Kssam.exe

Question

Bonjour,
mon pc ralenti et m affiche des pages web sans mon consentement lol
je suis sous xp et firefox
le truc qui me gene le plus est dans le rapports hijackthis la ligne ou est mentionné Kssam.exe c un processus meme pas connu sur le net !!!
quelqu un peut t il me venir en aide 
avec mes rmerciements bien sur

voici le rapport

Logfile of HijackThis v1.98.2
Scan saved at 10:57:26, on 29/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\documents and settings\claude\local settings\application data\kssam.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Claude\Bureau\eden.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - HKCU\..\Run: [kssam] "c:\documents and settings\claude\local settings\application data\kssam.exe" kssam
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

Destrio5 · Answer

Salut,

Infection Navipromo.

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le bureau : 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 

- Double-clique sur Navilog1.exe afin de lancer l'installation

- Si le fix ne se lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le bureau

- Appuie sur F ou f  puis valide par Entrée

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

- Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix

- Patiente jusqu'au message : *** Analyse terminée le ..... ***

- Le scan fini, le bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse

- Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

ladeck · Answer

merci de la reponse rapide voici le rapport

Search Navipromo version 3.6.9 commencé le 29/11/2008 à 11:55:25,03

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Claude" 

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit
MessengerSkinner

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Claude\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Claude\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Claude\menudm~1\progra~1" *** 


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Claude\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 
HKEY_CURRENT_USER\Software\mc trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Claude\locals~1\applic~1" : 

kssam.exe trouvé !
kssam.dat trouvé !
kssam_nav.dat trouvé !
kssam_navps.dat trouvé !

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\ayadd.ini2 trouvé ! infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\wvvwa.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 29/11/2008 à 12:12:08,65 ***

Destrio5 · Answer

MessengerSkinner ---> Ne le réinstalle pas.

---> Relance Navilog1, fais l'option 2 et poste le rapport.

ladeck · Answer

voila voila

Clean Navipromo version 3.6.9 commencé le 29/11/2008 à 12:25:57,50

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Claude" 

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Claude\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Claude\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Claude\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Claude\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Claude\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Claude\locals~1\applic~1" * 


kssam.exe trouvé ! 
Copie kssam.exe réalisée avec succès !
kssam.exe supprimé !

kssam.dat trouvé ! 
Copie kssam.dat réalisée avec succès !
kssam.dat supprimé !

kssam_nav.dat trouvé ! 
Copie kssam_nav.dat réalisée avec succès !
kssam_nav.dat supprimé !

kssam_navps.dat trouvé ! 
Copie kssam_navps.dat réalisée avec succès !
kssam_navps.dat supprimé !

C:\WINDOWS\prefetch\kssam*.pf trouvé ! 
Copie C:\WINDOWS\prefetch\kssam*.pf réalisée avec succès !
C:\WINDOWS\prefetch\kssam*.pf supprimé !


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 29/11/2008 à 12:34:37,07 ***

Destrio5 · Answer

Bien, on va s'occuper de l'infection Vundo.

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Je te conseille vivement d'installer la Console de récupération.

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix\Combofix.txt

ladeck · Answer

voici le rapport ComboFix 08-11-28.03 - Claude 2008-11-29 14:34:00.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.490 [GMT 1:00] Lancé depuis: c:\documents and settings\Claude\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Conditions générales.url c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Confidentialité.url c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Désinstaller.lnk c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Website.url c:\windows\BMfb9107e3.txt c:\windows\BMfb9107e3.xml c:\windows\pskt.ini c:\windows\Readme.txt c:\windows\system32\_003347_.tmp.dll c:\windows\system32\_003348_.tmp.dll c:\windows\system32\_003349_.tmp.dll c:\windows\system32\_003350_.tmp.dll c:\windows\system32\_003355_.tmp.dll c:\windows\system32\_003356_.tmp.dll c:\windows\system32\_003357_.tmp.dll c:\windows\system32\_003358_.tmp.dll c:\windows\system32\_003359_.tmp.dll c:\windows\system32\_003360_.tmp.dll c:\windows\system32\_003361_.tmp.dll c:\windows\system32\_003362_.tmp.dll c:\windows\system32\_003363_.tmp.dll c:\windows\system32\_003364_.tmp.dll c:\windows\system32\_003366_.tmp.dll c:\windows\system32\_003367_.tmp.dll c:\windows\system32\_003369_.tmp.dll c:\windows\system32\_003370_.tmp.dll c:\windows\system32\_003371_.tmp.dll c:\windows\system32\_003373_.tmp.dll c:\windows\system32\_003376_.tmp.dll c:\windows\system32\_003377_.tmp.dll c:\windows\system32\_003379_.tmp.dll c:\windows\system32\_003380_.tmp.dll c:\windows\system32\_003381_.tmp.dll c:\windows\system32\_003382_.tmp.dll c:\windows\system32\_003383_.tmp.dll c:\windows\system32\_003384_.tmp.dll c:\windows\system32\_003386_.tmp.dll c:\windows\system32\_003387_.tmp.dll c:\windows\system32\_003388_.tmp.dll c:\windows\system32\_003389_.tmp.dll c:\windows\system32\_003390_.tmp.dll c:\windows\system32\_003391_.tmp.dll c:\windows\system32\_003392_.tmp.dll c:\windows\system32\_003393_.tmp.dll c:\windows\system32\_003394_.tmp.dll c:\windows\system32\_003396_.tmp.dll c:\windows\system32\_003397_.tmp.dll c:\windows\system32\_003398_.tmp.dll c:\windows\system32\_003399_.tmp.dll c:\windows\system32\_003400_.tmp.dll c:\windows\system32\_003402_.tmp.dll c:\windows\system32\_003403_.tmp.dll c:\windows\system32\_003405_.tmp.dll c:\windows\system32\_003406_.tmp.dll c:\windows\system32\_003407_.tmp.dll c:\windows\system32\_003408_.tmp.dll c:\windows\system32\_003410_.tmp.dll c:\windows\system32\_003413_.tmp.dll c:\windows\system32\_003414_.tmp.dll c:\windows\system32\_003418_.tmp.dll c:\windows\system32\_003419_.tmp.dll c:\windows\system32\_003421_.tmp.dll c:\windows\system32\_003423_.tmp.dll c:\windows\system32\_003424_.tmp.dll c:\windows\system32\_003426_.tmp.dll c:\windows\system32\_003427_.tmp.dll c:\windows\system32\_003428_.tmp.dll c:\windows\system32\_003429_.tmp.dll c:\windows\system32\_003432_.tmp.dll c:\windows\system32\_003433_.tmp.dll c:\windows\system32\_003434_.tmp.dll c:\windows\system32\_003435_.tmp.dll c:\windows\system32\_003436_.tmp.dll c:\windows\system32\_003441_.tmp.dll c:\windows\system32\_003443_.tmp.dll c:\windows\system32\ayadd.ini c:\windows\system32\ayadd.ini2 c:\windows\system32\Cache c:\windows\system32\mdm.exe c:\windows\system32\wvvwa.ini c:\windows\system32\wvvwa.ini2 . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_NPF -------\Service_NPF ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-28 au 2008-11-29 )))))))))))))))))))))))))))))))))))) . 2008-11-29 11:52 . 2008-11-29 12:34 d-------- c:\program files\Navilog1 2008-11-26 22:27 . 2008-11-26 22:27 1,393 --a------ c:\windows\imsins.BAK 2008-11-25 12:48 . 2008-11-25 12:48 d-------- c:\program files\Fichiers communs\Wise Installation Wizard 2008-11-25 12:18 . 2008-11-25 12:19 d-------- C:\Inetpub 2008-11-12 17:36 . 2008-11-12 17:36 d-------- c:\program files\MSXML 4.0 2008-11-11 19:10 . 2008-11-11 19:10 d-------- c:\program files\Fichiers communs\PCSuite 2008-11-11 19:07 . 2008-05-07 07:39 1,419,232 --a------ c:\windows\system32\wdfcoinstaller01005.dll 2008-11-11 19:07 . 2008-05-07 07:38 659,968 --a------ c:\windows\system32 mwcdcocls.dll 2008-11-11 19:07 . 2008-05-07 07:38 20,864 --a------ c:\windows\system32\drivers\ccdcmbo.sys 2008-11-11 19:07 . 2008-05-07 07:38 17,536 --a------ c:\windows\system32\drivers\ccdcmb.sys 2008-11-11 19:07 . 2008-05-07 07:38 8,064 --a------ c:\windows\system32\drivers\usbser_lowerfltj.sys 2008-11-11 19:07 . 2008-06-06 09:24 8,064 --a------ c:\windows\system32\drivers\usbser_lowerflt.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-28 16:31 --------- d-----w c:\documents and settings\Claude\Application Data\gtk-2.0 2008-11-28 11:22 --------- d-----w c:\documents and settings\Claude\Application Data\LimeWire 2008-11-26 08:38 --------- d-----w c:\program files\Fichiers communs\Adobe 2008-11-25 11:07 --------- d-----w c:\program files\Zylom Games 2008-11-25 11:07 --------- d-----w c:\program files\Generalia Software 2008-11-24 11:26 --------- d-----w c:\program files\Lavasoft 2008-11-24 06:26 90,112 ----a-w c:\windows\DUMP96e1.tmp 2008-11-11 18:10 --------- d-----w c:\program files\Fichiers communs\Nokia 2008-11-11 18:07 --------- d-----w c:\program files\Nokia 2008-11-11 18:02 --------- d-----w c:\documents and settings\All Users\Application Data\Installations 2008-11-11 16:16 --------- d-----w c:\documents and settings\Claude\Application Data\Nokia 2008-11-07 15:03 --------- d-----w c:\documents and settings\Claude\Application Data\AVG7 2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-19 14:53 --------- d-----w c:\program files\GIMP-2.0 2008-10-14 11:48 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite 2008-10-14 11:44 --------- d-----w c:\program files\PC Connectivity Solution 2008-10-14 11:44 --------- d-----w c:\program files\DIFX 2008-10-13 16:02 --------- d-----w c:\program files\Windows Live 2008-10-13 06:17 --------- d-----w c:\program files\OXXOGames 2008-10-12 18:00 --------- d-----w c:\program files\SFRWidget 2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Toolbar 2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Favorites 2008-10-12 14:19 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller 2008-10-12 14:07 --------- d-----w c:\program files\SDLL 2008-10-12 14:01 --------- d-----w c:\program files\Microsoft Works 2008-10-12 13:59 --------- d-----w c:\program files\Screenseven 2008-10-12 13:55 --------- d-----w c:\program files\Yahoo! 2008-10-12 13:39 --------- d-----w c:\program files\Power IE 2008-10-10 07:04 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft 2008-10-09 15:32 --------- d-----w c:\program files\iKlax Media 2008-10-09 11:03 --------- d--h--w c:\program files\InstallShield Installation Information 2008-10-09 11:03 --------- d-----w c:\program files\Micro Application 2008-10-07 10:47 --------- d-----w c:\documents and settings\All Users\Application Data\Nokia 2008-10-07 10:43 --------- d-----w c:\program files\MSXML 6.0 2008-10-07 10:28 --------- d-----w c:\documents and settings\Claude\Application Data\PC Suite 2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf 2008-03-06 15:48 88 --sh--r c:\windows\system32\EAE8E70877.sys 2008-03-06 16:37 3,140 --sha-w c:\windows\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-10-02 1124352] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 1249280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-12-03 344064] "IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024] "Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-03-04 606208] "DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248] "DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-01-27 86016] "dla"="c:\windows\system32\dla fswctrl.exe" [2005-05-31 122941] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360] "AVG7_Run"="c:\progra~1\Grisoft\AVG7\avgw.exe" [2008-02-11 219136] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-22 45056] Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-06-07 24576] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\IntelWireless] 2004-09-07 16:08 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "c:\Program Files\Grisoft\AVG7\avginet.exe"= "c:\Program Files\Grisoft\AVG7\avgamsvr.exe"= "c:\Program Files\Grisoft\AVG7\avgcc.exe"= "c:\Program Files\Grisoft\AVG7\avgemc.exe"= "c:\Program Files\WebEye\WebEye.exe"= "c:\Program Files\LimeWire\LimeWire.exe"= "c:\WINDOWS\system32\fxsclnt.exe"= "c:\Program Files\Veoh Networks\Veoh\VeohClient.exe"= "c:\WINDOWS\system32\rtcshare.exe"= "c:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "c:\Program Files\Windows Live\Messenger\livecall.exe"= "c:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"= "c:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe"= S3 MBAMCatchMe;MBAMCatchMe;\??\c:\program files\Malwarebytes' Anti-Malware\catchme.sys [] S3 PAC7311;VGA SoC PC-Camer@;c:\windows\system32\DRIVERS\PA707UCM.SYS [2005-09-16 150272] S3 SDVC05;USB SDVC05;c:\windows\system32\Drivers\SDVC05.sys [2006-05-28 18088] . Contenu du dossier 'Tâches planifiées' 2008-11-29 c:\windows\Tasks\A93E407B9185F4AF.job - c:\docume~1\claude\applic~1\flagrect\windowdatebait.exe [] 2005-06-11 c:\windows\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job - c:\windows\system32\OOBE\oobebaln.exe [2004-08-05 12:00] 2008-11-29 c:\windows\Tasks\User_Feed_Synchronization-{5C79FAFC-5AD7-47BD-882C-49C39D424FDA}.job - c:\windows\system32\msfeedssync.exe [2006-10-17 12:58] 2008-11-29 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20] . - - - - ORPHELINS SUPPRIMES - - - - Notify-dimsntfy - (no file) Notify-mljhefg - (no file) . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Claude\Application Data\Mozilla\Firefox\Profiles\68ic7th5.default\ FF -: plugin - c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer pzylomgamesplayer.dll FF -: plugin - c:\documents and settings\Claude\Application Data\Mozilla\plugins pPxPlay.dll FF -: plugin - c:\program files\Adobe\Acrobat 6.0\Reader\browser ppdf32.dll FF -: plugin - c:\program files\Veoh Networks\Veoh\Plugins oreg\NPVeohVersion.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-29 14:41:53 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(1348) c:\windows\system32\Ati2evxx.dll c:\program files\Intel\Wireless\Bin\LgNotify.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\program files\Intel\Wireless\Bin\WLKEEPER.exe c:\program files\Lavasoft\Ad-Aware\aawservice.exe c:\program files\Fichiers communs\logishrd\LVMVFM\LVPrcSrv.exe c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe c:\progra~1\Grisoft\AVG7\avgamsvr.exe c:\progra~1\Grisoft\AVG7\avgupsvc.exe c:\progra~1\Grisoft\AVG7\avgemc.exe c:\windows\system32\inetsrv\inetinfo.exe c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe c:\program files\Dell\NicConfigSvc\NicConfigSvc.exe c:\windows\system32\HPZipm12.exe c:\windows\system32\PSIService.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\system32 cpsvcs.exe c:\windows\system32\snmp.exe c:\windows\system32\PAStiSvc.exe c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe c:\windows\system32\ati2evxx.exe c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe c:\progra~1\Intel\Wireless\Bin\1XConfig.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe c:\program files\PC Connectivity Solution\Transports\NclToBTSrv.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe c:\program files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe . ************************************************************************** . Heure de fin: 2008-11-29 14:48:44 - La machine a redémarré ComboFix-quarantined-files.txt 2008-11-29 13:48:36 Avant-CF: 24 746 876 928 octets libres Après-CF: 24,646,938,624 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 289 --- E O F --- 2008-11-26 21:28:07

