[Virus] Executables avast / spybot / KPF disp

Nicolas -  
Bonjour,
Je pense que je suis infecté par un virus/malware ou autre qui supprime automatiquement les executables de Avast,SpyBot et Kerio.
Dès que je créé un fichier nommé ashdisp.exe (Avast) il disparait au bout de 2 secondes.

Je ne trouve pas où il se trouve malgrés des scans online ewido ou autre antivirus online.

Pouvez-vous m'aider sans réinstaller WinXP ?

Voici mon rapport Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 10:38:59, on 31/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cobian Backup 8\cbService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {210D0CBC-8B17-48D1-B294-1A338DD2EB3A} - http://217.128.84.168:9010/VatDec.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - https://via1.altissemiconductor.com/CitrixSessionInit/ICAWEB/fr/ica32/wficat.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqemea/downloads/sysinfo.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AD7A67A5-5461-4B6B-A9C5-09DD071527F5} - http://auchan.fujifilmnet.com/MCLPhoto.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Cobian Backup 8 service (CobBMService) - Luis Cobian - C:\Program Files\Cobian Backup 8\cbService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Configuration: Windows XP
Firefox 2.0.0.1

6 réponses

  1. gamma-gt
    Bonjour,

    j'ai exactement le même problème. Après une nuit de recherches (j'ai passé tous les removal tools des autres anti-virus, essayé diverses techniques lues ici et là sur des forums), j'ai constaté comme Nicolas que les fichiers executables disparaissent dès qu'ils sont créés. Cela se produit pour Avast et Kerio, mais aussi Antivir, AVG, et même Ewido dont le système de mise à jour ne fonctionne pas. Panda on line, Ewido on line, et autres, ne rapportent pas d'erreur....

    HELP!

    Merci!
    5. Utilisateur anonyme
      Salut

      ¤ Clic sur "demarrer", "executer", tape: services.msc ,cherche dans la liste cette ligne, fais un clic droit dessus choisis "propriétés" et régle la sur "désactivé"

      - Google Updater Service

      ¤ Clic sur démarrer, rechercher, cherche et supprime :

      - GoogleUpdaterService.exe

      ¤ Télécharge ComboFix
      http://download.bleepingcomputer.com/sUBs/combofix.exe

      Ferme ton navigateur web avant d'exécuter ce programme
      Double-clique dessus et appuye sur "Y" pour continuer

      Attends quelques minutes..un rapport va s'ouvrir enregistre son contenu, puis copie et colle le ici stp
      1. niclab
        Voici le rapport demandé. Ai'je autre chose à faire ?

        nicolas - 06-12-31 23:02:33,29 Service Pack 2
        ComboFix 06.11.27 - Running from: "C:\Downloads"

        ((((((((((((((((((((((((((((((( Files Created from 2006-11-31 to 2006-12-31 ))))))))))))))))))))))))))))))))))

