Aller au contenu

after42

Membres
  • Compteur de contenus

    147
  • Inscription

  • Dernière visite

after42's Achievements

Power Member

Power Member (5/12)

0

Réputation sur la communauté

  1. Salut Non ce n'est pas pour ca que je ne répond pas, je n'avais pas encore éffectué le lettoyge demandé Voici le rapport Combofix ComboFix 08-06-10.5 - packard 2008-06-16 15:13:31.2 - NTFSx86 Endroit: D:\Documents and Settings\packard.115263910314.000\Bureau\ComboFix.exe Command switches used :: D:\Documents and Settings\packard.115263910314.000\Bureau\CFScript.txt * Création d'un nouveau point de restauration FILE :: C:\WINDOWS\system32\C579545325.sys C:\WINDOWS\system32\xfgllpwx.ini C:\WINDOWS\system32\xfgllpwx.tmp D:\Documents and Settings\packard.115263910314.000\lsass.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\AskSBar C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL C:\Program Files\VAV C:\Program Files\VAV\vav.cpl C:\Program Files\VAV\vav.exe C:\Program Files\VAV\vav1.dat C:\WINDOWS\BM8bdc15e9.xml C:\WINDOWS\cookies.ini C:\WINDOWS\pskt.ini C:\WINDOWS\system32\AIOXayay.ini C:\WINDOWS\system32\AIOXayay.ini2 C:\WINDOWS\system32\apbdfccv.dll C:\WINDOWS\system32\befpewya.dll C:\WINDOWS\system32\C579545325.sys C:\WINDOWS\system32\ckbjvcik.dll C:\WINDOWS\system32\duthwoab.dll C:\WINDOWS\system32\ehunmnef.ini C:\WINDOWS\system32\hjmrdlrm.dll C:\WINDOWS\system32\hmhkugdu.dll C:\WINDOWS\system32\ikxqhrvj.dll C:\WINDOWS\system32\ivyfqeea.ini C:\WINDOWS\system32\JPstBJjl.ini C:\WINDOWS\system32\JPstBJjl.ini2 C:\WINDOWS\system32\jQrAJRqr.ini C:\WINDOWS\system32\jQrAJRqr.ini2 C:\WINDOWS\system32\lvwmmqya.ini C:\WINDOWS\system32\munuydbb.dll C:\WINDOWS\system32\pckbegar.dll C:\WINDOWS\system32\QqWELkkj.ini C:\WINDOWS\system32\QqWELkkj.ini2 C:\WINDOWS\system32\rqRJArQj.dll C:\WINDOWS\system32\rqRLBUNf.dll C:\WINDOWS\system32\sxghlsqk.ini C:\WINDOWS\system32\usdqaril.dll C:\WINDOWS\system32\vccfdbpa.ini C:\WINDOWS\system32\vntiho05 C:\WINDOWS\system32\vntiho18 C:\WINDOWS\system32\vsopxjnn.dll C:\WINDOWS\system32\wmicrfct.dll C:\WINDOWS\system32\xfgllpwx.ini C:\WINDOWS\system32\xfgllpwx.tmp C:\WINDOWS\system32\yojdepra.dll . ---- Previous Run ------- . C:\Program Files\AskTBar C:\Program Files\AskTBar\bar\History\search2 C:\Program Files\AskTBar\PopSwatr\History\allowed C:\Program Files\AskTBar\PopSwatr\History\notallow C:\Program Files\Eroca C:\Program Files\Eroca\Eroca.exe C:\Program Files\Spcron C:\Program Files\Spcron\Spc.dll C:\WINDOWS\BM8bdc15e9.xml C:\WINDOWS\cookies.ini C:\WINDOWS\pskt.ini C:\WINDOWS\system32\A1 C:\WINDOWS\system32\AGfLoUvw.ini C:\WINDOWS\system32\AGfLoUvw.ini2 C:\WINDOWS\system32\avtkqndf.dll C:\WINDOWS\system32\axiaxkrp.ini C:\WINDOWS\system32\bevwrdky.ini C:\WINDOWS\system32\bjevvqqm.dll C:\WINDOWS\system32\byXRjhhe.dll C:\WINDOWS\system32\Dcbaayay.ini C:\WINDOWS\system32\Dcbaayay.ini2 C:\WINDOWS\system32\dgOWxGgh.ini C:\WINDOWS\system32\dgOWxGgh.ini2 C:\WINDOWS\system32\dkmoreaq.ini C:\WINDOWS\system32\drrdadid.dll C:\WINDOWS\system32\dwpregxx.dll C:\WINDOWS\system32\eeMorBeg.ini C:\WINDOWS\system32\eeMorBeg.ini2 C:\WINDOWS\system32\ehpfkrvk.ini C:\WINDOWS\system32\emgvahim.dll C:\WINDOWS\system32\emvajakj.ini C:\WINDOWS\system32\eymhyyyp.ini C:\WINDOWS\system32\gnecqfqy.dll C:\WINDOWS\system32\hiogtarr.dll C:\WINDOWS\system32\hwcahrvr.ini C:\WINDOWS\system32\IOUtEfhk.ini C:\WINDOWS\system32\IOUtEfhk.ini2 C:\WINDOWS\system32\jkajavme.dll C:\WINDOWS\system32\jkkICUOF.dll