:03] C:\Program Files\Windows Live SkyDrive
[11/11/2009|10:01] C:\Program Files\Windows Mail
[29/10/2009|09:38] C:\Program Files\Windows Media Player
[17/10/2008|14:01] C:\Program Files\Windows NT
[03/07/2009|15:57] C:\Program Files\Windows Photo Gallery
[29/10/2009|21:48] C:\Program Files\Windows Portable Devices
[03/07/2009|15:57] C:\Program Files\Windows Sidebar
[03/02/2009|09:25] C:\Program Files\Yahoo! -
c'est koi sa????????????????--
j y comprends rien mais si on m'explique je comprends mieux -
* Poste le rapport généré qui se trouve ici => (C:\lopR.txt)
a+ -
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Sempron(tm) Dual Core Processor 2100 )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : NATH ( Not Administrator ! )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 081222-0] 4.8.1296 (Activated)
C:\ (Local Disk) - NTFS - Total:222 Go (Free:145 Go)
D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB) - FAT - Total:1911 Mo (Free:1 Go)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (USB) - FAT - Total:1875 Mo (Free:1 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 22/11/2009|19:25 )
[ UAC => 0 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\Users\NATH\AppData\Roaming\MICROS~1\Windows\Cookies\nath@advertising[2].txt
Supprime! - C:\Users\NATH\AppData\Roaming\MICROS~1\Windows\Cookies\nath@advertising[3].txt
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans Local
[28/10/2009|02:18] C:\Users\NATH\AppData\Local\Adobe
[12/01/2009|22:19] C:\Users\NATH\AppData\Local\Ahead
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Application Data
[17/10/2008|14:19] C:\Users\NATH\AppData\Local\d3d9caps.dat
[01/11/2009|15:35] C:\Users\NATH\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[22/11/2009|16:07] C:\Users\NATH\AppData\Local\edvvn.bat
[20/09/2009|00:40] C:\Users\NATH\AppData\Local\GDIPFONTCACHEV1.DAT
[22/11/2009|12:36] C:\Users\NATH\AppData\Local\Google
[18/10/2008|18:15] C:\Users\NATH\AppData\Local\Hewlett-Packard
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Historique
[29/10/2009|21:24] C:\Users\NATH\AppData\Local\HP Guide
[22/11/2009|18:18] C:\Users\NATH\AppData\Local\IconCache.db
[20/09/2009|00:54] C:\Users\NATH\AppData\Local\IM
[24/06/2009|17:58] C:\Users\NATH\AppData\Local\Microsoft
[20/10/2009|00:16] C:\Users\NATH\AppData\Local\Microsoft Games
[04/02/2009|22:31] C:\Users\NATH\AppData\Local\Nero
[02/03/2009|21:01] C:\Users\NATH\AppData\Local\rvhlec.bat
[25/11/2008|18:23] C:\Users\NATH\AppData\Local\Shareaza
[22/11/2009|19:25] C:\Users\NATH\AppData\Local\Temp
[17/10/2008|14:04] C:\Users\NATH\AppData\Local\Temporary Internet Files
[26/10/2008|23:25] C:\Users\NATH\AppData\Local\VirtualStore
[04/10/2009|00:46] C:\Users\NATH\AppData\Local\Zylom Games
--------------------\\ Tâches planifiées dans C:\Windows\tasks
[22/11/2009 18:21][--a------] C:\Windows\tasks\HPCeeScheduleForNATH.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{381D853B-52E5-44BC-A0CE-530A0ABD168D}.job
[07/01/2009 21:31][--a------] C:\Windows\tasks\HPCeeScheduleForARMAND.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{F3A2D6AA-B4B8-4C06-9FE3-F03D0BC46051}.job