Destrio5 · Answer

---> Télécharge Lop S&D sur ton Bureau.
---> Double-clique dessus pour lancer l'installation.
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
---> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
---> Patiente jusqu'à la fin du scan.
---> Poste le rapport généré (C:\lopR.txt).

ladeck · Answer

merci merci de tant d attention surtout a cette heure matinale lol

--------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free :         Intel(R) Pentium(R) M processor 1.60GHz )
   BIOS : Default System BIOS
   USER : Claude ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:52 Go (Free:24 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [1] ( 01/12/2008| 8:40 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [08/04/2008|19:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [07/06/2005|22:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Jasc Software Inc
   [08/04/2008|19:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [07/06/2005|22:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [07/06/2005|22:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

   [20/03/2008|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [15/05/2006|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [11/02/2008|12:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
   [14/03/2008|09:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [04/02/2008|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
   [13/01/2007|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [11/02/2008|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [12/02/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [11/11/2008|19:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
   [07/06/2005|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [07/06/2005|22:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
   [27/06/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intenium
   [17/12/2007|07:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin Games
   [10/10/2008|08:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [28/02/2008|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
   [28/02/2008|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [17/09/2008|09:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [10/07/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [21/03/2008|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [14/10/2008|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [26/06/2008|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MonteCristo
   [07/10/2008|11:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
   [14/10/2008|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [19/08/2005|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [19/08/2004|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [02/12/2007|08:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [21/03/2008|07:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [21/02/2008|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [07/02/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [07/06/2005|22:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [23/01/2007|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [07/05/2007|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [03/04/2008|14:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
   [12/10/2008|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [01/09/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [26/11/2008|09:33] C:\DOCUME~1\Claude\APPLIC~1\Adobe
   [07/11/2008|16:03] C:\DOCUME~1\Claude\APPLIC~1\AVG7
   [04/02/2008|11:38] C:\DOCUME~1\Claude\APPLIC~1\Corel
   [10/06/2005|18:58] C:\DOCUME~1\Claude\APPLIC~1\CyberLink
   [15/01/2008|01:47] C:\DOCUME~1\Claude\APPLIC~1\Desktop Sidebar
   [11/12/2007|17:33] C:\DOCUME~1\Claude\APPLIC~1\DivX
   [10/09/2008|11:41] C:\DOCUME~1\Claude\APPLIC~1\Feedreader
   [12/02/2008|08:04] C:\DOCUME~1\Claude\APPLIC~1\FlagRect
   [20/09/2005|19:42] C:\DOCUME~1\Claude\APPLIC~1\Google
   [28/11/2008|17:31] C:\DOCUME~1\Claude\APPLIC~1\gtk-2.0
   [10/07/2005|17:45] C:\DOCUME~1\Claude\APPLIC~1\Help
   [19/02/2007|15:23] C:\DOCUME~1\Claude\APPLIC~1\HP
   [02/10/2007|08:41] C:\DOCUME~1\Claude\APPLIC~1\Identities
   [07/02/2008|21:58] C:\DOCUME~1\Claude\APPLIC~1\InstallShield
   [07/06/2005|22:04] C:\DOCUME~1\Claude\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\Claude\APPLIC~1\Jasc Software Inc
   [12/06/2005|13:18] C:\DOCUME~1\Claude\APPLIC~1\Leadertech
   [28/11/2008|12:22] C:\DOCUME~1\Claude\APPLIC~1\LimeWire
   [25/02/2008|08:13] C:\DOCUME~1\Claude\APPLIC~1\Macromedia
   [02/10/2007|08:15] C:\DOCUME~1\Claude\APPLIC~1\Media Player Classic
   [27/11/2008|13:46] C:\DOCUME~1\Claude\APPLIC~1\Microsoft
   [10/07/2005|17:51] C:\DOCUME~1\Claude\APPLIC~1\Microsoft Web Folders
   [10/10/2008|10:05] C:\DOCUME~1\Claude\APPLIC~1\Mozilla
   [10/02/2007|16:10] C:\DOCUME~1\Claude\APPLIC~1\MSNInstaller
   [24/08/2005|18:41] C:\DOCUME~1\Claude\APPLIC~1\Netscape
   [11/11/2008|17:16] C:\DOCUME~1\Claude\APPLIC~1\Nokia
   [07/10/2008|11:28] C:\DOCUME~1\Claude\APPLIC~1\PC Suite
   [17/06/2008|22:06] C:\DOCUME~1\Claude\APPLIC~1\Pirateville
   [12/05/2008|22:50] C:\DOCUME~1\Claude\APPLIC~1\Real
   [17/06/2008|21:49] C:\DOCUME~1\Claude\APPLIC~1\ScreenSeven
   [02/12/2007|08:30] C:\DOCUME~1\Claude\APPLIC~1\Skype
   [12/06/2005|13:18] C:\DOCUME~1\Claude\APPLIC~1\Sonic
   [02/09/2008|07:48] C:\DOCUME~1\Claude\APPLIC~1\SoundSpectrum
   [07/06/2005|22:02] C:\DOCUME~1\Claude\APPLIC~1\Sun
   [10/06/2005|14:20] C:\DOCUME~1\Claude\APPLIC~1\Symantec
   [11/06/2005|20:51] C:\DOCUME~1\Claude\APPLIC~1\Template
   [11/06/2005|21:00] C:\DOCUME~1\Claude\APPLIC~1\Toshiba
   [31/01/2008|20:41] C:\DOCUME~1\Claude\APPLIC~1\Ulead Systems
   [02/12/2007|08:41] C:\DOCUME~1\Claude\APPLIC~1\Viewpoint
   [01/10/2007|12:27] C:\DOCUME~1\Claude\APPLIC~1\vlc
   [17/10/2007|19:02] C:\DOCUME~1\Claude\APPLIC~1\Weflirt
   [27/08/2008|10:18] C:\DOCUME~1\Claude\APPLIC~1\Yahoo!

   [19/08/2004|13:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [07/06/2005|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Jasc Software Inc
   [19/08/2004|13:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [07/06/2005|22:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [07/06/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [07/06/2005|22:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [11/02/2008|08:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
   [11/02/2008|08:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [13/10/2008|07:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [15/06/2005|16:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [01/12/2008 07:50][--a------] C:\WINDOWS	asks\Vérifier les mises à jour de Windows Live Toolbar.job
   [01/12/2008 08:40][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{5C79FAFC-5AD7-47BD-882C-49C39D424FDA}.job
   [01/12/2008 08:00][--ah-----] C:\WINDOWS	asks\A93E407B9185F4AF.job
   [11/06/2005 21:45][--a------] C:\WINDOWS	asks\Rappel d'abonnement 1 auprès de l'ISP.job
   [01/12/2008 07:31][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 12:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   ( A93E407B9185F4AF.job )=( c:\docume~1\claude\applic~1\flagrect\windowdatebait.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [26/11/2008|09:36] C:\Program Files\Adobe
   [15/04/2008|19:02] C:\Program Files\Architecte 3D - Silver Advanced
   [07/06/2005|22:03] C:\Program Files\ATI Technologies
   [14/03/2008|15:50] C:\Program Files\Audacity
   [14/03/2008|09:05] C:\Program Files\Avira
   [03/12/2007|20:22] C:\Program Files\Babylon
   [20/03/2008|11:47] C:\Program Files\Bonjour
   [07/06/2005|22:07] C:\Program Files\Broadcom
   [28/02/2008|15:34] C:\Program Files\CCleaner
   [15/06/2005|17:45] C:\Program Files\Cegetel
   [25/02/2008|10:52] C:\Program Files\CONEXANT
   [04/02/2008|11:24] C:\Program Files\Corel
   [07/06/2005|22:08] C:\Program Files\CyberLink
   [25/02/2008|08:02] C:\Program Files\Dell
   [07/06/2005|22:17] C:\Program Files\Dell Inc
   [04/03/2008|11:15] C:\Program Files\Desktop Sidebar
   [14/10/2008|12:44] C:\Program Files\DIFX
   [04/03/2008|11:15] C:\Program Files\Digital Line Detect
   [23/06/2008|20:13] C:\Program Files\DivX
   [28/05/2006|20:23] C:\Program Files\DVC Media 5.1
   [07/05/2007|16:42] C:\Program Files\eMPIA
   [23/06/2008|20:12] C:\Program Files\eMule
   [29/11/2008|14:36] C:\Program Files\Fichiers communs
   [25/11/2008|12:07] C:\Program Files\Generalia Software
   [19/10/2008|15:53] C:\Program Files\GIMP-2.0
   [04/03/2008|11:23] C:\Program Files\Google
   [11/02/2008|08:47] C:\Program Files\Grisoft
   [25/02/2008|08:12] C:\Program Files\HP
   [09/10/2008|16:32] C:\Program Files\iKlax Media
   [09/10/2008|12:03] C:\Program Files\InstallShield Installation Information
   [07/06/2005|22:04] C:\Program Files\Intel
   [15/10/2008|19:42] C:\Program Files\Internet Explorer
   [04/03/2008|08:41] C:\Program Files\IZArc
   [07/06/2005|22:17] C:\Program Files\Jasc Software Inc
   [18/08/2008|18:24] C:\Program Files\Java
   [02/10/2007|08:12] C:\Program Files\K-Lite Codec Pack
   [24/11/2008|12:26] C:\Program Files\Lavasoft
   [28/04/2008|13:24] C:\Program Files\LimeWire
   [19/11/2007|17:36] C:\Program Files\Live-Prod
   [28/02/2008|09:19] C:\Program Files\Logitech
   [17/09/2008|09:09] C:\Program Files\ma-config.com
   [25/02/2008|08:14] C:\Program Files\Macromedia
   [17/09/2008|21:35] C:\Program Files\Messenger
   [14/09/2008|22:28] C:\Program Files\Messenger Plus! Live
   [09/10/2008|12:03] C:\Program Files\Micro Application
   [11/05/2007|17:10] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [10/04/2007|20:46] C:\Program Files\microsoft frontpage
   [01/05/2008|15:45] C:\Program Files\Microsoft Office
   [02/10/2007|08:41] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/04/2008|12:14] C:\Program Files\Microsoft Visual Studio
   [12/10/2008|15:01] C:\Program Files\Microsoft Works
   [01/04/2008|12:13] C:\Program Files\Microsoft.NET
   [17/12/2007|08:00] C:\Program Files\Modem Helper
   [17/09/2008|10:57] C:\Program Files\Movie Maker
   [01/12/2008|07:59] C:\Program Files\Mozilla Firefox
   [01/05/2008|15:45] C:\Program Files\MSECache
   [10/02/2007|16:02] C:\Program Files\MSN
   [19/08/2004|13:14] C:\Program Files\MSN Gaming Zone
   [12/11/2008|17:36] C:\Program Files\MSXML 4.0
   [07/10/2008|11:43] C:\Program Files\MSXML 6.0
   [29/11/2008|12:34] C:\Program Files\Navilog1
   [17/09/2008|10:57] C:\Program Files\NetMeeting
   [07/06/2005|22:05] C:\Program Files\NetWaiting
   [11/11/2008|19:07] C:\Program Files\Nokia
   [19/08/2004|13:15] C:\Program Files\Online Services
   [17/09/2008|10:57] C:\Program Files\Outlook Express
   [13/10/2008|07:17] C:\Program Files\OXXOGames
   [14/10/2008|12:44] C:\Program Files\PC Connectivity Solution
   [09/10/2007|07:51] C:\Program Files\PC VGA Camer@
   [24/08/2005|18:40] C:\Program Files\Photodex
   [24/08/2005|18:41] C:\Program Files\Photodex Presenter
   [02/12/2007|08:28] C:\Program Files\PhotoFiltre Studio
   [12/10/2008|14:39] C:\Program Files\Power IE
   [20/03/2008|10:15] C:\Program Files\QuickTime
   [07/06/2005|22:10] C:\Program Files\Real
   [21/08/2008|17:59] C:\Program Files\Realtek AC97
   [21/03/2008|07:54] C:\Program Files\RegCleaner
   [15/06/2005|17:46] C:\Program Files\SAGEM
   [12/10/2008|14:59] C:\Program Files\Screenseven
   [12/10/2008|15:07] C:\Program Files\SDLL
   [19/08/2004|13:16] C:\Program Files\Services en ligne
   [12/10/2008|19:00] C:\Program Files\SFRWidget
   [07/06/2005|21:47] C:\Program Files\Sigmatel
   [02/12/2007|08:30] C:\Program Files\Skype
   [23/01/2007|11:17] C:\Program Files\Sonic
   [02/09/2008|07:44] C:\Program Files\SoundSpectrum
   [21/03/2008|07:29] C:\Program Files\Spybot - Search & Destroy
   [20/03/2008|12:29] C:\Program Files\SWiSH v2.01
   [21/02/2008|08:05] C:\Program Files\Symantec
   [15/06/2005|17:01] C:\Program Files\SymNetDrv
   [21/08/2006|15:15] C:\Program Files\TLC-Edusoft
   [07/06/2005|22:07] C:\Program Files\Toshiba
   [19/05/2008|20:29] C:\Program Files\Veoh Networks
   [07/06/2005|22:10] C:\Program Files\Wanadoo
   [08/10/2007|18:40] C:\Program Files\WebEye
   [13/10/2008|17:02] C:\Program Files\Windows Live
   [12/10/2008|15:25] C:\Program Files\Windows Live Favorites
   [12/10/2008|15:25] C:\Program Files\Windows Live Toolbar
   [28/09/2007|08:08] C:\Program Files\Windows Media Connect 2
   [17/09/2008|10:57] C:\Program Files\Windows Media Player
   [17/09/2008|10:57] C:\Program Files\Windows NT
   [03/04/2008|14:41] C:\Program Files\WinZip
   [10/04/2007|20:46] C:\Program Files\xerox
   [12/10/2008|14:55] C:\Program Files\Yahoo!
   [25/11/2008|12:07] C:\Program Files\Zylom Games