C:\WINDOWS\system32\kyxbpuvc.dll C:\WINDOWS\system32\lhvklbbj.dll C:\WINDOWS\system32\lTBJRqru.ini C:\WINDOWS\system32\lTBJRqru.ini2 C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\mqqsegem.dll C:\WINDOWS\system32\msgaobje.dll C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\mytcupoi.ini C:\WINDOWS\system32\ncxeedsy.ini C:\WINDOWS\system32\ncyycfhf.dll C:\WINDOWS\system32\neyuvmsx.ini C:\WINDOWS\system32\nfbjuest.ini C:\WINDOWS\system32\pac.txt C:\WINDOWS\system32\prkxaixa.dll C:\WINDOWS\system32\pxquckge.dll C:\WINDOWS\system32\pyyyhmye.dll C:\WINDOWS\system32\qaeromkd.dll C:\WINDOWS\system32\qgbscpur.ini C:\WINDOWS\system32\QqWELkkj.ini C:\WINDOWS\system32\QqWELkkj.ini2 C:\WINDOWS\system32\qtlswepo.ini C:\WINDOWS\system32\rratgoih.ini C:\WINDOWS\system32\rsthfiac.ini C:\WINDOWS\system32\rupcsbgq.dll C:\WINDOWS\system32\uautcnvb.ini C:\WINDOWS\system32\uwluxuim.dll C:\WINDOWS\system32\W3 C:\WINDOWS\system32\W3\dutdtx2.exe C:\WINDOWS\system32\wdmphhdv.dll C:\WINDOWS\system32\wkrnjpac.dll C:\WINDOWS\system32\wvUligdE.dll C:\WINDOWS\system32\XFiOoUvw.ini C:\WINDOWS\system32\XFiOoUvw.ini2 C:\WINDOWS\system32\xgxeuehc.dll C:\WINDOWS\system32\xixrpern.ini C:\WINDOWS\system32\xlfccxdg.dll C:\WINDOWS\system32\xlokpxjg.dll C:\WINDOWS\system32\xsmvuyen.dll C:\WINDOWS\system32\ycmxclox.dll C:\WINDOWS\system32\ykdrwveb.dll C:\WINDOWS\system32\yqpvnvnh.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_NWSAPAGENT -------\Service_NwSapAgent ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-16 to 2008-06-16 )))))))))))))))))))))))))))))))))))) . 2008-06-10 15:35 . 2008-06-10 15:35 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Grisoft 2008-06-10 15:33 . 2008-06-10 15:33 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Grisoft 2008-06-10 15:33 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-06-06 10:02 . 2008-06-06 10:02 208 --ah----- C:\sqmdata05.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt06.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt05.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmdata06.sqm 2008-06-05 20:57 . 2008-06-08 19:46 4 --a------ C:\WINDOWS\msoffice.ini 2008-06-05 17:23 . 2008-06-05 17:26 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-06-05 17:23 . 2008-06-05 17:23 <REP> d-------- C:\Program Files\Spybot - Search & Destroy 2008-06-05 17:11 . 2008-06-05 17:55 <REP> d-------- C:\Program Files\Navilog1 2008-06-05 17:11 . 2008-06-05 17:11 <REP> d-------- C:\Program Files\CCleaner 2008-06-05 16:48 . 2008-06-05 16:55 2,404 --a------ C:\WINDOWS\system32\tmp.reg 2008-06-05 16:47 . 2007-09-22 13:59 3,377 --a------ C:\WINDOWS\msnchk.exe 2008-06-04 22:10 . 2008-06-04 22:10 <REP> d-------- C:\download 2008-06-04 22:09 . 2008-06-04 22:09 <REP> d-------- C:\FACTONLY 2008-06-04 18:46 . 2008-06-08 19:46 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\AOL 2008-06-04 18:35 . 2008-06-04 18:35 <REP> d-------- C:\Program Files\Real 2008-06-04 18:35 . 2008-06-04 18:35 24,576 --a------ C:\WINDOWS\system32\prefscpl.cpl 2008-06-04 18:28 . 2008-06-04 18:28 <REP> d-------- C:\OEMCUST 2008-06-04 18:28 . 2008-06-04 22:09 <REP> d-------- C:\CABS 2008-06-02 21:24 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\LocalService.AUTORITE NT.009\Application Data\X10 Commander 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\ModŠles 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Mes documents 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Favoris 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\packard.115263910314.007 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\NetworkService.AUTORITE NT.009 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\LocalService.AUTORITE NT.009 2008-06-02 18:00 . 