[22/11/2009 19:25][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{E56B234B-9CFA-4999-B2E3-736EB9C5BD77}.job
[22/11/2009 18:21][--ah-----] C:\Windows\tasks\SA.DAT
[22/11/2009 18:18][--a------] C:\Windows\tasks\SCHEDLGU.TXT
--------------------\\ Listing des dossiers dans C:\ProgramData
[28/10/2009|02:46] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[20/11/2008|19:17] C:\ProgramData\Arcade Lab
[17/10/2008|14:01] C:\ProgramData\Bureau
[11/11/2008|18:57] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[27/10/2009|08:17] C:\ProgramData\Downloaded Installations
[17/10/2008|14:01] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[10/09/2009|17:37] C:\ProgramData\FaxCtr
[19/02/2009|13:58] C:\ProgramData\Fugazo
[12/03/2009|20:04] C:\ProgramData\GameHouse
[22/11/2009|12:36] C:\ProgramData\Google
[17/10/2008|14:13] C:\ProgramData\Hewlett-Packard
[27/09/2009|14:55] C:\ProgramData\HipSoft
[17/02/2008|01:24] C:\ProgramData\HP
[17/02/2008|01:24] C:\ProgramData\hpzinstall.log
[20/09/2009|00:39] C:\ProgramData\IM
[20/09/2009|00:38] C:\ProgramData\IncrediMail
[01/06/2009|12:07] C:\ProgramData\InterAction studios
[23/10/2009|14:42] C:\ProgramData\LauncherAccess.dt
[11/01/2009|17:35] C:\ProgramData\Lavasoft
[20/10/2009|00:18] C:\ProgramData\LightScribe
[10/11/2009|09:17] C:\ProgramData\Lx_cats
[22/11/2009|16:46] C:\ProgramData\Malwarebytes
[18/10/2009|08:05] C:\ProgramData\McAfee
[17/10/2009|03:17] C:\ProgramData\McAfee Security Scan
[17/10/2008|14:01] C:\ProgramData\Menu D‚marrer
[07/11/2009|09:58] C:\ProgramData\Messenger Plus!
[06/11/2009|07:11] C:\ProgramData\Microsoft
[17/10/2008|14:01] C:\ProgramData\ModŠles
[17/02/2008|01:33] C:\ProgramData\muvee Technologies
[20/10/2009|00:23] C:\ProgramData\Nero
[22/11/2009|16:06] C:\ProgramData\NVIDIA
[17/02/2008|01:39] C:\ProgramData\PC-Doctor
[30/09/2009|16:12] C:\ProgramData\PlayFirst
[30/09/2009|15:57] C:\ProgramData\SPL44EB.tmp
[07/10/2009|00:42] C:\ProgramData\SPLDC0F.tmp
[30/09/2009|00:02] C:\ProgramData\SPLE5EB.tmp
[02/11/2006|14:02] C:\ProgramData\Start Menu
[25/11/2008|15:12] C:\ProgramData\Symantec
[02/11/2006|14:02] C:\ProgramData\Templates
[10/09/2009|17:45] C:\ProgramData\UpdaterLog.txt
[20/12/2008|12:09] C:\ProgramData\VisualShape
[21/10/2009|09:42] C:\ProgramData\WildTangent
[04/04/2009|11:19] C:\ProgramData\WildWestQuest2
[11/01/2009|17:51] C:\ProgramData\WLInstaller
[28/04/2009|17:11] C:\ProgramData\Zylom
--------------------\\ Listing des dossiers dans C:\Program Files
[10/09/2009|17:37] C:\Program Files\Abbyy FineReader 6.0 Sprint
[28/10/2009|02:17] C:\Program Files\Adobe
[25/11/2008|15:16] C:\Program Files\Alwil Software
[28/11/2008|15:59] C:\Program Files\ArcSoft
[07/11/2009|03:17] C:\Program Files\Babylon
[22/11/2009|13:02] C:\Program Files\BitComet
[25/11/2008|18:04] C:\Program Files\CCleaner
[11/01/2009|22:52] C:\Program Files\Common Files
[07/11/2009|03:17] C:\Program Files\Conduit
[17/02/2008|01:32] C:\Program Files\CyberLink
[17/02/2008|08:40] C:\Program Files\EasyBits
[06/01/2009|14:59] C:\Program Files\El Juky
[17/10/2008|14:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[22/11/2009|12:54] C:\Program Files\Google
[17/02/2008|01:40] C:\Program Files\Hewlett-Packard
[19/12/2008|18:22] C:\Program Files\HP