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [26/11/2008|09:38] C:\Program Files\Fichiers communs\Adobe
   [17/12/2007|08:00] C:\Program Files\Fichiers communs\AOL
   [21/03/2008|07:24] C:\Program Files\Fichiers communs\Corel
   [01/04/2008|12:15] C:\Program Files\Fichiers communs\DESIGNER
   [31/03/2008|07:18] C:\Program Files\Fichiers communs\GTK
   [12/02/2007|09:58] C:\Program Files\Fichiers communs\Hewlett-Packard
   [12/02/2007|10:02] C:\Program Files\Fichiers communs\HP
   [07/06/2005|22:16] C:\Program Files\Fichiers communs\InstallShield
   [07/06/2005|22:16] C:\Program Files\Fichiers communs\Jasc Software Inc
   [07/06/2005|22:02] C:\Program Files\Fichiers communs\Java
   [04/05/2008|20:40] C:\Program Files\Fichiers communs\logishrd
   [25/02/2008|08:14] C:\Program Files\Fichiers communs\Macromedia
   [20/03/2008|08:45] C:\Program Files\Fichiers communs\Macrovision Shared
   [06/11/2008|09:24] C:\Program Files\Fichiers communs\Microsoft Shared
   [19/08/2004|13:16] C:\Program Files\Fichiers communs\MSSoap
   [11/11/2008|19:10] C:\Program Files\Fichiers communs\Nokia
   [07/06/2005|22:11] C:\Program Files\Fichiers communs\Nullsoft
   [01/04/2008|12:13] C:\Program Files\Fichiers communs\ODBC
   [09/10/2007|07:51] C:\Program Files\Fichiers communs\PCCamera
   [11/11/2008|19:10] C:\Program Files\Fichiers communs\PCSuite
   [12/05/2008|22:46] C:\Program Files\Fichiers communs\Real
   [19/08/2004|13:16] C:\Program Files\Fichiers communs\Services
   [01/10/2007|10:29] C:\Program Files\Fichiers communs\Sonic Shared
   [19/08/2004|13:10] C:\Program Files\Fichiers communs\SpeechEngines
   [21/02/2008|08:12] C:\Program Files\Fichiers communs\Symantec Shared
   [17/09/2008|10:57] C:\Program Files\Fichiers communs\System
   [31/01/2008|19:21] C:\Program Files\Fichiers communs\Ulead Systems
   [17/01/2008|23:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [25/11/2008|12:48] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [12/05/2008|22:46] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 69 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\Claude\APPLIC~1\flagrect
   C:\WINDOWS\Tasks\A93E407B9185F4AF.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-01 08:42:55
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 163
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Claude\Recent\_crack_.lnk


   [F:62][D:6]-> C:\DOCUME~1\Claude\LOCALS~1\Temp
   [F:45][D:0]-> C:\DOCUME~1\Claude\Cookies
   [F:172][D:4]-> C:\DOCUME~1\Claude\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 01/12/2008| 8:32 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 01/12/2008| 8:46 - Option : [1]

   --------------------\  Fin du rapport a  8:46:35

Destrio5 · Answer

---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).

ladeck · Answer

--------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free :         Intel(R) Pentium(R) M processor 1.60GHz )
   BIOS : Default System BIOS
   USER : Claude ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:52 Go (Free:24 Go)
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [2] ( 01/12/2008|14:41 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\WINDOWS\Tasks\A93E407B9185F4AF.job 
   Supprime! - C:\DOCUME~1\Claude\APPLIC~1\flagrect
 
   \\\\\\\\\\\\\\\ 

   Supprime! - C:\DOCUME~1\Claude\APPLIC~1\Viewpoint
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   \\\\\\\\\\\\\\\

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [08/04/2008|19:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [07/06/2005|22:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Jasc Software Inc
   [08/04/2008|19:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [07/06/2005|22:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [07/06/2005|22:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

   [20/03/2008|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [15/05/2006|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [11/02/2008|12:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg7
   [14/03/2008|09:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [04/02/2008|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Corel
   [13/01/2007|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [11/02/2008|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [12/02/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [11/11/2008|19:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
   [07/06/2005|22:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [07/06/2005|22:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
   [27/06/2008|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intenium
   [17/12/2007|07:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\iWin Games
   [10/10/2008|08:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [28/02/2008|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
   [28/02/2008|09:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [17/09/2008|09:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [10/07/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [21/03/2008|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [14/10/2008|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [26/06/2008|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MonteCristo
   [07/10/2008|11:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
   [14/10/2008|12:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [19/08/2005|19:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [19/08/2004|13:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [02/12/2007|08:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [21/03/2008|07:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [21/02/2008|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [07/02/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [23/01/2007|10:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [07/05/2007|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [03/04/2008|14:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
   [12/10/2008|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [01/09/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [26/11/2008|09:33] C:\DOCUME~1\Claude\APPLIC~1\Adobe
   [07/11/2008|16:03] C:\DOCUME~1\Claude\APPLIC~1\AVG7
   [04/02/2008|11:38] C:\DOCUME~1\Claude\APPLIC~1\Corel
   [10/06/2005|18:58] C:\DOCUME~1\Claude\APPLIC~1\CyberLink
   [15/01/2008|01:47] C:\DOCUME~1\Claude\APPLIC~1\Desktop Sidebar
   [11/12/2007|17:33] C:\DOCUME~1\Claude\APPLIC~1\DivX
   [10/09/2008|11:41] C:\DOCUME~1\Claude\APPLIC~1\Feedreader
   [20/09/2005|19:42] C:\DOCUME~1\Claude\APPLIC~1\Google
   [01/12/2008|13:29] C:\DOCUME~1\Claude\APPLIC~1\gtk-2.0
   [10/07/2005|17:45] C:\DOCUME~1\Claude\APPLIC~1\Help
   [19/02/2007|15:23] C:\DOCUME~1\Claude\APPLIC~1\HP
   [02/10/2007|08:41] C:\DOCUME~1\Claude\APPLIC~1\Identities
   [07/02/2008|21:58] C:\DOCUME~1\Claude\APPLIC~1\InstallShield
   [07/06/2005|22:04] C:\DOCUME~1\Claude\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\Claude\APPLIC~1\Jasc Software Inc
   [12/06/2005|13:18] C:\DOCUME~1\Claude\APPLIC~1\Leadertech
   [28/11/2008|12:22] C:\DOCUME~1\Claude\APPLIC~1\LimeWire
   [25/02/2008|08:13] C:\DOCUME~1\Claude\APPLIC~1\Macromedia
   [02/10/2007|08:15] C:\DOCUME~1\Claude\APPLIC~1\Media Player Classic
   [27/11/2008|13:46] C:\DOCUME~1\Claude\APPLIC~1\Microsoft
   [10/07/2005|17:51] C:\DOCUME~1\Claude\APPLIC~1\Microsoft Web Folders
   [10/10/2008|10:05] C:\DOCUME~1\Claude\APPLIC~1\Mozilla
   [10/02/2007|16:10] C:\DOCUME~1\Claude\APPLIC~1\MSNInstaller
   [24/08/2005|18:41] C:\DOCUME~1\Claude\APPLIC~1\Netscape
   [11/11/2008|17:16] C:\DOCUME~1\Claude\APPLIC~1\Nokia
   [07/10/2008|11:28] C:\DOCUME~1\Claude\APPLIC~1\PC Suite
   [17/06/2008|22:06] C:\DOCUME~1\Claude\APPLIC~1\Pirateville
   [12/05/2008|22:50] C:\DOCUME~1\Claude\APPLIC~1\Real
   [17/06/2008|21:49] C:\DOCUME~1\Claude\APPLIC~1\ScreenSeven
   [02/12/2007|08:30] C:\DOCUME~1\Claude\APPLIC~1\Skype
   [12/06/2005|13:18] C:\DOCUME~1\Claude\APPLIC~1\Sonic
   [02/09/2008|07:48] C:\DOCUME~1\Claude\APPLIC~1\SoundSpectrum
   [07/06/2005|22:02] C:\DOCUME~1\Claude\APPLIC~1\Sun
   [10/06/2005|14:20] C:\DOCUME~1\Claude\APPLIC~1\Symantec
   [11/06/2005|20:51] C:\DOCUME~1\Claude\APPLIC~1\Template
   [11/06/2005|21:00] C:\DOCUME~1\Claude\APPLIC~1\Toshiba
   [31/01/2008|20:41] C:\DOCUME~1\Claude\APPLIC~1\Ulead Systems
   [01/10/2007|12:27] C:\DOCUME~1\Claude\APPLIC~1\vlc
   [17/10/2007|19:02] C:\DOCUME~1\Claude\APPLIC~1\Weflirt
   [27/08/2008|10:18] C:\DOCUME~1\Claude\APPLIC~1\Yahoo!