2008-05-28 09:10 45,056 --a------ C:\WINDOWS\system32\vav.cpl 2008-06-02 15:50 . 2008-06-04 22:09 <REP> d-------- C:\Program Files\AntiMalwareGuard 2008-05-31 01:23 . 2008-05-31 01:23 8,835 --a--c--- C:\WINDOWS\system32\dpufr.qm 2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\WINDOWS\system32\IP5 2008-05-29 12:43 . 2008-05-30 06:40 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Azureus 2008-05-29 12:43 . 2008-05-29 12:43 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Azureus 2008-05-25 11:04 . 2008-05-25 20:29 2,516 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2008-05-25 11:00 . 2008-05-25 20:26 <REP> d-------- C:\Program Files\Corel 2008-05-25 09:54 . 2008-05-25 09:57 <REP> d-------- C:\Program Files\Rip It ! 2008-05-23 07:42 . 2008-05-23 07:42 268 --ah----- C:\sqmdata04.sqm 2008-05-23 07:42 . 2008-05-23 07:42 244 --ah----- C:\sqmnoopt04.sqm 2008-05-23 00:22 . 2008-05-23 00:22 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2008-05-23 00:22 . 2008-05-23 00:22 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe 2008-05-23 00:22 . 2008-05-23 00:22 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm 2008-05-23 00:22 . 2008-05-23 00:22 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-05-23 00:20 . 2008-05-23 00:20 1,044,480 --a--c--- C:\WINDOWS\system32\libdivx.dll 2008-05-23 00:20 . 2008-05-23 00:20 200,704 --a--c--- C:\WINDOWS\system32\ssldivx.dll 2008-05-23 00:19 . 2008-05-23 00:19 196,608 --a--c--- C:\WINDOWS\system32\dtu100.dll 2008-05-23 00:19 . 2008-05-23 00:19 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-05-23 00:19 . 2008-05-23 00:19 81,920 --a------ C:\WINDOWS\system32\dpl100.dll 2008-05-23 00:19 . 2008-05-23 00:19 3,067 --a--c--- C:\WINDOWS\system32\dtu_fr.qm 2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest 2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest 2008-05-23 00:18 . 2008-05-23 00:18 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-15 07:35 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Skype 2008-06-14 17:04 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\LimeWire 2008-06-12 18:13 --------- d-----w C:\Program Files\DivX 2008-06-08 17:47 --------- d-----w D:\Documents and Settings\All Users\Application Data\AOL 2008-06-08 17:47 --------- d-----w C:\Program Files\Fichiers communs\AOL 2008-05-13 06:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\AdobeUM 2008-05-11 07:53 505,742 ----a-w C:\WINDOWS\macromix.dll 2008-05-11 07:53 30,544 ----a-w C:\WINDOWS\dirdib.drv 2008-05-10 07:27 --------- d-----w C:\Program Files\Sun 2008-05-10 07:27 --------- d-----w C:\Program Files\Java 2008-04-19 09:28 --------- d-----w C:\Program Files\SureThing CD Labeler 5 2008-04-19 09:28 --------- d-----w C:\Program Files\Fichiers communs\SureThing Shared 2008-04-19 09:25 --------- d-----w C:\Program Files\AbiSuite2 2008-04-16 20:18 --------- d-----w D:\Documents and Settings\All Users\Application Data\AVS4YOU 2008-04-16 20:17 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\PC Suite 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Nokia 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\All Users\Application Data\PC Suite 2008-04-16 20:10 --------- d-----w C:\Program Files\PC Connectivity