Infecté par win spyware protect

johanna49 -

Bonjour,
cela fait plusieurs jours que je suis infecté par win spyware protect et le problème c'est que je suis très nulle en informatique je ne sais pas comment m'en sortir,si quelqu'un peut m'aider MERCI

Configuration: Windows 2000
Internet Explorer 6.0

Afficher la suite

A voir également

Infecté par win spyware protect
Cle win 8.1 - Guide
Win rar - Télécharger - Compression & Décompression
H protect - Forum Huawei
Win zip - Télécharger - Compression & Décompression
Spyware gratuit - Télécharger - Antivirus & Antimalwares

3 réponses

Réponse 1 / 3
buginformatik Contributeur
Je pars en vacance demain donc poste un Log Hijackthis sur un nouveau Topic dans la rubrique sécurité et demande a quelqu'un de te le lire et regarde ce qu'il y a à changer...

Met ce topic en résolu et créer en un nouveau pour créer une discussion sans réponse pour bien montrer que personne ne t'aide pour le moment

0

Réagir
Réponse 2 / 3
buginformatik Contributeur
télécharge https://www.generation-nt.com/malwarebytes-anti-malware-protection-agents-malveillants-securite-anti-malwares-telecharger-telechargement-47800.html (MBAM), tu lance le logiciel et tu le met à jour puis tu fais une recherche

0

Réagir
Réponse 3 / 3
buginformatik Contributeur
Ok je m'occupe de toi !

On va commencer par une petite consultation chez le toubib :) Téléchrge Hijackthis ==> https://www.zebulon.fr/telechargements/securite/systeme/hijackthis.html

Tu accept le contrat Puis tu clique sur : do a scan and save a logfile

Tu copie tout le rapport Hijackthis ouvert sur le bloc notes et tu le colles sur le forum et on commence

A+

0

Réagir
1. johanna49
  
  merci pour ton aide voila le rapport
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 13:12:52, on 04/07/2008
  Platform: Windows 2000 SP2 (WinNT 5.00.2195)
  MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
  Boot mode: Normal
  