   [19/08/2004|13:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [07/06/2005|22:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intel
   [07/06/2005|22:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Jasc Software Inc
   [19/08/2004|13:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [07/06/2005|22:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [07/06/2005|22:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [07/06/2005|22:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [11/02/2008|08:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
   [11/02/2008|08:45] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [13/10/2008|07:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [15/06/2005|16:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [01/12/2008 13:50][--a------] C:\WINDOWS	asks\Vérifier les mises à jour de Windows Live Toolbar.job
   [01/12/2008 14:40][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{5C79FAFC-5AD7-47BD-882C-49C39D424FDA}.job
   [11/06/2005 21:45][--a------] C:\WINDOWS	asks\Rappel d'abonnement 1 auprès de l'ISP.job
   [01/12/2008 07:31][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 12:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [26/11/2008|09:36] C:\Program Files\Adobe
   [15/04/2008|19:02] C:\Program Files\Architecte 3D - Silver Advanced
   [07/06/2005|22:03] C:\Program Files\ATI Technologies
   [14/03/2008|15:50] C:\Program Files\Audacity
   [14/03/2008|09:05] C:\Program Files\Avira
   [03/12/2007|20:22] C:\Program Files\Babylon
   [20/03/2008|11:47] C:\Program Files\Bonjour
   [07/06/2005|22:07] C:\Program Files\Broadcom
   [28/02/2008|15:34] C:\Program Files\CCleaner
   [15/06/2005|17:45] C:\Program Files\Cegetel
   [25/02/2008|10:52] C:\Program Files\CONEXANT
   [04/02/2008|11:24] C:\Program Files\Corel
   [07/06/2005|22:08] C:\Program Files\CyberLink
   [25/02/2008|08:02] C:\Program Files\Dell
   [07/06/2005|22:17] C:\Program Files\Dell Inc
   [04/03/2008|11:15] C:\Program Files\Desktop Sidebar
   [14/10/2008|12:44] C:\Program Files\DIFX
   [04/03/2008|11:15] C:\Program Files\Digital Line Detect
   [23/06/2008|20:13] C:\Program Files\DivX
   [28/05/2006|20:23] C:\Program Files\DVC Media 5.1
   [07/05/2007|16:42] C:\Program Files\eMPIA
   [23/06/2008|20:12] C:\Program Files\eMule
   [29/11/2008|14:36] C:\Program Files\Fichiers communs
   [25/11/2008|12:07] C:\Program Files\Generalia Software
   [19/10/2008|15:53] C:\Program Files\GIMP-2.0
   [04/03/2008|11:23] C:\Program Files\Google
   [11/02/2008|08:47] C:\Program Files\Grisoft
   [25/02/2008|08:12] C:\Program Files\HP
   [09/10/2008|16:32] C:\Program Files\iKlax Media
   [09/10/2008|12:03] C:\Program Files\InstallShield Installation Information
   [07/06/2005|22:04] C:\Program Files\Intel
   [15/10/2008|19:42] C:\Program Files\Internet Explorer
   [04/03/2008|08:41] C:\Program Files\IZArc
   [07/06/2005|22:17] C:\Program Files\Jasc Software Inc
   [18/08/2008|18:24] C:\Program Files\Java
   [02/10/2007|08:12] C:\Program Files\K-Lite Codec Pack
   [24/11/2008|12:26] C:\Program Files\Lavasoft
   [28/04/2008|13:24] C:\Program Files\LimeWire
   [19/11/2007|17:36] C:\Program Files\Live-Prod
   [28/02/2008|09:19] C:\Program Files\Logitech
   [17/09/2008|09:09] C:\Program Files\ma-config.com
   [25/02/2008|08:14] C:\Program Files\Macromedia
   [17/09/2008|21:35] C:\Program Files\Messenger
   [14/09/2008|22:28] C:\Program Files\Messenger Plus! Live
   [09/10/2008|12:03] C:\Program Files\Micro Application
   [11/05/2007|17:10] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [10/04/2007|20:46] C:\Program Files\microsoft frontpage
   [01/05/2008|15:45] C:\Program Files\Microsoft Office
   [02/10/2007|08:41] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/04/2008|12:14] C:\Program Files\Microsoft Visual Studio
   [12/10/2008|15:01] C:\Program Files\Microsoft Works
   [01/04/2008|12:13] C:\Program Files\Microsoft.NET
   [17/12/2007|08:00] C:\Program Files\Modem Helper
   [17/09/2008|10:57] C:\Program Files\Movie Maker
   [01/12/2008|09:17] C:\Program Files\Mozilla Firefox
   [01/05/2008|15:45] C:\Program Files\MSECache
   [10/02/2007|16:02] C:\Program Files\MSN
   [19/08/2004|13:14] C:\Program Files\MSN Gaming Zone
   [12/11/2008|17:36] C:\Program Files\MSXML 4.0
   [07/10/2008|11:43] C:\Program Files\MSXML 6.0
   [29/11/2008|12:34] C:\Program Files\Navilog1
   [17/09/2008|10:57] C:\Program Files\NetMeeting
   [07/06/2005|22:05] C:\Program Files\NetWaiting
   [11/11/2008|19:07] C:\Program Files\Nokia
   [19/08/2004|13:15] C:\Program Files\Online Services
   [17/09/2008|10:57] C:\Program Files\Outlook Express
   [13/10/2008|07:17] C:\Program Files\OXXOGames
   [14/10/2008|12:44] C:\Program Files\PC Connectivity Solution
   [09/10/2007|07:51] C:\Program Files\PC VGA Camer@
   [24/08/2005|18:40] C:\Program Files\Photodex
   [24/08/2005|18:41] C:\Program Files\Photodex Presenter
   [02/12/2007|08:28] C:\Program Files\PhotoFiltre Studio
   [12/10/2008|14:39] C:\Program Files\Power IE
   [20/03/2008|10:15] C:\Program Files\QuickTime
   [07/06/2005|22:10] C:\Program Files\Real
   [21/08/2008|17:59] C:\Program Files\Realtek AC97
   [21/03/2008|07:54] C:\Program Files\RegCleaner
   [15/06/2005|17:46] C:\Program Files\SAGEM
   [12/10/2008|14:59] C:\Program Files\Screenseven
   [12/10/2008|15:07] C:\Program Files\SDLL
   [19/08/2004|13:16] C:\Program Files\Services en ligne
   [12/10/2008|19:00] C:\Program Files\SFRWidget
   [07/06/2005|21:47] C:\Program Files\Sigmatel
   [02/12/2007|08:30] C:\Program Files\Skype
   [23/01/2007|11:17] C:\Program Files\Sonic
   [02/09/2008|07:44] C:\Program Files\SoundSpectrum
   [21/03/2008|07:29] C:\Program Files\Spybot - Search & Destroy
   [20/03/2008|12:29] C:\Program Files\SWiSH v2.01
   [21/02/2008|08:05] C:\Program Files\Symantec
   [15/06/2005|17:01] C:\Program Files\SymNetDrv
   [21/08/2006|15:15] C:\Program Files\TLC-Edusoft
   [07/06/2005|22:07] C:\Program Files\Toshiba
   [19/05/2008|20:29] C:\Program Files\Veoh Networks
   [07/06/2005|22:10] C:\Program Files\Wanadoo
   [08/10/2007|18:40] C:\Program Files\WebEye
   [13/10/2008|17:02] C:\Program Files\Windows Live
   [12/10/2008|15:25] C:\Program Files\Windows Live Favorites
   [12/10/2008|15:25] C:\Program Files\Windows Live Toolbar
   [28/09/2007|08:08] C:\Program Files\Windows Media Connect 2
   [17/09/2008|10:57] C:\Program Files\Windows Media Player
   [17/09/2008|10:57] C:\Program Files\Windows NT
   [03/04/2008|14:41] C:\Program Files\WinZip
   [10/04/2007|20:46] C:\Program Files\xerox
   [12/10/2008|14:55] C:\Program Files\Yahoo!
   [25/11/2008|12:07] C:\Program Files\Zylom Games

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [26/11/2008|09:38] C:\Program Files\Fichiers communs\Adobe
   [17/12/2007|08:00] C:\Program Files\Fichiers communs\AOL
   [21/03/2008|07:24] C:\Program Files\Fichiers communs\Corel
   [01/04/2008|12:15] C:\Program Files\Fichiers communs\DESIGNER
   [31/03/2008|07:18] C:\Program Files\Fichiers communs\GTK
   [12/02/2007|09:58] C:\Program Files\Fichiers communs\Hewlett-Packard
   [12/02/2007|10:02] C:\Program Files\Fichiers communs\HP
   [07/06/2005|22:16] C:\Program Files\Fichiers communs\InstallShield
   [07/06/2005|22:16] C:\Program Files\Fichiers communs\Jasc Software Inc
   [07/06/2005|22:02] C:\Program Files\Fichiers communs\Java
   [04/05/2008|20:40] C:\Program Files\Fichiers communs\logishrd
   [25/02/2008|08:14] C:\Program Files\Fichiers communs\Macromedia
   [20/03/2008|08:45] C:\Program Files\Fichiers communs\Macrovision Shared
   [06/11/2008|09:24] C:\Program Files\Fichiers communs\Microsoft Shared
   [19/08/2004|13:16] C:\Program Files\Fichiers communs\MSSoap
   [11/11/2008|19:10] C:\Program Files\Fichiers communs\Nokia
   [07/06/2005|22:11] C:\Program Files\Fichiers communs\Nullsoft
   [01/04/2008|12:13] C:\Program Files\Fichiers communs\ODBC
   [09/10/2007|07:51] C:\Program Files\Fichiers communs\PCCamera
   [11/11/2008|19:10] C:\Program Files\Fichiers communs\PCSuite
   [12/05/2008|22:46] C:\Program Files\Fichiers communs\Real
   [19/08/2004|13:16] C:\Program Files\Fichiers communs\Services
   [01/10/2007|10:29] C:\Program Files\Fichiers communs\Sonic Shared
   [19/08/2004|13:10] C:\Program Files\Fichiers communs\SpeechEngines
   [21/02/2008|08:12] C:\Program Files\Fichiers communs\Symantec Shared
   [17/09/2008|10:57] C:\Program Files\Fichiers communs\System
   [31/01/2008|19:21] C:\Program Files\Fichiers communs\Ulead Systems
   [17/01/2008|23:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [25/11/2008|12:48] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [12/05/2008|22:46] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 69 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-01 14:45:29
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 163
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Claude\Recent\_crack_.lnk


   [F:71][D:13]-> C:\DOCUME~1\Claude\LOCALS~1\Temp
   [F:46][D:0]-> C:\DOCUME~1\Claude\Cookies
   [F:573][D:4]-> C:\DOCUME~1\Claude\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 01/12/2008| 8:32 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 01/12/2008| 8:46 - Option : [1]
   3 - "C:\Lop SD\LopR_3.txt" - 01/12/2008|14:47 - Option : [2]

   --------------------\  Fin du rapport a 14:47:58

Destrio5 · Answer

---> Poste un nouveau rapport HijackThis.

ladeck · Answer

Logfile of HijackThis v1.98.2
Scan saved at 14:58:11, on 01/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Claude\Bureau\eden.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

Destrio5 · Answer

Le rapport n'est pas complet.

ladeck · Answer

Logfile of HijackThis v1.98.2
Scan saved at 15:00:12, on 01/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Claude\Bureau\eden.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

Destrio5 · Answer

En fait, si, il est complet, c'est juste que j'ai l'habitude de voir des lignes 023.

Tu n'as donc pas d'antivirus ?

ladeck · Answer

j ai antivir
que dois je faire alors?
stp

Destrio5 · Answer

C'est bizarre ton histoire.

Tu as la version anglaise d'Antivir ?

ladeck · Answer

j ai la version francaise d antivir mais je ne sais pas si il tourne en tache de fond
je viens de l ouvrir et il me dit qu il est activé
d habitude j ai un icone dans la barre en bas a droite
mais la je ne le vois pas

ladeck · Answer

j ai meme avg mais il ne tourne pas ensemble

C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

Destrio5 · Answer

1/

---> Désinstalle AVG7.

---> Réinstalle Antivir :
https://www.mediafire.com/?sharekey=1ab12433e284b403d2db6fb9a8902bda


2/

---> Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries sur ton Bureau :
* Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Clique sur Search For Updates.
* Sélectionne Update Using jucheck.exe puis clique sur Search.
* Autorise le processus à se connecter s'il le demande, clique sur Install et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Remove Older Versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur Ok, puis une deuxième fois sur Ok.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.
Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.


3/

---> Redémarre ton PC et poste un nouveau rapport HijackThis.

ladeck · Answer

rien pour la desinstalation d avg
suis obliger de le faire manuellement
rien dans le panneau de config
et pas de lien de desinstalation dasns les programmes

est ce que cela vas allez si je zappe le dossier manuellement dans programe files ???

