Infecté par divers virus

BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Wed, Jan 10, 2007 - 05:35:57
 
 
  
  
 
Voie d'analyse: C:\;D:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 04:30:32
 
Fichiers
 742985
 
Directoires
 7423
 
Secteurs de boot
 2
 
Archives
 40943
 
Paquets programmes
 84920
 
  
  
 
Résultats
 
Virus identifiés
 10
 
Fichiers infectés
 19
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 1
 
Fichiers effacés
 18
 
  
  
 
Info sur les moteurs
 
Définition virus
 368983
 
Version des moteurs
 AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
 
Analyse des plugins
 14
 
Archive des plugins
 38
 
Unpack des plugins
 6
 
E-mail plugins
 6
 
Système plugins
 1
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 *;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Inbox=>(message 1170)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Infecté par: Trojan.Agent.SS
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Inbox=>(message 1170)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Echec de la désinfection
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Inbox=>(message 1170)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Supprimé
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Inbox=>(message 1170)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)
 Echec de la mise à jour
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Trash=>(message 741)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Infecté par: Trojan.Agent.SS
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Trash=>(message 741)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Echec de la désinfection
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Trash=>(message 741)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)=>SYN.exe
 Supprimé
 
C:\Documents and Settings\p\Application Data\Thunderbird\Profiles\rmgj5pbn.default\Mail\Local Folders-1\Trash=>(message 741)=>[Subject: =?gb2312?B?ztK6zcWuxfMg09EgtcS6z9OwKDU][Date: Tue, 06 Jun 2006 21:28:08 +0800]=>(MIME part)=>MyPic.exe=>(RAR Sfx o)
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\116346.exe=>wise0017
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\116346.exe=>wise0017
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\116346.exe=>wise0017
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\116346.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.exe=>wise0017
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.exe=>wise0017
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.exe=>wise0017
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.rar=>3037.exe=>wise0017
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.rar=>3037.exe=>wise0017
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.rar=>3037.exe=>wise0017
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\3037.rar=>3037.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\116155.exe=>wise0017
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\116155.exe=>wise0017
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\116155.exe=>wise0017
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\116155.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2854.exe=>wise0017
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2854.exe=>wise0017
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2854.exe=>wise0017
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2854.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe=>wise0019
 Infecté par: Trojan.Downloader.Small.BKE
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe=>wise0019
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe=>wise0019
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe=>wise0020
 Détecté avec: Application.Adware.NewDotNet.B.Dropper
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe=>wise0020
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\BootSkin\2936.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0019
 Infecté par: Dropped:Trojan.Dloader.HK
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0019
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0019
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0020
 Infecté par: Dropped:Application.Adware.NewDotNet.A
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0020
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0020
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0022
 Infecté par: Dropped:Application.ProcKill.Jk
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0022
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe=>wise0022
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\Downloads\Matrix3DSetup.exe
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\StyleXp.exe & StyleXp.key.rar=>Pour ROmain le pire casse pied kit styleXp\stylexp.key.exe=>(NSIS o)=>lzma_solid_nsis0001
 Infecté par: Trojan.Startpage.DLL
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\StyleXp.exe & StyleXp.key.rar=>Pour ROmain le pire casse pied kit styleXp\stylexp.key.exe=>(NSIS o)=>lzma_solid_nsis0001
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\StyleXp.exe & StyleXp.key.rar=>Pour ROmain le pire casse pied kit styleXp\stylexp.key.exe=>(NSIS o)=>lzma_solid_nsis0001
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\DESKTOP\StyleXp.exe & StyleXp.key.rar=>Pour ROmain le pire casse pied kit styleXp\stylexp.key.exe=>(NSIS o)
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>NHInstall.exe
 Infecté par: Trojan.Dloader.L
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>NHInstall.exe
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>NHInstall.exe
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)
 Mis à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHelper.dll
 Détecté avec: Adware.Navexcel.A
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHelper.dll
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHelper.dll
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUninstaller.exe
 Détecté avec: Adware.Navexcel.A
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUninstaller.exe
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUninstaller.exe
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUpdater.exe
 Détecté avec: Adware.Navexcel.A
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUpdater.exe
 Echec de la désinfection
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab=>NHUpdater.exe
 Supprimé
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017=>(ZIP Sfx o)=>v2.0.4a.cab
 Echec de la mise à jour
 
C:\Documents and Settings\p\Mes documents\DL\telechargements romain\MUSIQUE\setupmp3towav.exe=>wise0017
 Echec de la mise à jour
 
C:\Program Files\La Quatrième Prophétie\vnc-4.0-x86_win32_viewer.rar=>vnc-4.0-x86_win32_viewer.exe
 Infecté par: Win32.Parite.B
 
C:\Program Files\La Quatrième Prophétie\vnc-4.0-x86_win32_viewer.rar=>vnc-4.0-x86_win32_viewer.exe
 Désinfecté
 
C:\Program Files\La Quatrième Prophétie\vnc-4.0-x86_win32_viewer.rar
 Echec de la mise à jour
 
C:\System Volume Information\_restore{D865EE18-5388-49CE-8CE8-541AA1403813}\RP264\A0161012.exe=>(NSIS o)=>lzma_solid_nsis0001
 Infecté par: Trojan.Startpage.DLL
 
C:\System Volume Information\_restore{D865EE18-5388-49CE-8CE8-541AA1403813}\RP264\A0161012.exe=>(NSIS o)=>lzma_solid_nsis0001
 Echec de la désinfection
 
C:\System Volume Information\_restore{D865EE18-5388-49CE-8CE8-541AA1403813}\RP264\A0161012.exe=>(NSIS o)=>lzma_solid_nsis0001
 Supprimé
 
C:\System Volume Information\_restore{D865EE18-5388-49CE-8CE8-541AA1403813}\RP264\A0161012.exe=>(NSIS o)
 Echec de la mise à jour

Logfile of HijackThis v1.99.1
Scan saved at 22:04:11, on 09/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\Program Files\Fichiers communs\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Nokia\NCLTools\NclTray.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Fichiers communs\Nokia\Services\ServiceLayer.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TheTurtle\TheTurtle.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\SAGEM\Alice\dslmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpamPal\spampal.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\explorer.exe
C:\Protects\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\SnagIt 7\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Fichiers communs\Nokia\NCLTools\NclTray.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PDF Converter Registry Controller] "C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [PicasaNet] "C:\Program Files\Hello\Hello.exe" -b
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera V
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MediaDico9] C:\Program Files\Micro Application\9 DICOS Indispensables\LanceMediaDICO9.exe Lancement
O4 - HKCU\..\Run: [TheTurtle] C:\Program Files\TheTurtle\TheTurtle.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - Startup: Aide mémoire.lnk = ?
O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\Alice\dslmon.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open PDF in Word - res://C:\Program Files\ScanSoft\PDF Converter\IEShellExt.dll /100
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://romnoy.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Fichiers communs\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:23:46 09/01/2007

 + Résultat de l'analyse:	



C:\Documents and Settings\p\Cookies\p@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\p\Cookies\p@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\p\Cookies\p@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\p\Cookies\p@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\p\Cookies\p@clickbank[1].txt -> TrackingCookie.Clickbank : Nettoyé.
C:\Documents and Settings\p\Cookies\p@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\p\Cookies\p@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\p\Cookies\p@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\p\Cookies\p@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
C:\Documents and Settings\p\Cookies\p@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\p\Cookies\p@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\p\Cookies\p@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\p\Cookies\p@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\p\Cookies\p@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.


Fin du rapport