  Running processes:
  C:\WINNT\System32\smss.exe
  C:\WINNT\system32\winlogon.exe
  C:\WINNT\system32\services.exe
  C:\WINNT\system32\lsass.exe
  C:\WINNT\system32\svchost.exe
  C:\WINNT\system32\spoolsv.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINNT\System32\svchost.exe
  C:\WINNT\system32\regsvc.exe
  C:\WINNT\system32\MSTask.exe
  C:\WINNT\system32\stisvc.exe
  C:\WINNT\System32\WBEM\WinMgmt.exe
  C:\WINNT\System32\mspmspsv.exe
  C:\WINNT\Explorer.EXE
  C:\WINNT\System32\Promon.exe
  C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
  C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\Program Files\Lexmark 2400 Series\ezprint.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
  C:\WINNT\loadqm.exe
  C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe
  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  C:\WINNT\System32\rundll32.exe
  C:\WINNT\System32\internat.exe
  C:\Program Files\SuperCopier\SuperCopier.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\WINNT\System32\lxcrcoms.exe
  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
  C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe
  C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\PROGRA~1\WINZIP\winzip32.exe
  C:\Documents and Settings\Administrateur\Local Settings\Temp\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
  O2 - BHO: (no name) - {4A3F62A9-AFEB-4543-AE4D-DC2442444E64} - C:\WINNT\System32\opnonoNH.dll (file missing)
  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
  O2 - BHO: (no name) - {B8301AF7-D00E-4EA4-87C1-5FF4644FBBA1} - C:\Program Files\Web Technologies\iebt.dll (file missing)
  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
  O2 - BHO: (no name) - {C22E8711-AB35-4261-B10C-11AAC1B61693} - C:\WINNT\System32\rqRhGWNh.dll (file missing)
  O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
  O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
  O3 - Toolbar: Internet Service - {85BDD81D-31FD-4A6B-A73C-3955B128D2EC} - C:\Program Files\Web Technologies\iebr.dll (file missing)
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
  O4 - HKLM\..\Run: [tourpath] regedit /s c:\winnt\tour.reg
  O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
  O4 - HKLM\..\Run: [Promon.exe] Promon.exe
  O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
  O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\NTFSCLUP.EXE
  O4 - HKLM\..\Run: [CSScheduleCheck] C:\CFGSAFE\SCHWIZEX.EXE -CHECK
  O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
  O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
  O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
  O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINNT\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
  O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
  O4 - HKLM\..\Run: [LoadQM] loadqm.exe
  O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"
  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  O4 - HKLM\..\Run: [2b2d157e] rundll32.exe "C:\WINNT\System32\uxdrchbd.dll",b
  O4 - HKCU\..\Run: [internat.exe] internat.exe
  O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [17439454330749638309807948345579] C:\Program Files\XP Antivirus\xpa.exe
  O4 - HKCU\..\Run: [A00F344410.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_A00F344410.exe
  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
  O4 - HKCU\..\Run: [WinSpywareProtect] "C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe" /autorun
  O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
  O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
  O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O9 - Extra button: Alice ADSL - {0962BEEC-ABDA-4E1E-ADA4-4CB37F38290D} - https://portail.free.fr/ (file missing) (HKCU)
  O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
  O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
  O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
  O20 - Winlogon Notify: opnonoNH - opnonoNH.dll (file missing)
  O20 - Winlogon Notify: __c00133A - C:\WINNT\System32\__c00133A.dat (file missing)
  O20 - Winlogon Notify: __c0015D3F - C:\WINNT\System32\__c0015D3F.dat (file missing)
  O20 - Winlogon Notify: __c0017286 - C:\WINNT\System32\__c0017286.dat (file missing)
  O20 - Winlogon Notify: __c001D588 - C:\WINNT\System32\__c001D588.dat (file missing)
  O20 - Winlogon Notify: __c00273C2 - C:\WINNT\System32\__c00273C2.dat (file missing)
  O20 - Winlogon Notify: __c004CA40 - C:\WINNT\System32\__c004CA40.dat (file missing)
  O20 - Winlogon Notify: __c0086855 - C:\WINNT\System32\__c0086855.dat (file missing)
  O20 - Winlogon Notify: __c009920D - C:\WINNT\System32\__c009920D.dat
  O20 - Winlogon Notify: __c00B26B1 - C:\WINNT\System32\__c00B26B1.dat (file missing)
  O20 - Winlogon Notify: __c00B6804 - C:\WINNT\System32\__c00B6804.dat (file missing)
  O20 - Winlogon Notify: __c00B77DF - C:\WINNT\System32\__c00B77DF.dat (file missing)
  O20 - Winlogon Notify: __c00C7772 - C:\WINNT\System32\__c00C7772.dat (file missing)
  O20 - Winlogon Notify: __c00C8C17 - C:\WINNT\System32\__c00C8C17.dat (file missing)
  O20 - Winlogon Notify: __c00D7226 - C:\WINNT\System32\__c00D7226.dat (file missing)
  O20 - Winlogon Notify: __c00DF4B7 - C:\WINNT\System32\__c00DF4B7.dat (file missing)
  O20 - Winlogon Notify: __c00FDAC2 - C:\WINNT\System32\__c00FDAC2.dat (file missing)
  O22 - SharedTaskScheduler: frizzed - {ecc974ae-6ede-44a2-90da-93b996d8eaf8} - C:\WINNT\System32\blbpeoy.dll (file missing)
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
  O23 - Service: LXCRCustomerConnect - Unknown owner - C:\WINNT\System32\spool\DRIVERS\W32X86\3\\LXCRserv.exe
  O23 - Service: lxcr_device - - C:\WINNT\System32\lxcrcoms.exe
  O23 - Service: NMS Service (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
  O24 - Desktop Component 0: (no name) - file:///C:/Images/Dragon%20Ball/Dragon%20Ball%20Z/Dragon%20Ball%20Z%20-%20Calendrier%202007/Vegeta/veg_11.jpg
  
  0
  
  Réagir
2. johanna49
  
  merci pour ton aide voila le rapport
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 13:12:52, on 04/07/2008
  Platform: Windows 2000 SP2 (WinNT 5.00.2195)
  MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
  Boot mode: Normal
  