Destrio5 · Answer

Pour désinstaller AVG :
http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe

ladeck · Answer

ben je vais te donner un autre soucis 
j ai lancer le lien pour desintaller avg et voici le rapport plus bas
le probleme c que je constate qu il reste un repertoire grisoft avec tous les fichiers avg sur mon disque dasn le rep program files

en plus je m apercois que j ai trois fichiers menu demarrer menu dumarrer et menu demarrer avec un carreau al aplce du premier e de demarer
j espere que je ne t embrouille pas trop et te remercie infiniment de ta gentillesse

ladeck · Answer

2008-12-01 14:21:25,921 MONPC Avg8Uninstall\Directories key failed to open (error: e0010013)
2008-12-01 14:21:25,937 MONPC AvgDir param empty.
2008-12-01 14:21:25,937 MONPC AvgDataDir param empty.
2008-12-01 14:21:28,109 MONPC AvgRemover runs in attempt number 1
2008-12-01 14:21:28,109 MONPC *****     Services     *****
2008-12-01 14:21:28,109 MONPC Processing service avg8emc
2008-12-01 14:21:28,125 MONPC Service avg8emc is not installed
2008-12-01 14:21:28,125 MONPC Service avg8emc RegCleanup
2008-12-01 14:21:28,125 MONPC Registry keys for service avg8emc are not present
2008-12-01 14:21:28,125 MONPC Processing service avgfws8
2008-12-01 14:21:28,125 MONPC Service avgfws8 is not installed
2008-12-01 14:21:28,125 MONPC Service avgfws8 RegCleanup
2008-12-01 14:21:28,125 MONPC Registry keys for service avgfws8 are not present
2008-12-01 14:21:28,125 MONPC Processing service avg8wd
2008-12-01 14:21:28,125 MONPC Service avg8wd is not installed
2008-12-01 14:21:28,125 MONPC Service avg8wd RegCleanup
2008-12-01 14:21:28,125 MONPC Registry keys for service avg8wd are not present
2008-12-01 14:21:28,125 MONPC Processing service AvgMfx86
2008-12-01 14:21:28,140 MONPC Service AvgMfx86 is not installed
2008-12-01 14:21:28,140 MONPC Service AvgMfx86 RegCleanup
2008-12-01 14:21:28,140 MONPC Registry keys for service AvgMfx86 are not present
2008-12-01 14:21:28,140 MONPC Processing service AvgMfx64
2008-12-01 14:21:28,140 MONPC Service AvgMfx64 is not installed
2008-12-01 14:21:28,140 MONPC Service AvgMfx64 RegCleanup
2008-12-01 14:21:28,140 MONPC Registry keys for service AvgMfx64 are not present
2008-12-01 14:21:28,140 MONPC Processing service AvgLdx86
2008-12-01 14:21:28,140 MONPC Service AvgLdx86 is not installed
2008-12-01 14:21:28,140 MONPC Service AvgLdx86 RegCleanup
2008-12-01 14:21:28,140 MONPC Registry keys for service AvgLdx86 are not present
2008-12-01 14:21:28,140 MONPC Processing service AvgLdx64
2008-12-01 14:21:28,140 MONPC Service AvgLdx64 is not installed
2008-12-01 14:21:28,140 MONPC Service AvgLdx64 RegCleanup
2008-12-01 14:21:28,140 MONPC Registry keys for service AvgLdx64 are not present
2008-12-01 14:21:28,140 MONPC Processing service AvgTdiX
2008-12-01 14:21:28,156 MONPC Service AvgTdiX is not installed
2008-12-01 14:21:28,156 MONPC Service AvgTdiX RegCleanup
2008-12-01 14:21:28,156 MONPC Registry keys for service AvgTdiX are not present
2008-12-01 14:21:28,156 MONPC Processing service AvgTdiA
2008-12-01 14:21:28,156 MONPC Service AvgTdiA is not installed
2008-12-01 14:21:28,156 MONPC Service AvgTdiA RegCleanup
2008-12-01 14:21:28,156 MONPC Registry keys for service AvgTdiA are not present
2008-12-01 14:21:28,156 MONPC Processing service AvgWFPx
2008-12-01 14:21:28,156 MONPC Service AvgWFPx is not installed
2008-12-01 14:21:28,156 MONPC Service AvgWFPx RegCleanup
2008-12-01 14:21:28,171 MONPC Registry keys for service AvgWFPx are not present
2008-12-01 14:21:28,171 MONPC Processing service AvgWFPa
2008-12-01 14:21:28,171 MONPC Service AvgWFPa is not installed
2008-12-01 14:21:28,171 MONPC Service AvgWFPa RegCleanup
2008-12-01 14:21:28,171 MONPC Registry keys for service AvgWFPa are not present
2008-12-01 14:21:28,171 MONPC Processing service AvgRkx86
2008-12-01 14:21:28,171 MONPC Service AvgRkx86 is not installed
2008-12-01 14:21:28,171 MONPC Service AvgRkx86 RegCleanup
2008-12-01 14:21:28,171 MONPC Registry keys for service AvgRkx86 are not present
2008-12-01 14:21:28,171 MONPC *****     Registry keys and values     *****
2008-12-01 14:21:28,203 MONPC Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2008-12-01 14:21:28,203 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2008-12-01 14:21:28,203 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2008-12-01 14:21:28,203 MONPC Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2008-12-01 14:21:28,203 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2008-12-01 14:21:28,234 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2008-12-01 14:21:28,234 MONPC Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2008-12-01 14:21:28,234 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2008-12-01 14:21:28,234 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2008-12-01 14:21:28,234 MONPC Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2008-12-01 14:21:28,265 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2008-12-01 14:21:28,265 MONPC Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2008-12-01 14:21:28,265 MONPC Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2008-12-01 14:21:28,296 MONPC Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2008-12-01 14:21:28,296 MONPC Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2008-12-01 14:21:28,343 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2008-12-01 14:21:28,343 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
2008-12-01 14:21:28,343 MONPC Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2008-12-01 14:21:28,375 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2008-12-01 14:21:28,375 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2008-12-01 14:21:28,390 MONPC Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2008-12-01 14:21:28,390 MONPC Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2008-12-01 14:21:28,390 MONPC Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified
2008-12-01 14:21:28,390 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:21:28,390 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:21:28,390 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:21:28,406 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:21:28,406 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:21:28,406 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:21:28,406 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:21:28,406 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:21:28,421 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:21:28,421 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:21:28,421 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2008-12-01 14:21:28,421 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2008-12-01 14:21:28,421 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2008-12-01 14:21:28,437 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2008-12-01 14:21:28,437 MONPC Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2008-12-01 14:21:28,437 MONPC Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2008-12-01 14:21:28,437 MONPC Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2008-12-01 14:21:28,437 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2008-12-01 14:21:28,453 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2008-12-01 14:21:28,453 MONPC Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2008-12-01 14:21:28,453 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2008-12-01 14:21:28,453 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2008-12-01 14:21:28,453 MONPC Processing registry SOFTWARE\Classes\AvgDiagFile
2008-12-01 14:21:28,453 MONPC Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2008-12-01 14:21:28,453 MONPC Processing registry SOFTWARE\Classes\AvgDiagFile
2008-12-01 14:21:28,453 MONPC Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2008-12-01 14:21:28,468 MONPC Key SOFTWARE\Classes\AvgDiagFile not found
2008-12-01 14:21:28,468 MONPC Processing registry SOFTWARE\Classes\.avgdi
2008-12-01 14:21:28,468 MONPC Key SOFTWARE\Classes\.avgdi ForceRemove
2008-12-01 14:21:28,468 MONPC Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:21:28,468 MONPC Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:21:28,468 MONPC Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:21:28,468 MONPC Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:21:28,484 MONPC Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:21:28,484 MONPC Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:21:28,484 MONPC Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:21:28,484 MONPC Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:21:28,484 MONPC Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:21:28,484 MONPC Processing registry SOFTWARE\AVG\Clients
2008-12-01 14:21:28,500 MONPC Key SOFTWARE\AVG\Clients ForceRemove
2008-12-01 14:21:28,500 MONPC Key SOFTWARE\AVG\Clients not found
2008-12-01 14:21:28,500 MONPC Processing registry SOFTWARE\AVG\AVG8
2008-12-01 14:21:28,500 MONPC Key SOFTWARE\AVG\AVG8 ForceRemove
2008-12-01 14:21:28,500 MONPC Key SOFTWARE\AVG\AVG8 not found
2008-12-01 14:21:28,500 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:21:28,500 MONPC Value SOFTWARE\AVG:DumpType Remove
2008-12-01 14:21:28,515 MONPC Value SOFTWARE\AVG:DumpType not present - Key not found
2008-12-01 14:21:28,515 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:21:28,515 MONPC Key SOFTWARE\AVG Remove
2008-12-01 14:21:28,515 MONPC Key SOFTWARE\AVG not found
2008-12-01 14:21:28,515 MONPC Processing registry SOFTWARE\AVG\AVG8
2008-12-01 14:21:28,515 MONPC Key SOFTWARE\AVG\AVG8 ForceRemove
2008-12-01 14:21:28,515 MONPC Key SOFTWARE\AVG\AVG8 not found
2008-12-01 14:21:28,515 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:21:28,531 MONPC Key SOFTWARE\AVG Remove
2008-12-01 14:21:28,531 MONPC Key SOFTWARE\AVG not found
2008-12-01 14:21:28,531 MONPC Processing registry aAvgAPI.AvgBro
2008-12-01 14:21:28,531 MONPC Key aAvgAPI.AvgBro ForceRemove
2008-12-01 14:21:28,531 MONPC Key aAvgAPI.AvgBro not found
2008-12-01 14:21:28,531 MONPC Processing registry AVG.Office
2008-12-01 14:21:28,531 MONPC Key AVG.Office ForceRemove
2008-12-01 14:21:28,531 MONPC Processing registry AVG.Office.8
2008-12-01 14:21:28,531 MONPC Key AVG.Office.8 ForceRemove
2008-12-01 14:21:28,531 MONPC Key AVG.Office.8 not found
2008-12-01 14:21:28,546 MONPC Processing registry avgtoolbar.AVGTOOLBAR
2008-12-01 14:21:28,546 MONPC Key avgtoolbar.AVGTOOLBAR ForceRemove
2008-12-01 14:21:28,546 MONPC Key avgtoolbar.AVGTOOLBAR not found
2008-12-01 14:21:28,546 MONPC Processing registry avgtoolbar.AVGTOOLBARMenu Button
2008-12-01 14:21:28,546 MONPC Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2008-12-01 14:21:28,546 MONPC Key avgtoolbar.AVGTOOLBARMenu Button not found
2008-12-01 14:21:28,546 MONPC Processing registry avgtoolbar.AVGTOOLBARToggle Button
2008-12-01 14:21:28,546 MONPC Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2008-12-01 14:21:28,562 MONPC Key avgtoolbar.AVGTOOLBARToggle Button not found
2008-12-01 14:21:28,562 MONPC Processing registry LinkScannerIE.NavFilter
2008-12-01 14:21:28,562 MONPC Key LinkScannerIE.NavFilter ForceRemove
2008-12-01 14:21:28,562 MONPC Key LinkScannerIE.NavFilter not found
2008-12-01 14:21:28,562 MONPC Processing registry LinkScannerIE.NavFilter.1
2008-12-01 14:21:28,562 MONPC Key LinkScannerIE.NavFilter.1 ForceRemove
2008-12-01 14:21:28,562 MONPC Key LinkScannerIE.NavFilter.1 not found
2008-12-01 14:21:28,562 MONPC Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2008-12-01 14:21:28,578 MONPC Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2008-12-01 14:21:28,578 MONPC Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2008-12-01 14:21:28,578 MONPC Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2008-12-01 14:21:28,578 MONPC Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2008-12-01 14:21:28,578 MONPC Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2008-12-01 14:21:28,578 MONPC Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2008-12-01 14:21:28,578 MONPC Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2008-12-01 14:21:28,593 MONPC Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2008-12-01 14:21:28,593 MONPC Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2008-12-01 14:21:28,593 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2008-12-01 14:21:28,609 MONPC Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2008-12-01 14:21:28,609 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2008-12-01 14:21:28,609 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2008-12-01 14:21:28,609 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2008-12-01 14:21:28,625 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2008-12-01 14:21:28,625 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2008-12-01 14:21:28,625 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2008-12-01 14:21:28,640 MONPC Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2008-12-01 14:21:28,640 MONPC Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2008-12-01 14:21:28,640 MONPC Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2008-12-01 14:21:28,640 MONPC Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2008-12-01 14:21:28,640 MONPC Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2008-12-01 14:21:28,640 MONPC Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2008-12-01 14:21:28,640 MONPC Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2008-12-01 14:21:28,656 MONPC Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2008-12-01 14:21:28,656 MONPC Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2008-12-01 14:21:28,656 MONPC Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2008-12-01 14:21:28,656 MONPC Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2008-12-01 14:21:28,656 MONPC Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2008-12-01 14:21:28,656 MONPC Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2008-12-01 14:21:28,656 MONPC Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2008-12-01 14:21:28,671 MONPC Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2008-12-01 14:21:28,671 MONPC Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2008-12-01 14:21:28,671 MONPC Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2008-12-01 14:21:28,671 MONPC Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2008-12-01 14:21:28,687 MONPC *****     Files and folders     *****
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 0
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 1
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 2
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 3
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 4
2008-12-01 14:21:28,687 MONPC Missing ParentDir path for fileItem number 5
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 6
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 7
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 8
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 9
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 10
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 11
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 12
2008-12-01 14:21:28,703 MONPC Missing ParentDir path for fileItem number 13
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 14
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 15
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 16
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 17
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 18
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 19
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 20
2008-12-01 14:21:28,718 MONPC Missing ParentDir path for fileItem number 21
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 22
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 23
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 24
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 25
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 26
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 27
2008-12-01 14:21:28,734 MONPC Missing ParentDir path for fileItem number 28
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 29
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 30
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 31
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 32
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 33
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 34
2008-12-01 14:21:28,750 MONPC Missing ParentDir path for fileItem number 35
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 36
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 37
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 38
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 39
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 40
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 41
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 42
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 43
2008-12-01 14:21:28,765 MONPC Missing ParentDir path for fileItem number 44
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 45
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 46
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 47
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 48
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 49
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 50
2008-12-01 14:21:28,781 MONPC Missing ParentDir path for fileItem number 51
2008-12-01 14:21:28,796 MONPC Missing ParentDir path for fileItem number 52
2008-12-01 14:21:28,796 MONPC Processing item C:\Documents and Settings\Claude\Application Data\AVGTOOLBAR
2008-12-01 14:21:28,796 MONPC Directory C:\Documents and Settings\Claude\Application Data\AVGTOOLBAR not found
2008-12-01 14:21:28,796 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:28,796 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:28,796 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:28,921 MONPC File C:\WINDOWS\System32\Drivers\avgmfx86.sys deleted