Solution 2008-04-16 20:10 --------- d-----w C:\Program Files\DIFX 2008-04-16 20:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Installations 2008-04-16 19:32 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Acoustica 2008-04-16 18:55 --------- d-----w C:\Program Files\LimeWire 2007-06-16 21:02 774,144 -c--a-w C:\Program Files\RngInterstitial.dll 2007-05-27 20:04 476 ----a-w C:\Program Files\Raccourci vers LimeWire.lnk 2006-06-10 22:26 627,712 -csha-w C:\Program Files\ehthumbs.db 2005-01-16 12:26 17,590,858 -c--a-w C:\Program Files\neodivx.zip . ((((((((((((((((((((((((((((( snapshot@2008-06-13_15.53.00.18 ))))))))))))))))))))))))))))))))))))))))) . - 2008-06-13 13:47:43 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-16 13:19:39 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-16 13:22:21 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_ca8.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15:00 15360] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184] "Skype"="C:\APPS\skype\phone\Skype.exe" [2006-01-18 14:05 19417640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 14:34 64512] "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe] "PinnacleDriverCheck"="C:\WINDOWS\system32\\PSDrvCheck.exe" [2004-03-11 00:26 406016] "BOOT"="C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe" [2002-08-16 15:14 476160] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-03-20 19:02 98304] "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939] "VX1000"="C:\WINDOWS\vVX1000.exe" [2006-12-06 01:38 707360] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] "LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 03:48 275800] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 15:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm "VIDC.MJPG"= Pvmjpg30.dll "VIDC.PIM1"= pclepim1.dll "vidc.VP40"= vp4vfw.dll "vidc.VP50"= vp5vfw.dll "vidc.ffds"= ffdshow.ax "vidc.uldx"= C:\PROGRA~1\ULEADS~1\ULEADV~1.0SE\DivX_UL.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Clock v6.5.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Clock v6.5.lnk backup=C:\WINDOWS\pss\OFFICE One Clock v6.5.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Notes v6.5.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Notes v6.5.lnk backup=C:\WINDOWS\pss\OFFICE One Notes v6.5.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^packard^Menu Démarrer^Programmes^Démarrage^OFFICE One 6.5.lnk] path=D:\Documents and Settings\packard\Menu Démarrer\Programmes\Démarrage\OFFICE One 6.5.lnk backup=C:\WINDOWS\pss\OFFICE One 6.5.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACTIVBOARD] --a--c--- 2003-05-02 11:31 24576 c:\apps\ABoard\ABoard.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] --a--c--- 2005-08-12 15:43 45056 c:\Program Files\ATI Technologies\ATI.ACE\cli.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EmailChecker] --a--c--- 2003-07-02 11:13 40960 C:\APPS\EmailChecker\ech.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a--c--- 2005-05-11 23:12 49152 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-10 15:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchList] --a--c--- 2004-04-07 09:49 49152 C:\Program Files\Pinnacle\Studio 10\LaunchList.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-10-18 12:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck] --a------ 2004-03-11 00:26 406016 C:\WINDOWS\system32\PSDrvCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys] --a--c--- 2005-11-17 10:51 975360 C:\APPS\SMP\SmpSys.