  Running processes:
  C:\WINNT\System32\smss.exe
  C:\WINNT\system32\winlogon.exe
  C:\WINNT\system32\services.exe
  C:\WINNT\system32\lsass.exe
  C:\WINNT\system32\svchost.exe
  C:\WINNT\system32\spoolsv.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\WINNT\System32\svchost.exe
  C:\WINNT\system32\regsvc.exe
  C:\WINNT\system32\MSTask.exe
  C:\WINNT\system32\stisvc.exe
  C:\WINNT\System32\WBEM\WinMgmt.exe
  C:\WINNT\System32\mspmspsv.exe
  C:\WINNT\Explorer.EXE
  C:\WINNT\System32\Promon.exe
  C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
  C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  C:\Program Files\Lexmark 2400 Series\ezprint.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
  C:\WINNT\loadqm.exe
  C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe
  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  C:\WINNT\System32\rundll32.exe
  C:\WINNT\System32\internat.exe
  C:\Program Files\SuperCopier\SuperCopier.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\WINNT\System32\lxcrcoms.exe
  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
  C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe
  C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\PROGRA~1\WINZIP\winzip32.exe
  C:\Documents and Settings\Administrateur\Local Settings\Temp\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
  O2 - BHO: (no name) - {4A3F62A9-AFEB-4543-AE4D-DC2442444E64} - C:\WINNT\System32\opnonoNH.dll (file missing)
  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
  O2 - BHO: (no name) - {B8301AF7-D00E-4EA4-87C1-5FF4644FBBA1} - C:\Program Files\Web Technologies\iebt.dll (file missing)
  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
  O2 - BHO: (no name) - {C22E8711-AB35-4261-B10C-11AAC1B61693} - C:\WINNT\System32\rqRhGWNh.dll (file missing)
  O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
  O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
  O3 - Toolbar: Internet Service - {85BDD81D-31FD-4A6B-A73C-3955B128D2EC} - C:\Program Files\Web Technologies\iebr.dll (file missing)
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
  O4 - HKLM\..\Run: [tourpath] regedit /s c:\winnt\tour.reg
  O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
  O4 - HKLM\..\Run: [Promon.exe] Promon.exe
  O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
  O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\NTFSCLUP.EXE
  O4 - HKLM\..\Run: [CSScheduleCheck] C:\CFGSAFE\SCHWIZEX.EXE -CHECK
  O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
  O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
  O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
  O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINNT\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
  O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
  O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
  O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
  O4 - HKLM\..\Run: [LoadQM] loadqm.exe
  O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"
  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  O4 - HKLM\..\Run: [2b2d157e] rundll32.exe "C:\WINNT\System32\uxdrchbd.dll",b
  O4 - HKCU\..\Run: [internat.exe] internat.exe
  O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [17439454330749638309807948345579] C:\Program Files\XP Antivirus\xpa.exe
  O4 - HKCU\..\Run: [A00F344410.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_A00F344410.exe
  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
  O4 - HKCU\..\Run: [WinSpywareProtect] "C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe" /autorun
  O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
  O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
  O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O9 - Extra button: Alice ADSL - {0962BEEC-ABDA-4E1E-ADA4-4CB37F38290D} - https://portail.free.fr/ (file missing) (HKCU)
  O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
  O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
  O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
  O20 - Winlogon Notify: opnonoNH - opnonoNH.dll (file missing)
  O20 - Winlogon Notify: __c00133A - C:\WINNT\System32\__c00133A.dat (file missing)
  O20 - Winlogon Notify: __c0015D3F - C:\WINNT\System32\__c0015D3F.dat (file missing)
  O20 - Winlogon Notify: __c0017286 - C:\WINNT\System32\__c0017286.dat (file missing)
  O20 - Winlogon Notify: __c001D588 - C:\WINNT\System32\__c001D588.dat (file missing)
  O20 - Winlogon Notify: __c00273C2 - C:\WINNT\System32\__c00273C2.dat (file missing)
  O20 - Winlogon Notify: __c004CA40 - C:\WINNT\System32\__c004CA40.dat (file missing)
  O20 - Winlogon Notify: __c0086855 - C:\WINNT\System32\__c0086855.dat (file missing)
  O20 - Winlogon Notify: __c009920D - C:\WINNT\System32\__c009920D.dat
  O20 - Winlogon Notify: __c00B26B1 - C:\WINNT\System32\__c00B26B1.dat (file missing)
  O20 - Winlogon Notify: __c00B6804 - C:\WINNT\System32\__c00B6804.dat (file missing)
  O20 - Winlogon Notify: __c00B77DF - C:\WINNT\System32\__c00B77DF.dat (file missing)
  O20 - Winlogon Notify: __c00C7772 - C:\WINNT\System32\__c00C7772.dat (file missing)
  O20 - Winlogon Notify: __c00C8C17 - C:\WINNT\System32\__c00C8C17.dat (file missing)
  O20 - Winlogon Notify: __c00D7226 - C:\WINNT\System32\__c00D7226.dat (file missing)
  O20 - Winlogon Notify: __c00DF4B7 - C:\WINNT\System32\__c00DF4B7.dat (file missing)
  O20 - Winlogon Notify: __c00FDAC2 - C:\WINNT\System32\__c00FDAC2.dat (file missing)
  O22 - SharedTaskScheduler: frizzed - {ecc974ae-6ede-44a2-90da-93b996d8eaf8} - C:\WINNT\System32\blbpeoy.dll (file missing)
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
  O23 - Service: LXCRCustomerConnect - Unknown owner - C:\WINNT\System32\spool\DRIVERS\W32X86\3\\LXCRserv.exe
  O23 - Service: lxcr_device - - C:\WINNT\System32\lxcrcoms.exe
  O23 - Service: NMS Service (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
  O24 - Desktop Component 0: (no name) - file:///C:/Images/Dragon%20Ball/Dragon%20Ball%20Z/Dragon%20Ball%20Z%20-%20Calendrier%202007/Vegeta/veg_11.jpg
  
  0
  
  Réagir

Infecté par win spyware protect

3 réponses

Discussions similaires

Newsletters