2008-12-01 14:21:28,937 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:28,937 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:29,093 MONPC File C:\WINDOWS\System32\Drivers\avgtdi.sys deleted
2008-12-01 14:21:29,093 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:21:29,093 MONPC Processing item C:\WINDOWS\System32\Drivers\avg
2008-12-01 14:21:29,093 MONPC Directory C:\WINDOWS\System32\Drivers\avg not found
2008-12-01 14:21:29,093 MONPC Processing item C:\WINDOWS\System32
2008-12-01 14:21:29,093 MONPC Processing item C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg 8.0
2008-12-01 14:21:29,093 MONPC Directory C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg 8.0 not found
2008-12-01 14:21:29,093 MONPC Processing item C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg free 8.0
2008-12-01 14:21:29,093 MONPC Directory C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg free 8.0 not found
2008-12-01 14:21:29,093 MONPC Processing item C:\Documents and Settings\All Users\Bureau\avg 8.0.lnk
2008-12-01 14:21:29,093 MONPC File C:\Documents and Settings\All Users\Bureau\avg 8.0.lnk not found
2008-12-01 14:21:29,093 MONPC Processing item C:\Documents and Settings\All Users\Bureau\avg free 8.0.lnk
2008-12-01 14:21:29,093 MONPC File C:\Documents and Settings\All Users\Bureau\avg free 8.0.lnk not found
2008-12-01 14:21:29,109 MONPC Processing item C:\Program Files\AVG
2008-12-01 14:21:29,109 MONPC Directory C:\Program Files\AVG not found
2008-12-01 14:21:29,109 MONPC *****     Avg Fw NDIS driver     *****
2008-12-01 14:21:32,265 MONPC FW NDIS driver not present
2008-12-01 14:22:11,140 MONPC Avg8Uninstall\Directories key failed to open (error: e0010013)
2008-12-01 14:22:11,140 MONPC AvgDir param empty.
2008-12-01 14:22:11,156 MONPC AvgDataDir param empty.
2008-12-01 14:22:13,781 MONPC AvgRemover runs in attempt number 1
2008-12-01 14:22:13,796 MONPC *****     Services     *****
2008-12-01 14:22:13,796 MONPC Processing service avg8emc
2008-12-01 14:22:13,796 MONPC Service avg8emc is not installed
2008-12-01 14:22:13,796 MONPC Service avg8emc RegCleanup
2008-12-01 14:22:13,796 MONPC Registry keys for service avg8emc are not present
2008-12-01 14:22:13,796 MONPC Processing service avgfws8
2008-12-01 14:22:13,812 MONPC Service avgfws8 is not installed
2008-12-01 14:22:13,812 MONPC Service avgfws8 RegCleanup
2008-12-01 14:22:13,812 MONPC Registry keys for service avgfws8 are not present
2008-12-01 14:22:13,812 MONPC Processing service avg8wd
2008-12-01 14:22:13,812 MONPC Service avg8wd is not installed
2008-12-01 14:22:13,812 MONPC Service avg8wd RegCleanup
2008-12-01 14:22:13,812 MONPC Registry keys for service avg8wd are not present
2008-12-01 14:22:13,812 MONPC Processing service AvgMfx86
2008-12-01 14:22:13,812 MONPC Service AvgMfx86 is not installed
2008-12-01 14:22:13,812 MONPC Service AvgMfx86 RegCleanup
2008-12-01 14:22:13,812 MONPC Registry keys for service AvgMfx86 are not present
2008-12-01 14:22:13,812 MONPC Processing service AvgMfx64
2008-12-01 14:22:13,812 MONPC Service AvgMfx64 is not installed
2008-12-01 14:22:13,812 MONPC Service AvgMfx64 RegCleanup
2008-12-01 14:22:13,812 MONPC Registry keys for service AvgMfx64 are not present
2008-12-01 14:22:13,812 MONPC Processing service AvgLdx86
2008-12-01 14:22:13,828 MONPC Service AvgLdx86 is not installed
2008-12-01 14:22:13,828 MONPC Service AvgLdx86 RegCleanup
2008-12-01 14:22:13,828 MONPC Registry keys for service AvgLdx86 are not present
2008-12-01 14:22:13,828 MONPC Processing service AvgLdx64
2008-12-01 14:22:13,828 MONPC Service AvgLdx64 is not installed
2008-12-01 14:22:13,828 MONPC Service AvgLdx64 RegCleanup
2008-12-01 14:22:13,828 MONPC Registry keys for service AvgLdx64 are not present
2008-12-01 14:22:13,828 MONPC Processing service AvgTdiX
2008-12-01 14:22:13,828 MONPC Service AvgTdiX is not installed
2008-12-01 14:22:13,828 MONPC Service AvgTdiX RegCleanup
2008-12-01 14:22:13,828 MONPC Registry keys for service AvgTdiX are not present
2008-12-01 14:22:13,828 MONPC Processing service AvgTdiA
2008-12-01 14:22:13,828 MONPC Service AvgTdiA is not installed
2008-12-01 14:22:13,828 MONPC Service AvgTdiA RegCleanup
2008-12-01 14:22:13,828 MONPC Registry keys for service AvgTdiA are not present
2008-12-01 14:22:13,828 MONPC Processing service AvgWFPx
2008-12-01 14:22:13,828 MONPC Service AvgWFPx is not installed
2008-12-01 14:22:13,828 MONPC Service AvgWFPx RegCleanup
2008-12-01 14:22:13,828 MONPC Registry keys for service AvgWFPx are not present
2008-12-01 14:22:13,828 MONPC Processing service AvgWFPa
2008-12-01 14:22:13,828 MONPC Service AvgWFPa is not installed
2008-12-01 14:22:13,828 MONPC Service AvgWFPa RegCleanup
2008-12-01 14:22:13,843 MONPC Registry keys for service AvgWFPa are not present
2008-12-01 14:22:13,843 MONPC Processing service AvgRkx86
2008-12-01 14:22:13,843 MONPC Service AvgRkx86 is not installed
2008-12-01 14:22:13,843 MONPC Service AvgRkx86 RegCleanup
2008-12-01 14:22:13,843 MONPC Registry keys for service AvgRkx86 are not present
2008-12-01 14:22:13,843 MONPC *****     Registry keys and values     *****
2008-12-01 14:22:13,843 MONPC Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2008-12-01 14:22:13,843 MONPC Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2008-12-01 14:22:13,843 MONPC Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2008-12-01 14:22:13,843 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2008-12-01 14:22:13,843 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2008-12-01 14:22:13,843 MONPC Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2008-12-01 14:22:13,843 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2008-12-01 14:22:13,843 MONPC Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
2008-12-01 14:22:13,843 MONPC Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2008-12-01 14:22:13,843 MONPC Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2008-12-01 14:22:13,843 MONPC Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2008-12-01 14:22:13,843 MONPC Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
2008-12-01 14:22:13,843 MONPC Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2008-12-01 14:22:13,843 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2008-12-01 14:22:13,859 MONPC Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2008-12-01 14:22:13,859 MONPC Processing registry SOFTWARE\Classes\AvgDiagFile
2008-12-01 14:22:13,859 MONPC Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\AvgDiagFile not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\Classes\AvgDiagFile
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\AvgDiagFile not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\Classes\.avgdi
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\.avgdi ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\.avgdi not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\AVG\Clients
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\Clients ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\Clients not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\AVG\AVG8
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\AVG8 ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\AVG8 not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:22:13,875 MONPC Value SOFTWARE\AVG:DumpType Remove
2008-12-01 14:22:13,875 MONPC Value SOFTWARE\AVG:DumpType not present - Key not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG Remove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG not found
2008-12-01 14:22:13,875 MONPC Processing registry SOFTWARE\AVG\AVG8
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\AVG8 ForceRemove
2008-12-01 14:22:13,875 MONPC Key SOFTWARE\AVG\AVG8 not found
2008-12-01 14:22:13,968 MONPC Processing registry SOFTWARE\AVG
2008-12-01 14:22:13,968 MONPC Key SOFTWARE\AVG Remove
2008-12-01 14:22:13,984 MONPC Key SOFTWARE\AVG not found
2008-12-01 14:22:13,984 MONPC Processing registry aAvgAPI.AvgBro
2008-12-01 14:22:13,984 MONPC Key aAvgAPI.AvgBro ForceRemove
2008-12-01 14:22:13,984 MONPC Key aAvgAPI.AvgBro not found
2008-12-01 14:22:13,984 MONPC Processing registry AVG.Office
2008-12-01 14:22:13,984 MONPC Key AVG.Office ForceRemove
2008-12-01 14:22:13,984 MONPC Key AVG.Office not found
2008-12-01 14:22:13,984 MONPC Processing registry AVG.Office.8
2008-12-01 14:22:13,984 MONPC Key AVG.Office.8 ForceRemove
2008-12-01 14:22:13,984 MONPC Key AVG.Office.8 not found
2008-12-01 14:22:13,984 MONPC Processing registry avgtoolbar.AVGTOOLBAR
2008-12-01 14:22:13,984 MONPC Key avgtoolbar.AVGTOOLBAR ForceRemove
2008-12-01 14:22:13,984 MONPC Key avgtoolbar.AVGTOOLBAR not found
2008-12-01 14:22:13,984 MONPC Processing registry avgtoolbar.AVGTOOLBARMenu Button
2008-12-01 14:22:13,984 MONPC Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2008-12-01 14:22:13,984 MONPC Key avgtoolbar.AVGTOOLBARMenu Button not found
2008-12-01 14:22:13,984 MONPC Processing registry avgtoolbar.AVGTOOLBARToggle Button
2008-12-01 14:22:13,984 MONPC Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2008-12-01 14:22:14,000 MONPC Key avgtoolbar.AVGTOOLBARToggle Button not found
2008-12-01 14:22:14,000 MONPC Processing registry LinkScannerIE.NavFilter
2008-12-01 14:22:14,000 MONPC Key LinkScannerIE.NavFilter ForceRemove
2008-12-01 14:22:14,000 MONPC Key LinkScannerIE.NavFilter not found
2008-12-01 14:22:14,000 MONPC Processing registry LinkScannerIE.NavFilter.1
2008-12-01 14:22:14,000 MONPC Key LinkScannerIE.NavFilter.1 ForceRemove
2008-12-01 14:22:14,000 MONPC Key LinkScannerIE.NavFilter.1 not found
2008-12-01 14:22:14,000 MONPC Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2008-12-01 14:22:14,000 MONPC Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2008-12-01 14:22:14,000 MONPC Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2008-12-01 14:22:14,000 MONPC Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2008-12-01 14:22:14,000 MONPC Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2008-12-01 14:22:14,000 MONPC Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2008-12-01 14:22:14,000 MONPC Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2008-12-01 14:22:14,000 MONPC Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2008-12-01 14:22:14,000 MONPC Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2008-12-01 14:22:14,000 MONPC Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2008-12-01 14:22:14,000 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2008-12-01 14:22:14,000 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2008-12-01 14:22:14,000 MONPC Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2008-12-01 14:22:14,000 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2008-12-01 14:22:14,015 MONPC Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2008-12-01 14:22:14,015 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2008-12-01 14:22:14,015 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2008-12-01 14:22:14,015 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2008-12-01 14:22:14,015 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2008-12-01 14:22:14,015 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2008-12-01 14:22:14,015 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2008-12-01 14:22:14,015 MONPC Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2008-12-01 14:22:14,015 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2008-12-01 14:22:14,031 MONPC Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2008-12-01 14:22:14,031 MONPC Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2008-12-01 14:22:14,031 MONPC Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2008-12-01 14:22:14,031 MONPC Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2008-12-01 14:22:14,031 MONPC Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2008-12-01 14:22:14,031 MONPC Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2008-12-01 14:22:14,031 MONPC Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2008-12-01 14:22:14,031 MONPC Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2008-12-01 14:22:14,031 MONPC Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2008-12-01 14:22:14,031 MONPC Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2008-12-01 14:22:14,031 MONPC Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2008-12-01 14:22:14,031 MONPC Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2008-12-01 14:22:14,031 MONPC Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2008-12-01 14:22:14,046 MONPC Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2008-12-01 14:22:14,046 MONPC Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2008-12-01 14:22:14,046 MONPC Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2008-12-01 14:22:14,046 MONPC Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2008-12-01 14:22:14,046 MONPC Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2008-12-01 14:22:14,046 MONPC Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2008-12-01 14:22:14,046 MONPC *****     Files and folders     *****
2008-12-01 14:22:14,046 MONPC Missing ParentDir path for fileItem number 0
2008-12-01 14:22:14,046 MONPC Missing ParentDir path for fileItem number 1
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 2
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 3
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 4
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 5
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 6
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 7
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 8
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 9
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 10
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 11
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 12
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 13
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 14
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 15
2008-12-01 14:22:14,062 MONPC Missing ParentDir path for fileItem number 16
2008-12-01 14:22:14,078 MONPC Missing ParentDir path for fileItem number 17
2008-12-01 14:22:14,078 MONPC Missing ParentDir path for fileItem number 18
2008-12-01 14:22:14,078 MONPC Missing ParentDir path for fileItem number 19
2008-12-01 14:22:14,078 MONPC Missing ParentDir path for fileItem number 20
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 21
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 22
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 23
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 24
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 25
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 26
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 27
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 28
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 29
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 30
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 31
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 32
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 33
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 34
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 35
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 36
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 37
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 38
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 39
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 40
2008-12-01 14:22:14,093 MONPC Missing ParentDir path for fileItem number 41
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 42
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 43
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 44
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 45
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 46
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 47
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 48
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 49
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 50
2008-12-01 14:22:14,156 MONPC Missing ParentDir path for fileItem number 51
2008-12-01 14:22:14,171 MONPC Missing ParentDir path for fileItem number 52
2008-12-01 14:22:14,171 MONPC Processing item C:\Documents and Settings\Claude\Application Data\AVGTOOLBAR
2008-12-01 14:22:14,171 MONPC Directory C:\Documents and Settings\Claude\Application Data\AVGTOOLBAR not found
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,171 MONPC Processing item C:\WINDOWS\System32\Drivers
2008-12-01 14:22:14,187 MONPC Processing item C:\WINDOWS\System32\Drivers\avg
2008-12-01 14:22:14,187 MONPC Directory C:\WINDOWS\System32\Drivers\avg not found
2008-12-01 14:22:14,187 MONPC Processing item C:\WINDOWS\System32
2008-12-01 14:22:14,187 MONPC Processing item C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg 8.0
2008-12-01 14:22:14,187 MONPC Directory C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg 8.0 not found
2008-12-01 14:22:14,187 MONPC Processing item C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg free 8.0
2008-12-01 14:22:14,187 MONPC Directory C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avg free 8.0 not found
2008-12-01 14:22:14,187 MONPC Processing item C:\Documents and Settings\All Users\Bureau\avg 8.0.lnk
2008-12-01 14:22:14,187 MONPC File C:\Documents and Settings\All Users\Bureau\avg 8.0.lnk not found
2008-12-01 14:22:14,187 MONPC Processing item C:\Documents and Settings\All Users\Bureau\avg free 8.0.lnk
2008-12-01 14:22:14,187 MONPC File C:\Documents and Settings\All Users\Bureau\avg free 8.0.lnk not found
2008-12-01 14:22:14,187 MONPC Processing item C:\Program Files\AVG
2008-12-01 14:22:14,187 MONPC Directory C:\Program Files\AVG not found
2008-12-01 14:22:14,187 MONPC *****     Avg Fw NDIS driver     *****
2008-12-01 14:22:15,343 MONPC FW NDIS driver not present