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2] --a--c--- 2004-11-26 12:43 90112 C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] -ra------ 2006-03-30 17:45 313472 C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vade Retro Outlook Express] --a--c--- 2004-10-04 14:03 310272 C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\\AOL 9.0\\aol.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"= "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"= "C:\\Program Files\\LimeWire\\LimeWire.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"= "C:\\Program Files\\nero\\Nero 7\\Nero Home\\NeroHome.exe"= "D:\\StubInstaller.exe"= "C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"= "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"= "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"= "C:\\WINDOWS\\system32\\dpvsetup.exe"= "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\APPS\\skype\\phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "9181:TCP"= 9181:TCP:BitComet 9181 TCP "9181:UDP"= 9181:UDP:BitComet 9181 UDP R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe" [2007-01-05 00:13] R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 12:51] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08] R3 VX1000;VX-1000;C:\WINDOWS\system32\DRIVERS\VX1000.sys [2006-12-06 01:39] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 11:45] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 15:18] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81f91e70-f2e2-11da-b0ed-806d6172696f}] \shell\Rip\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c911ba6e-83be-11db-8fdb-806d6172696f}] \shell\play\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L" . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-16 13:00:00 C:\WINDOWS\Tasks\Configurer mon PC.job" - C:\Apps\SMP\PCSETUP.EXE "2008-06-16 13:00:01 C:\WINDOWS\Tasks\Extension de garantie.job" - C:\APPS\SMP\PBCARNOT.EXE "2008-06-16 13:00:00 C:\WINDOWS\Tasks\HDReg.job" - c:\Apps\HDReg\HDRegRem.exe "2008-06-16 13:00:01 C:\WINDOWS\Tasks\Master CD_DVD Creator.job" - C:\Apps\SMP\MCDCHECK.EXE "2008-06-16 12:39:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
  2. Bonsoir Voici le rapport combofix: ComboFix 08-06-10.5 - packard 2008-06-13 15:38:16.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.490 [GMT 2:00] Endroit: D:\Documents and Settings\packard.115263910314.000\Bureau\ComboFix.exe Command switches used :: D:\Documents and Settings\packard.115263910314.000\Bureau\CFScript.txt * Création d'un nouveau point de restauration FILE :: C:\WINDOWS\system32\phoireke.dll C:\WINDOWS\system32\ysdeexcn.dll . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\AskTBar C:\Program Files\AskTBar\bar\History\search2 C:\Program Files\AskTBar\PopSwatr\History\allowed C:\Program Files\AskTBar\PopSwatr\History\notallow C:\Program Files\Eroca C:\Program Files\Eroca\Eroca.exe C:\Program Files\Spcron C:\Program Files\Spcron\Spc.dll C:\WINDOWS\BM8bdc15e9.xml C:\WINDOWS\cookies.ini C:\WINDOWS\pskt.ini C:\WINDOWS\system32\A1 C:\WINDOWS\system32\AGfLoUvw.ini C:\WINDOWS\system32\AGfLoUvw.ini2 C:\WINDOWS\system32\avtkqndf.dll C:\WINDOWS\system32\axiaxkrp.ini C:\WINDOWS\system32\bevwrdky.ini C:\WINDOWS\system32\bjevvqqm.dll C:\WINDOWS\system32\byXRjhhe.dll C:\WINDOWS\system32\Dcbaayay.ini C:\WINDOWS\system32\Dcbaayay.ini2 C:\WINDOWS\system32\dgOWxGgh.ini C:\WINDOWS\system32\dgOWxGgh.ini2 