        2006-12-31 19:58 <REP> d-------- C:\Program Files\Index.dat Analyzer
        2006-12-31 16:23 <REP> d-------- C:\Program Files\RegCleaner
        2006-12-31 16:11 1,900 --a------ C:\WINDOWS\system32\tmp.reg
        2006-12-31 13:59 <REP> d-------- C:\Program Files\a-squared Free
        2006-12-30 22:53 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
        2006-12-30 22:53 <REP> d-------- C:\Program Files\Grisoft
        2006-12-30 22:41 <REP> d-------- C:\Program Files\Safer Networking
        2006-12-30 21:47 <REP> d-------- C:\hijackthis
        2006-12-30 21:22 <REP> d-------- C:\Program Files\Alwil Software
        2006-12-30 19:56 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
        2006-12-30 19:55 <REP> d-------- C:\Documents and Settings\nicolas\.housecall6.6
        2006-12-30 18:33 90,112 --a------ C:\WINDOWS\system32\AVASTSS.scr
        2006-12-30 18:33 57,984 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
        2006-12-30 18:33 51,056 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
        2006-12-30 18:33 35,184 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
        2006-12-30 18:33 339,968 --a------ C:\WINDOWS\system32\aswBoot.exe
        2006-12-30 18:33 16,352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
        2006-12-30 18:33 14,784 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
        2006-12-30 18:22 <REP> dr-h----- C:\Documents and Settings\nicolas\Recent
        2006-12-29 20:40 <REP> d-------- C:\WINDOWS\exefld
        2006-12-29 16:55 <REP> d-------- C:\Program Files\Windows Updates Downloader
        2006-12-28 17:53 <REP> d-------- C:\WINDOWS\system32\ActiveScan
        2006-12-15 19:40 <REP> d-------- C:\Documents and Settings\nicolas\Application Data\ICAClient
        2006-12-15 19:39 <REP> d-------- C:\Program Files\Citrix
        2006-12-10 16:15 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
        2006-12-10 16:15 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
        2006-12-03 17:18 <REP> d-------- C:\Program Files\Logitech
        2006-12-03 16:06 69,632 --a------ C:\WINDOWS\system32\KemXML.dll
        2006-12-03 16:06 3,712 --a------ C:\WINDOWS\system32\drivers\LBeepKE.sys
        2006-12-03 16:06 155,648 --a------ C:\WINDOWS\system32\kemutb.dll
        2006-12-03 16:06 131,072 --a------ C:\WINDOWS\system32\KemUtil.dll
        2006-12-03 16:06 110,592 --a------ C:\WINDOWS\system32\KemWnd.dll
        2006-12-01 15:47 <REP> d-------- C:\Documents and Settings\nicolas\Application Data\Teleca