Destrio5 · Answer

"en plus je m apercois que j ai trois fichiers menu demarrer menu dumarrer et menu demarrer avec un carreau al aplce du premier e de demarer"
---> Depuis quand ?

ladeck · Answer

oula je ne sais plus trop mais depuis bien trois ou quatre
je pensais que c etait normal

impossible de te joindre une copie d ecran

Destrio5 · Answer

"impossible de te joindre une copie d ecran"
---> Pourquoi ?

ladeck · Answer

je sai spas comment faire pour l envoyer je l ai fait mais comment joindre le fichier ???

tu merite une bonne bouteille toi !!! lol

Destrio5 · Answer

Clique sur mon pseudo, tu auras mon mail pour m'envoyer l'image.

Destrio5 · Answer

J'ai vu l'image, je n'ai jamais vu ça.

ladeck · Answer

je ta i dis je suis un probleme a moi tout seul lol

voici le resumé

j ai reussi a desinstaller avg en fin de compte un processus tournait en fond de tache
j ai fait ctrl alt supp et arreter le processus
j ai desinstaller AVG normal manuellment
j ai repasse le logiciel de desinstallation d avg au cas ou
j ai installé antivir ( tu avais raison j avais la version anglaise lol)
je vois maintenant l icone en bas a droite

je suis entrain d installer javara et je te poste le rapport
merci mec

Destrio5 · Answer

Très bien.

ladeck · Answer

ben je te post le rapport sur ton mail ainsi qu une copie d ecran tu verras que tout le processeur est encore en surcharge et je n ai seulement ouvert qu une fenetre internet sous firefox celle avec laquelle je communique avec toi

Destrio5 · Answer

Ok.

Destrio5 · Answer

Un nouveau rapport HijackThis s'il te plaît.

ladeck · Answer

Logfile of HijackThis v1.98.2
Scan saved at 17:08:39, on 01/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\WINDOWS\system32	askmgr.exe
C:\Documents and Settings\Claude\Bureau\eden.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

Destrio5 · Answer

Je viens de remarquer que ta version d'HijackThis n'est pas bonne.

- Télécharge HijackThis v2.0.2 sur ton Bureau.

- Double-clique sur HJTInstall afin de lancer l'installation.

- Clique sur Install ensuite sur I Accept.

- Clique sur Do a system scan and save a logfile.

- Le bloc-notes s'ouvrira, fais un copier/coller de tout son contenu ici dans ton prochain message.

ladeck · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:28:14, on 01/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\WINDOWS\system32	askmgr.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe (file missing)
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe (file missing)
O23 - Service: AVG E-mail Scanner (AVGEMS) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe (file missing)
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Destrio5 · Answer

C'est beaucoup mieux, les lignes 023 sont là.

ladeck · Answer

cela sous entends que tout est rentre dans l ordre ???
si c le cas je te remercie infiniment
voudrais bien te rendre cela sincerement

juste une autre question est il normal que j ai deux fois le fichier mes documents 7go

Destrio5 · Answer

Non.

Tu as encore ComboFix ?

ladeck · Answer

ComboFix 08-11-30.02 - Claude 2008-12-01 18:17:28.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.521 [GMT 1:00]
Lancé depuis: c:\documents and settings\Claude\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Claude\Bureau\CFScript.txt
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_AVG7ALRT
-------\Legacy_AVG7UPDSVC
-------\Legacy_AVGEMS
-------\Service_Avg7Alrt
-------\Service_Avg7UpdSvc
-------\Service_AVGEMS

((((((((((((((((((((((((((((( Fichiers créés du 2008-11-01 au 2008-12-01 ))))))))))))))))))))))))))))))))))))
.

2008-12-01 17:27 . 2008-12-01 17:27 396,288 --a------ C:\HijackThis.exe
2008-12-01 16:52 . 2008-12-01 16:52 410,976 --a------ c:\windows\system32\deploytk.dll
2008-12-01 16:34 . 2008-12-01 16:34 <REP> d-------- c:\program files\Avira
2008-12-01 16:34 . 2008-12-01 16:34 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira
2008-12-01 08:22 . 2008-12-01 14:47 <REP> d-------- C:\Lop SD
2008-11-29 11:52 . 2008-11-29 12:34 <REP> d-------- c:\program files\Navilog1
2008-11-26 22:27 . 2008-11-26 22:27 1,393 --a------ c:\windows\imsins.BAK
2008-11-25 12:48 . 2008-11-25 12:48 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2008-11-25 12:18 . 2008-11-25 12:19 <REP> d-------- C:\Inetpub
2008-11-12 17:36 . 2008-11-12 17:36 <REP> d-------- c:\program files\MSXML 4.0
2008-11-11 19:10 . 2008-11-11 19:10 <REP> d-------- c:\program files\Fichiers communs\PCSuite
2008-11-11 19:07 . 2008-05-07 07:39 1,419,232 --a------ c:\windows\system32\wdfcoinstaller01005.dll
2008-11-11 19:07 . 2008-05-07 07:38 659,968 --a------ c:\windows\system32\nmwcdcocls.dll
2008-11-11 19:07 . 2008-05-07 07:38 20,864 --a------ c:\windows\system32\drivers\ccdcmbo.sys
2008-11-11 19:07 . 2008-05-07 07:38 17,536 --a------ c:\windows\system32\drivers\ccdcmb.sys
2008-11-11 19:07 . 2008-05-07 07:38 8,064 --a------ c:\windows\system32\drivers\usbser_lowerfltj.sys
2008-11-11 19:07 . 2008-06-06 09:24 8,064 --a------ c:\windows\system32\drivers\usbser_lowerflt.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-01 15:54 --------- d-----w c:\program files\Java
2008-12-01 12:29 --------- d-----w c:\documents and settings\Claude\Application Data\gtk-2.0
2008-11-28 11:22 --------- d-----w c:\documents and settings\Claude\Application Data\LimeWire
2008-11-26 08:38 --------- d-----w c:\program files\Fichiers communs\Adobe
2008-11-25 11:07 --------- d-----w c:\program files\Zylom Games
2008-11-25 11:07 --------- d-----w c:\program files\Generalia Software
2008-11-24 11:26 --------- d-----w c:\program files\Lavasoft
2008-11-24 06:26 90,112 ----a-w c:\windows\DUMP96e1.tmp
2008-11-11 18:10 --------- d-----w c:\program files\Fichiers communs\Nokia
2008-11-11 18:07 --------- d-----w c:\program files\Nokia
2008-11-11 18:02 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2008-11-11 16:16 --------- d-----w c:\documents and settings\Claude\Application Data\Nokia
2008-11-07 15:03 --------- d-----w c:\documents and settings\Claude\Application Data\AVG7
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-19 14:53 --------- d-----w c:\program files\GIMP-2.0
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-15 16:59 332,800 ----a-w c:\windows\system32\dllcache\netapi32.dll
2008-10-14 11:48 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2008-10-14 11:44 --------- d-----w c:\program files\PC Connectivity Solution
2008-10-14 11:44 --------- d-----w c:\program files\DIFX
2008-10-13 16:02 --------- d-----w c:\program files\Windows Live
2008-10-13 06:17 --------- d-----w c:\program files\OXXOGames
2008-10-12 18:00 --------- d-----w c:\program files\SFRWidget
2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Toolbar
2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Favorites
2008-10-12 14:19 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-10-12 14:07 --------- d-----w c:\program files\SDLL
2008-10-12 14:01 --------- d-----w c:\program files\Microsoft Works
2008-10-12 13:59 --------- d-----w c:\program files\Screenseven
2008-10-12 13:55 --------- d-----w c:\program files\Yahoo!
2008-10-12 13:39 --------- d-----w c:\program files\Power IE
2008-10-10 07:04 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2008-10-09 15:32 --------- d-----w c:\program files\iKlax Media
2008-10-09 11:03 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-09 11:03 --------- d-----w c:\program files\Micro Application
2008-10-07 10:47 --------- d-----w c:\documents and settings\All Users\Application Data\Nokia
2008-10-07 10:43 --------- d-----w c:\program files\MSXML 6.0
2008-10-07 10:28 --------- d-----w c:\documents and settings\Claude\Application Data\PC Suite
2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-10-03 17:12 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 15:39 1,846,144 ----a-w c:\windows\system32\win32k.sys
2008-09-15 15:39 1,846,144 ----a-w c:\windows\system32\dllcache\win32k.sys
2008-09-05 22:30 952,360 ------w c:\windows\system32\dllcache\WgaTray.exe
2008-09-05 22:30 267,304 ------w c:\windows\system32\dllcache\wgaLogon.dll
2008-09-04 16:45 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-09-04 16:45 1,106,944 ----a-w c:\windows\system32\dllcache\msxml3.dll
2008-03-06 15:48 88 --sh--r c:\windows\system32\EAE8E70877.sys
2008-03-06 16:37 3,140 --sha-w c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2008-11-29_14.47.38.56 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-08-09 12:04:11 40,768 ----a-w c:\windows\system32\drivers\avgntdd.sys
+ 2008-05-09 12:15:47 45,376 ----a-w c:\windows\system32\drivers\avgntdd.sys
- 2007-07-18 13:22:19 21,312 ----a-w c:\windows\system32\drivers\avgntmgr.sys
+ 2008-01-21 17:11:28 22,336 ----a-w c:\windows\system32\drivers\avgntmgr.sys
- 2008-11-25 20:22:22 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
+ 2008-12-01 15:40:12 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
- 2007-03-01 09:34:36 28,352 ----a-w c:\windows\system32\drivers\ssmdrv.sys
+ 2007-11-08 18:03:26 21,248 ----a-w c:\windows\system32\drivers\ssmdrv.sys
- 2008-11-29 13:41:14 218,065 ----a-w c:\windows\system32\inetsrv\MetaBase.bin
+ 2008-12-01 17:23:34 218,059 ----a-w c:\windows\system32\inetsrv\MetaBase.bin
- 2008-06-09 23:21:01 135,168 ----a-w c:\windows\system32\java.exe
+ 2008-12-01 15:52:18 144,792 ----a-w c:\windows\system32\java.exe
- 2008-06-09 23:21:04 135,168 ----a-w c:\windows\system32\javaw.exe
+ 2008-12-01 15:52:19 144,792 ----a-w c:\windows\system32\javaw.exe
- 2008-06-10 00:32:34 139,264 ----a-w c:\windows\system32\javaws.exe
+ 2008-12-01 15:52:19 148,888 ----a-w c:\windows\system32\javaws.exe
+ 2008-12-01 17:23:35 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_2dc.dat
+ 2008-12-01 17:23:35 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_4a4.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-10-02 1124352]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 1249280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-01 136600]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-12-03 344064]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-03-04 606208]
"DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-01-27 86016]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-22 45056]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-06-07 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-09-07 16:08 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\WebEye\\WebEye.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\fxsclnt.exe"=
"c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"c:\\WINDOWS\\system32\\rtcshare.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=

S3 MBAMCatchMe;MBAMCatchMe;\??\c:\program files\Malwarebytes' Anti-Malware\catchme.sys []
S3 PAC7311;VGA SoC PC-Camer@;c:\windows\system32\DRIVERS\PA707UCM.SYS [2005-09-16 150272]
S3 SDVC05;USB SDVC05;c:\windows\system32\Drivers\SDVC05.sys [2006-05-28 18088]
.
Contenu du dossier 'Tâches planifiées'

2005-06-11 c:\windows\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-05 12:00]

2008-12-01 c:\windows\Tasks\User_Feed_Synchronization-{5C79FAFC-5AD7-47BD-882C-49C39D424FDA}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]

2008-12-01 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-01 18:24:02
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1324)
c:\windows\system32\Ati2evxx.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKEEPER.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Fichiers communs\logishrd\LVMVFM\LVPrcSrv.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\program files\Dell\NicConfigSvc\NicConfigSvc.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PSIService.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\windows\system32\tcpsvcs.exe
c:\windows\system32\snmp.exe
c:\windows\system32\PAStiSvc.exe
c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\progra~1\Intel\Wireless\Bin\1XConfig.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclToBTSrv.exe
c:\program files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
.
**************************************************************************
.
Heure de fin: 2008-12-01 18:30:39 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-12-01 17:30:32
ComboFix2.txt 2008-12-01 16:45:31
ComboFix3.txt 2008-11-29 13:48:46

Avant-CF: 26 421 559 296 octets libres
Après-CF: 26,404,061,184 octets libres

241 --- E O F --- 2008-11-26 21:28:07

Destrio5 · Answer

Je te parlais du logiciel.

ladeck · Answer

oui je l ai encore

kevin05 · Answer

bonjours pour suivre...