C:\WINDOWS\system32\dkmoreaq.ini C:\WINDOWS\system32\drrdadid.dll C:\WINDOWS\system32\dwpregxx.dll C:\WINDOWS\system32\eeMorBeg.ini C:\WINDOWS\system32\eeMorBeg.ini2 C:\WINDOWS\system32\ehpfkrvk.ini C:\WINDOWS\system32\emgvahim.dll C:\WINDOWS\system32\emvajakj.ini C:\WINDOWS\system32\eymhyyyp.ini C:\WINDOWS\system32\gnecqfqy.dll C:\WINDOWS\system32\hiogtarr.dll C:\WINDOWS\system32\hwcahrvr.ini C:\WINDOWS\system32\IOUtEfhk.ini C:\WINDOWS\system32\IOUtEfhk.ini2 C:\WINDOWS\system32\jkajavme.dll C:\WINDOWS\system32\jkkICUOF.dll C:\WINDOWS\system32\kyxbpuvc.dll C:\WINDOWS\system32\lhvklbbj.dll C:\WINDOWS\system32\lTBJRqru.ini C:\WINDOWS\system32\lTBJRqru.ini2 C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\mqqsegem.dll C:\WINDOWS\system32\msgaobje.dll C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\mytcupoi.ini C:\WINDOWS\system32\ncxeedsy.ini C:\WINDOWS\system32\ncyycfhf.dll C:\WINDOWS\system32\neyuvmsx.ini C:\WINDOWS\system32\nfbjuest.ini C:\WINDOWS\system32\pac.txt C:\WINDOWS\system32\prkxaixa.dll C:\WINDOWS\system32\pxquckge.dll C:\WINDOWS\system32\pyyyhmye.dll C:\WINDOWS\system32\qaeromkd.dll C:\WINDOWS\system32\qgbscpur.ini C:\WINDOWS\system32\QqWELkkj.ini C:\WINDOWS\system32\QqWELkkj.ini2 C:\WINDOWS\system32\qtlswepo.ini C:\WINDOWS\system32\rratgoih.ini C:\WINDOWS\system32\rsthfiac.ini C:\WINDOWS\system32\rupcsbgq.dll C:\WINDOWS\system32\uautcnvb.ini C:\WINDOWS\system32\uwluxuim.dll C:\WINDOWS\system32\W3 C:\WINDOWS\system32\W3\dutdtx2.exe C:\WINDOWS\system32\wdmphhdv.dll C:\WINDOWS\system32\wkrnjpac.dll C:\WINDOWS\system32\wvUligdE.dll C:\WINDOWS\system32\XFiOoUvw.ini C:\WINDOWS\system32\XFiOoUvw.ini2 C:\WINDOWS\system32\xgxeuehc.dll C:\WINDOWS\system32\xixrpern.ini C:\WINDOWS\system32\xlfccxdg.dll C:\WINDOWS\system32\xlokpxjg.dll C:\WINDOWS\system32\xsmvuyen.dll C:\WINDOWS\system32\ycmxclox.dll C:\WINDOWS\system32\ykdrwveb.dll C:\WINDOWS\system32\yqpvnvnh.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_NWSAPAGENT -------\Service_NwSapAgent ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-13 to 2008-06-13 )))))))))))))))))))))))))))))))))))) . 2008-06-13 12:36 . 2008-06-13 15:48 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-06-13 12:36 . 2008-06-13 12:36 1,409 --a------ C:\WINDOWS\QTFont.for 2008-06-12 20:24 . 2008-06-12 20:24 296,960 --a------ C:\WINDOWS\system32\jkkLEWqQ.dll 2008-06-10 15:35 . 2008-06-10 15:35 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Grisoft 2008-06-10 15:33 . 2008-06-10 15:33 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Grisoft 2008-06-10 15:33 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-06-10 07:20 . 2008-06-10 07:20 111,616 --a------ C:\WINDOWS\system32\befpewya.dll 2008-06-09 18:47 . 2008-06-09 18:47 111,616 --a------ C:\WINDOWS\system32\yojdepra.dll 2008-06-06 10:02 . 2008-06-06 10:02 208 --ah----- C:\sqmdata05.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt06.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt05.sqm 2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmdata06.sqm 2008-06-05 20:57 . 2008-06-08 19:46 4 --a------ C:\WINDOWS\msoffice.ini 2008-06-05 17:23 . 2008-06-05 17:26 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-06-05 17:23 . 2008-06-05 17:23 <REP> d-------- C:\Program Files\Spybot - Search & Destroy 2008-06-05 17:11 . 2008-06-05 17:55 <REP> d-------- C:\Program Files\Navilog1 2008-06-05 17:11 . 2008-06-05 17:11 <REP> d-------- C:\Program Files\CCleaner 2008-06-05 16:48 . 