[21/10/2009|09:42] C:\Program Files\HP Games
[16/10/2009|18:38] C:\Program Files\InstallShield Installation Information
[29/10/2009|09:38] C:\Program Files\Internet Explorer
[04/09/2009|02:36] C:\Program Files\Java
[25/11/2008|17:59] C:\Program Files\K-Lite Codec Pack
[11/01/2009|16:48] C:\Program Files\Lavalys
[11/01/2009|17:34] C:\Program Files\Lavasoft
[10/09/2009|17:45] C:\Program Files\Lexmark 3600-4600 Series
[10/09/2009|17:38] C:\Program Files\Lexmark Fax Solutions
[10/09/2009|17:47] C:\Program Files\Lexmark Toolbar
[22/11/2009|16:56] C:\Program Files\Malwarebytes' Anti-Malware
[17/10/2009|03:17] C:\Program Files\McAfee Security Scan
[07/11/2009|04:44] C:\Program Files\Messenger Plus! Live
[06/11/2009|07:08] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[17/04/2009|16:47] C:\Program Files\Microsoft Office
[09/09/2009|09:11] C:\Program Files\Microsoft Silverlight
[22/11/2009|13:09] C:\Program Files\Microsoft SQL Server Compact Edition
[24/06/2009|16:37] C:\Program Files\Microsoft Works
[25/04/2009|11:12] C:\Program Files\Midnight Racing
[03/07/2009|15:57] C:\Program Files\Movie Maker
[02/11/2006|13:37] C:\Program Files\MSBuild
[17/04/2009|16:47] C:\Program Files\MSECache
[12/01/2009|22:58] C:\Program Files\MSXML 4.0
[17/02/2008|01:33] C:\Program Files\muvee Technologies
[07/11/2009|03:18] C:\Program Files\myBabylon_English4
[22/11/2009|16:28] C:\Program Files\Navilog1
[11/01/2009|22:52] C:\Program Files\Nero
[17/10/2008|14:05] C:\Program Files\Online Services
[25/11/2008|17:40] C:\Program Files\OpenOffice.org 2.4
[17/02/2008|01:55] C:\Program Files\PC-Doctor 5 for Windows
[28/11/2008|15:57] C:\Program Files\Philips
[29/10/2009|15:34] C:\Program Files\Picasa2
[19/12/2008|18:17] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[11/02/2009|16:21] C:\Program Files\Ri-li
[16/10/2009|18:33] C:\Program Files\Samsung
[03/02/2009|09:51] C:\Program Files\SuperOthello
[22/11/2009|17:09] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[25/11/2008|18:00] C:\Program Files\VideoLAN
[27/10/2009|08:19] C:\Program Files\VirginMega
[03/07/2009|15:57] C:\Program Files\Windows Calendar
[03/07/2009|15:57] C:\Program Files\Windows Collaboration
[03/07/2009|15:57] C:\Program Files\Windows Defender
[03/07/2009|15:57] C:\Program Files\Windows Journal
[22/11/2009|13:10] C:\Program Files\Windows Live
[23/12/2008|19:03] C:\Program Files\Windows Live SkyDrive
[11/11/2009|10:01] C:\Program Files\Windows Mail
[29/10/2009|09:38] C:\Program Files\Windows Media Player
[17/10/2008|14:01] C:\Program Files\Windows NT
[03/07/2009|15:57] C:\Program Files\Windows Photo Gallery
[29/10/2009|21:48] C:\Program Files\Windows Portable Devices
[03/07/2009|15:57] C:\Program Files\Windows Sidebar
[03/02/2009|09:25] C:\Program Files\Yahoo! -
--
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-22 19:25:20
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
j y comprends rien mais si on m'explique je comprends mieux -
Clic sur le lien proposé par gen-hackman (Salut à toi au passage...)
==> Choisis l'option 2 :-) -
telecharge du lien que je t'ai donné et execute-le comme t'a demandé archet9 que je salue au passage ^^
- 1
- 2
- 3
Suivant