        (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

        2006-12-31 18:09 -------- d-------- C:\Program Files\Spybot - Search & Destroy
        2006-12-31 15:46 -------- d-------- C:\Program Files\Mozilla Thunderbird
        2006-12-31 15:34 -------- d-------- C:\Program Files\Mozilla Firefox
        2006-12-31 10:14 -------- d-------- C:\Program Files\ASupprimer
        2006-12-30 19:56 -------- d-------- C:\Program Files\Internet Explorer
        2006-12-30 18:26 81920 --a------ C:\Documents and Settings\nicolas\Application Data\ezpinst.exe
        2006-12-30 18:26 7176 --a------ C:\Documents and Settings\nicolas\Application Data\pcouffin.cat
        2006-12-30 18:26 47360 --a------ C:\Documents and Settings\nicolas\Application Data\pcouffin.sys
        2006-12-30 18:26 33 --a------ C:\Documents and Settings\nicolas\Application Data\pcouffin.log
        2006-12-30 18:26 1144 --a------ C:\Documents and Settings\nicolas\Application Data\pcouffin.inf
        2006-12-30 18:26 -------- d-------- C:\Documents and Settings\nicolas\Application Data\Vso
        2006-12-30 17:15 -------- d-------- C:\Program Files\XVid;-)
        2006-12-30 17:15 -------- d-------- C:\Program Files\WinAce
        2006-12-30 17:15 -------- d-------- C:\Program Files\eMule
        2006-12-30 17:15 -------- d-------- C:\Program Files\cam2pc
        2006-12-28 14:11 -------- d-------- C:\Program Files\Cobian Backup 8
        2006-12-26 14:41 -------- d-------- C:\Documents and Settings\nicolas\Application Data\AdobeUM
        2006-12-24 14:03 -------- d-------- C:\Program Files\Fichiers communs\Adobe
        2006-12-22 15:45 -------- d---s---- C:\Documents and Settings\nicolas\Application Data\Microsoft
        2006-12-16 22:17 -------- d-------- C:\Program Files\Picasa2
        2006-12-14 23:03 -------- d-------- C:\Program Files\Outlook Express
        2006-12-14 23:03 -------- d-------- C:\Program Files\Fichiers communs\System
        2006-12-10 16:15 -------- d-------- C:\Program Files\Google
        2006-12-07 06:29 2374472 --a------ C:\WINDOWS\system32\wmvcore.dll
        2006-12-03 16:05 -------- d-------- C:\Program Files\Fichiers communs\Logitech
        2006-11-27 22:23 -------- d-------- C:\Program Files\Disc2Phone
        2006-11-27 22:17 -------- d-------- C:\Program Files\Sony Ericsson
        2006-11-27 22:17 -------- d-------- C:\Program Files\Fichiers communs\Teleca Shared
        2006-11-27 22:17 -------- d-------- C:\Program Files\Fichiers communs
        2006-11-26 22:44 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
        2006-11-26 18:55 -------- d-------- C:\Program Files\adslTV
        2006-11-19 16:38 -------- d-------- C:\Program Files\UxTheme Multipatcher Fr
        2006-11-19 16:38 -------- d-------- C:\Program Files\MSXML 4.0
        2006-11-11 12:03 -------- d-------- C:\Program Files\Photo Story 3 for Windows
        2006-11-08 06:07 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
        2006-11-07 21:03 6049280 --------- C:\WINDOWS\system32\ieframe.dll
        2006-11-07 21:03 50688 --------- C:\WINDOWS\system32\msfeedsbs.dll
        2006-11-07 21:03 458752 --------- C:\WINDOWS\system32\msfeeds.dll
        2006-11-07 21:03 413696 --a------ C:\WINDOWS\system32\vbscript.dll
        2006-11-07 21:03 231424 --a------ C:\WINDOWS\system32\webcheck.dll
        2006-11-07 21:03 180736 --------- C:\WINDOWS\system32\ieui.dll
        2006-11-07 21:03 156160 --a------ C:\WINDOWS\system32\msls31.dll
        2006-11-07 03:27 382976 --a------ C:\WINDOWS\system32\iedkcs32.dll
        2006-11-07 03:27 229376 --a------ C:\WINDOWS\system32\ieaksie.dll
        2006-11-07 03:26 71680 --a------ C:\WINDOWS\system32\admparse.dll
        2006-11-07 03:26 55296 --a------ C:\WINDOWS\system32\iesetup.dll
        2006-11-07 03:26 54784 --a------ C:\WINDOWS\system32\ie4uinit.exe
        2006-11-07 03:26 43008 --a------ C:\WINDOWS\system32\iernonce.dll
        2006-11-07 03:26 152064 --a------ C:\WINDOWS\system32\ieakeng.dll
        2006-11-07 03:26 13312 --a------ C:\WINDOWS\system32\ieudinit.exe
        2006-11-07 03:26 123904 --a------ C:\WINDOWS\system32\advpack.dll
        2006-11-07 03:25 161792 --a------ C:\WINDOWS\system32\ieakui.dll
        2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll
        2006-11-01 23:41 58 --a------ C:\Documents and Settings\nicolas\Application Data\Printer.ini
        2006-11-01 17:40 47360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
        2006-10-20 19:43 30496 --a------ C:\Documents and Settings\nicolas\Application Data\GDIPFONTCACHEV1.DAT
        2006-10-20 14:23 619352 --a------ C:\WINDOWS\system32\WINSSWEBAGENT.DLL
        2006-10-20 02:38 716800 --a------ C:\WINDOWS\system32\sxs.dll
        2006-10-17 12:06 78336 --a------ C:\WINDOWS\system32\ieencode.dll
        2006-10-17 12:05 40960 --a------ C:\WINDOWS\system32\licmgr10.dll
        2006-10-17 12:05 206336 --------- C:\WINDOWS\system32\WinFXDocObj.exe
        2006-10-17 12:05 105984 --a------ C:\WINDOWS\system32\url.dll
        2006-10-17 12:04 101376 --a------ C:\WINDOWS\system32\occache.dll
        2006-10-17 12:03 17408 --a------ C:\WINDOWS\system32\corpol.dll
        2006-10-17 11:58 61952 --------- C:\WINDOWS\system32\icardie.dll
        2006-10-17 11:58 12288 --------- C:\WINDOWS\system32\msfeedssync.exe
        2006-10-17 11:57 36352 --a------ C:\WINDOWS\system32\imgutil.dll
        2006-10-17 11:57 266752 --------- C:\WINDOWS\system32\iertutil.dll
        2006-10-17 11:56 45568 --a------ C:\WINDOWS\system32\mshta.exe
        2006-10-17 11:28 48128 --a------ C:\WINDOWS\system32\mshtmler.dll
        2006-10-17 11:27 380928 --------- C:\WINDOWS\system32\ieapfltr.dll
        2006-10-13 13:36 65536 --a------ C:\WINDOWS\system32\nwwks.dll
        2006-10-13 13:36 64000 --a------ C:\WINDOWS\system32\nwapi32.dll
        2006-10-13 13:36 145920 --a------ C:\WINDOWS\system32\nwprovau.dll