2008-06-05 16:55 2,404 --a------ C:\WINDOWS\system32\tmp.reg 2008-06-05 16:47 . 2007-09-22 13:59 3,377 --a------ C:\WINDOWS\msnchk.exe 2008-06-04 22:10 . 2008-06-04 22:10 <REP> d-------- C:\download 2008-06-04 22:09 . 2008-06-04 22:09 <REP> d-------- C:\FACTONLY 2008-06-04 18:46 . 2008-06-08 19:46 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\AOL 2008-06-04 18:35 . 2008-06-04 18:35 <REP> d-------- C:\Program Files\Real 2008-06-04 18:35 . 2008-06-04 18:35 24,576 --a------ C:\WINDOWS\system32\prefscpl.cpl 2008-06-04 18:28 . 2008-06-04 18:28 <REP> d-------- C:\OEMCUST 2008-06-04 18:28 . 2008-06-04 22:09 <REP> d-------- C:\CABS 2008-06-02 21:24 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\LocalService.AUTORITE NT.009\Application Data\X10 Commander 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\ModŠles 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Mes documents 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Favoris 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\packard.115263910314.007 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\NetworkService.AUTORITE NT.009 2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\LocalService.AUTORITE NT.009 2008-06-02 18:00 . 2008-06-10 16:23 <REP> d-------- C:\Program Files\VAV 2008-06-02 18:00 . 2008-05-28 09:10 45,056 --a------ C:\WINDOWS\system32\vav.cpl 2008-06-02 15:50 . 2008-06-04 22:09 <REP> d-------- C:\Program Files\AntiMalwareGuard 2008-06-02 14:54 . 2008-06-02 14:54 294 ---hs---- C:\WINDOWS\system32\xfgllpwx.tmp 2008-06-02 14:54 . 2008-06-02 14:54 294 ---hs---- C:\WINDOWS\system32\xfgllpwx.ini 2008-05-31 08:30 . 2008-06-02 15:55 <REP> d-------- C:\WINDOWS\system32\vntiho18 2008-05-31 01:23 . 2008-05-31 01:23 8,835 --a--c--- C:\WINDOWS\system32\dpufr.qm 2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\WINDOWS\system32\IP5 2008-05-30 21:32 . 2008-05-30 21:32 <REP> d-------- C:\WINDOWS\system32\vntiho05 2008-05-29 12:43 . 2008-05-30 06:40 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Azureus 2008-05-29 12:43 . 2008-05-29 12:43 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Azureus 2008-05-29 12:43 . 2008-06-13 15:19 <REP> d-a------ C:\Program Files\AskSBar 2008-05-25 11:04 . 2008-05-25 20:29 2,516 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2008-05-25 11:04 . 2008-05-25 11:04 8 -r-hs---- C:\WINDOWS\system32\C579545325.sys 2008-05-25 11:00 . 2008-05-25 20:26 <REP> d-------- C:\Program Files\Corel 2008-05-25 09:54 . 2008-05-25 09:57 <REP> d-------- C:\Program Files\Rip It ! 2008-05-23 07:42 . 2008-05-23 07:42 268 --ah----- C:\sqmdata04.sqm 2008-05-23 07:42 . 2008-05-23 07:42 244 --ah----- C:\sqmnoopt04.sqm 2008-05-23 00:22 . 2008-05-23 00:22 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2008-05-23 00:22 . 2008-05-23 00:22 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe 2008-05-23 00:22 . 2008-05-23 00:22 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm 2008-05-23 00:22 . 2008-05-23 00:22 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-05-23 00:20 . 2008-05-23 00:20 1,044,480 --a--c--- C:\WINDOWS\system32\libdivx.dll 2008-05-23 00:20 . 2008-05-23 00:20 200,704 --a--c--- C:\WINDOWS\system32\ssldivx.dll 2008-05-23 00:19 . 2008-05-23 00:19 196,608 --a--c--- C:\WINDOWS\system32\dtu100.dll 2008-05-23 00:19 . 2008-05-23 00:19 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-05-23 00:19 . 2008-05-23 00:19 81,920 --a------ C:\WINDOWS\system32\dpl100.dll 2008-05-23 00:19 . 