A+

ladeck · Answer

merci mec t es genial et super cool
sincerement ravi de ton aide
a+

Destrio5 · Answer

/!\ Seul ladeck peut suivre cette procédure /!\


1/

---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

---> Copie le texte ci-dessous par sélection puis Ctrl+C :






KillAll::

Driver::
Avg7Alrt
Avg7UpdSvc
AVGEMS

Folder::
C:\PROGRA~1\Grisoft\AVG7







---> Colle la sélection dans le bloc-notes

---> Enregistre ce fichier sur le bureau (Impératif)

---> Nom du fichier : CFScript
---> Type du fichier : tous les fichiers
---> Clique sur Enregistrer
---> Quitte le bloc-notes


2/

---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

[*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

[*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.

[*] Une fois le scan achevé, un rapport va s'afficher : poste-le

[*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix\Combofix.txt

ladeck · Answer

ComboFix 08-11-30.02 - Claude 2008-12-01 18:17:28.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.521 [GMT 1:00]
Lancé depuis: c:\documents and settings\Claude\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Claude\Bureau\CFScript.txt
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_AVG7ALRT
-------\Legacy_AVG7UPDSVC
-------\Legacy_AVGEMS
-------\Service_Avg7Alrt
-------\Service_Avg7UpdSvc
-------\Service_AVGEMS

((((((((((((((((((((((((((((( Fichiers créés du 2008-11-01 au 2008-12-01 ))))))))))))))))))))))))))))))))))))
.

2008-12-01 17:27 . 2008-12-01 17:27 396,288 --a------ C:\HijackThis.exe
2008-12-01 16:52 . 2008-12-01 16:52 410,976 --a------ c:\windows\system32\deploytk.dll
2008-12-01 16:34 . 2008-12-01 16:34 <REP> d-------- c:\program files\Avira
2008-12-01 16:34 . 2008-12-01 16:34 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira
2008-12-01 08:22 . 2008-12-01 14:47 <REP> d-------- C:\Lop SD
2008-11-29 11:52 . 2008-11-29 12:34 <REP> d-------- c:\program files\Navilog1
2008-11-26 22:27 . 2008-11-26 22:27 1,393 --a------ c:\windows\imsins.BAK
2008-11-25 12:48 . 2008-11-25 12:48 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2008-11-25 12:18 . 2008-11-25 12:19 <REP> d-------- C:\Inetpub
2008-11-12 17:36 . 2008-11-12 17:36 <REP> d-------- c:\program files\MSXML 4.0
2008-11-11 19:10 . 2008-11-11 19:10 <REP> d-------- c:\program files\Fichiers communs\PCSuite
2008-11-11 19:07 . 2008-05-07 07:39 1,419,232 --a------ c:\windows\system32\wdfcoinstaller01005.dll
2008-11-11 19:07 . 2008-05-07 07:38 659,968 --a------ c:\windows\system32\nmwcdcocls.dll
2008-11-11 19:07 . 2008-05-07 07:38 20,864 --a------ c:\windows\system32\drivers\ccdcmbo.sys
2008-11-11 19:07 . 2008-05-07 07:38 17,536 --a------ c:\windows\system32\drivers\ccdcmb.sys
2008-11-11 19:07 . 2008-05-07 07:38 8,064 --a------ c:\windows\system32\drivers\usbser_lowerfltj.sys
2008-11-11 19:07 . 2008-06-06 09:24 8,064 --a------ c:\windows\system32\drivers\usbser_lowerflt.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-01 15:54 --------- d-----w c:\program files\Java
2008-12-01 12:29 --------- d-----w c:\documents and settings\Claude\Application Data\gtk-2.0
2008-11-28 11:22 --------- d-----w c:\documents and settings\Claude\Application Data\LimeWire
2008-11-26 08:38 --------- d-----w c:\program files\Fichiers communs\Adobe
2008-11-25 11:07 --------- d-----w c:\program files\Zylom Games
2008-11-25 11:07 --------- d-----w c:\program files\Generalia Software
2008-11-24 11:26 --------- d-----w c:\program files\Lavasoft
2008-11-24 06:26 90,112 ----a-w c:\windows\DUMP96e1.tmp
2008-11-11 18:10 --------- d-----w c:\program files\Fichiers communs\Nokia
2008-11-11 18:07 --------- d-----w c:\program files\Nokia
2008-11-11 18:02 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2008-11-11 16:16 --------- d-----w c:\documents and settings\Claude\Application Data\Nokia
2008-11-07 15:03 --------- d-----w c:\documents and settings\Claude\Application Data\AVG7
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-19 14:53 --------- d-----w c:\program files\GIMP-2.0
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-15 16:59 332,800 ----a-w c:\windows\system32\dllcache\netapi32.dll
2008-10-14 11:48 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2008-10-14 11:44 --------- d-----w c:\program files\PC Connectivity Solution
2008-10-14 11:44 --------- d-----w c:\program files\DIFX
2008-10-13 16:02 --------- d-----w c:\program files\Windows Live
2008-10-13 06:17 --------- d-----w c:\program files\OXXOGames
2008-10-12 18:00 --------- d-----w c:\program files\SFRWidget
2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Toolbar
2008-10-12 14:25 --------- d-----w c:\program files\Windows Live Favorites
2008-10-12 14:19 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-10-12 14:07 --------- d-----w c:\program files\SDLL
2008-10-12 14:01 --------- d-----w c:\program files\Microsoft Works
2008-10-12 13:59 --------- d-----w c:\program files\Screenseven
2008-10-12 13:55 --------- d-----w c:\program files\Yahoo!
2008-10-12 13:39 --------- d-----w c:\program files\Power IE
2008-10-10 07:04 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2008-10-09 15:32 --------- d-----w c:\program files\iKlax Media
2008-10-09 11:03 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-09 11:03 --------- d-----w c:\program files\Micro Application
2008-10-07 10:47 --------- d-----w c:\documents and settings\All Users\Application Data\Nokia
2008-10-07 10:43 --------- d-----w c:\program files\MSXML 6.0
2008-10-07 10:28 --------- d-----w c:\documents and settings\Claude\Application Data\PC Suite
2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-10-07 10:13 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-10-03 17:12 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 15:39 1,846,144 ----a-w c:\windows\system32\win32k.sys
2008-09-15 15:39 1,846,144 ----a-w c:\windows\system32\dllcache\win32k.sys
2008-09-05 22:30 952,360 ------w c:\windows\system32\dllcache\WgaTray.exe
2008-09-05 22:30 267,304 ------w c:\windows\system32\dllcache\wgaLogon.dll
2008-09-04 16:45 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-09-04 16:45 1,106,944 ----a-w c:\windows\system32\dllcache\msxml3.dll
2008-03-06 15:48 88 --sh--r c:\windows\system32\EAE8E70877.sys
2008-03-06 16:37 3,140 --sha-w c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2008-11-29_14.47.38.56 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-08-09 12:04:11 40,768 ----a-w c:\windows\system32\drivers\avgntdd.sys
+ 2008-05-09 12:15:47 45,376 ----a-w c:\windows\system32\drivers\avgntdd.sys
- 2007-07-18 13:22:19 21,312 ----a-w c:\windows\system32\drivers\avgntmgr.sys
+ 2008-01-21 17:11:28 22,336 ----a-w c:\windows\system32\drivers\avgntmgr.sys
- 2008-11-25 20:22:22 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
+ 2008-12-01 15:40:12 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
- 2007-03-01 09:34:36 28,352 ----a-w c:\windows\system32\drivers\ssmdrv.sys
+ 2007-11-08 18:03:26 21,248 ----a-w c:\windows\system32\drivers\ssmdrv.sys
- 2008-11-29 13:41:14 218,065 ----a-w c:\windows\system32\inetsrv\MetaBase.bin
+ 2008-12-01 17:23:34 218,059 ----a-w c:\windows\system32\inetsrv\MetaBase.bin
- 2008-06-09 23:21:01 135,168 ----a-w c:\windows\system32\java.exe
+ 2008-12-01 15:52:18 144,792 ----a-w c:\windows\system32\java.exe
- 2008-06-09 23:21:04 135,168 ----a-w c:\windows\system32\javaw.exe
+ 2008-12-01 15:52:19 144,792 ----a-w c:\windows\system32\javaw.exe
- 2008-06-10 00:32:34 139,264 ----a-w c:\windows\system32\javaws.exe
+ 2008-12-01 15:52:19 148,888 ----a-w c:\windows\system32\javaws.exe
+ 2008-12-01 17:23:35 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_2dc.dat
+ 2008-12-01 17:23:35 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_4a4.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-10-02 1124352]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 7\PCSync2.exe" [2008-06-17 1249280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-01 136600]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-12-03 344064]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2005-03-04 606208]
"DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-01-27 86016]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2005-05-31 122941]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-22 45056]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2005-06-07 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-09-07 16:08 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\WebEye\\WebEye.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\fxsclnt.exe"=
"c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"c:\\WINDOWS\\system32\\rtcshare.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=

S3 MBAMCatchMe;MBAMCatchMe;\??\c:\program files\Malwarebytes' Anti-Malware\catchme.sys []
S3 PAC7311;VGA SoC PC-Camer@;c:\windows\system32\DRIVERS\PA707UCM.SYS [2005-09-16 150272]
S3 SDVC05;USB SDVC05;c:\windows\system32\Drivers\SDVC05.sys [2006-05-28 18088]
.
Contenu du dossier 'Tâches planifiées'

2005-06-11 c:\windows\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-05 12:00]

2008-12-01 c:\windows\Tasks\User_Feed_Synchronization-{5C79FAFC-5AD7-47BD-882C-49C39D424FDA}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]

2008-12-01 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-01 18:24:02
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1324)
c:\windows\system32\Ati2evxx.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Intel\Wireless\Bin\WLKEEPER.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Fichiers communs\logishrd\LVMVFM\LVPrcSrv.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\program files\Dell\NicConfigSvc\NicConfigSvc.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PSIService.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\windows\system32\tcpsvcs.exe
c:\windows\system32\snmp.exe
c:\windows\system32\PAStiSvc.exe
c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\progra~1\Intel\Wireless\Bin\1XConfig.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclToBTSrv.exe
c:\program files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
.
**************************************************************************
.
Heure de fin: 2008-12-01 18:30:39 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-12-01 17:30:32
ComboFix2.txt 2008-12-01 16:45:31
ComboFix3.txt 2008-11-29 13:48:46

Avant-CF: 26 421 559 296 octets libres
Après-CF: 26,404,061,184 octets libres

241 --- E O F --- 2008-11-26 21:28:07

Destrio5 · Answer

Tu peux poster un nouveau rapport HijackThis.

Je m'absente, à toute à l'heure.

ladeck · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:45:49, on 01/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Destrio5 · Answer

Il est OK le rapport HijackThis, plus de trace d'AVG.

As-tu encore des problèmes ?

ladeck · Answer

salut 
ben j ai gagner un peu en rapidité
plus de fenetre qui s ouvre intempestivement

mais quand je vais sur certains site l' UC est vite saturé j ai 1GO de ram pourtant

si tu connais untruc pour optimiser la ram je suis preneur sinon je te remercie tres sincerement

Kssam.exe

52 réponses

Newsletters