        (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

        *Note* empty entries are not shown

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
        "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
        "SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
        "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
        "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
        "Installed"="1"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
        "NoChange"="1"
        "Installed"="1"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
        "Installed"="1"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
        "ContinueOneCareInstall"="rundll32 C:\\WINDOWS\\system32\\winsswebagent.dll,LaunchIEAfterReboot"

        [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
        "DeskHtmlVersion"=dword:00000110
        "DeskHtmlMinorVersion"=dword:00000005
        "Settings"=dword:00000001
        "GeneralFlags"=dword:00000005

        [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
        "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

        [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
        "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
        "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
        "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
        "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
        "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
        "NoDriveTypeAutoRun"=dword:00000091

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
        "dontdisplaylastusername"=dword:00000000
        "legalnoticecaption"=""
        "legalnoticetext"=""
        "shutdownwithoutlogon"=dword:00000001
        "undockwithoutlogon"=dword:00000001

        [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
        "NoDriveTypeAutoRun"=dword:00000091

        [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
        "NoDriveTypeAutoRun"=dword:00000091

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
        "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
        "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
        "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
        "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
        "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
        "NBJ"="\"C:\\Program Files\\Ahead\\Nero BackItUp\\NBJ.exe\""
        "PixVillage"="C:\\Program Files\\PixVillage\\pixvillage.exe"
        "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"c:\\Program Files\\Fichiers communs\\Ahead\\lib\\NMBgMonitor.exe\""
        "LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
        "MMTray"="\"C:\\Program Files\\Musicmatch\\Musicmatch Jukebox\\mm_tray.exe\""
        "NeroFilterCheck"="c:\\WINDOWS\\system32\\NeroCheck.exe"
        "mmtask"="\"C:\\Program Files\\Musicmatch\\Musicmatch Jukebox\\mmtask.exe\""

        [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
        "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

        ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

        backup-20061230-215226-400
        O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
        backup-20061230-215226-482
        O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
        backup-20061230-215226-179
        O23 - Service: EasyModApache - Unknown owner - C:\Program Files\EasyBox\apache\apache.exe" -k runservice (file missing)

        Contents of the 'Scheduled Tasks' folder
        C:\WINDOWS\tasks\HPpromotions journeysoftware.job
        C:\WINDOWS\tasks\SyncBack Backup Local.job
        C:\WINDOWS\tasks\User_Feed_Synchronization-{349D0F95-8CB0-4C18-8AB6-3FA46D949B4B}.job

        Completion time: 06-12-31 23:04:26.19
        C:\ComboFix.txt ... 06-12-31 23:04

    Discussions similaires

    Impossible de joindre Avast
    soleil12

    8 réponses
    Softonic,est-ce un virus ?
    techmel1

    6 réponses
    Chrome://newtab
    Nova

    14 réponses
    Désinstaller Softonic
    Diguimette

    5 réponses