2008-05-23 00:19 3,067 --a--c--- C:\WINDOWS\system32\dtu_fr.qm 2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest 2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest 2008-05-23 00:18 . 2008-05-23 00:18 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll 2008-05-20 23:04 . 2008-05-20 23:04 32,768 --a------ C:\WINDOWS\system32\vntiho05\vntiho051080.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-13 10:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Skype 2008-06-12 18:13 --------- d-----w C:\Program Files\DivX 2008-06-11 19:38 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\LimeWire 2008-06-08 17:47 --------- d-----w D:\Documents and Settings\All Users\Application Data\AOL 2008-06-08 17:47 --------- d-----w C:\Program Files\Fichiers communs\AOL 2008-05-30 23:22 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll 2008-05-30 23:22 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll 2008-05-30 23:22 815,104 ----a-w C:\WINDOWS\system32\divx_xx0a.dll 2008-05-30 23:22 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll 2008-05-30 23:22 683,520 ----a-w C:\WINDOWS\system32\DivX.dll 2008-05-30 23:22 593,920 -c--a-w C:\WINDOWS\system32\dpuGUI11.dll 2008-05-30 23:22 57,344 -c--a-w C:\WINDOWS\system32\dpv11.dll 2008-05-30 23:22 53,248 -c--a-w C:\WINDOWS\system32\dpuGUI10.dll 2008-05-30 23:22 344,064 -c--a-w C:\WINDOWS\system32\dpus11.dll 2008-05-30 23:22 294,912 -c--a-w C:\WINDOWS\system32\dpu11.dll 2008-05-30 23:22 294,912 -c--a-w C:\WINDOWS\system32\dpu10.dll 2008-05-13 06:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\AdobeUM 2008-05-11 07:53 505,742 ----a-w C:\WINDOWS\macromix.dll 2008-05-11 07:53 30,544 ----a-w C:\WINDOWS\dirdib.drv 2008-05-10 07:27 --------- d-----w C:\Program Files\Sun 2008-05-10 07:27 --------- d-----w C:\Program Files\Java 2008-04-19 09:28 --------- d-----w C:\Program Files\SureThing CD Labeler 5 2008-04-19 09:28 --------- d-----w C:\Program Files\Fichiers communs\SureThing Shared 2008-04-19 09:25 --------- d-----w C:\Program Files\AbiSuite2 2008-04-16 20:18 --------- d-----w D:\Documents and Settings\All Users\Application Data\AVS4YOU 2008-04-16 20:17 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\PC Suite 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Nokia 2008-04-16 20:11 --------- d-----w D:\Documents and Settings\All Users\Application Data\PC Suite 2008-04-16 20:10 --------- d-----w C:\Program Files\PC Connectivity Solution 2008-04-16 20:10 --------- d-----w C:\Program Files\DIFX 2008-04-16 20:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Installations 2008-04-16 19:32 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Acoustica 2008-04-16 18:55 --------- d-----w C:\Program Files\LimeWire 2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll 2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll 2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys 2007-06-16 21:02 774,144 -c--a-w C:\Program Files\RngInterstitial.dll 2007-05-27 20:04 476 ----a-w C:\Program Files\Raccourci vers LimeWire.lnk 2006-06-10 22:26 627,712 -csha-w C:\Program Files\ehthumbs.db 2005-01-16 12:26 17,590,858 -c--a-w C:\Program Files\neodivx.zip . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{840A9079-D9B0-4684-B630-05C9BF04A240}] 2008-06-12 20:24 296960 --a------ C:\WINDOWS\system32\jkkLEWqQ.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15:00 15360] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184] "Skype"="C:\APPS\skype\phone\Skype.exe" [2006-01-18 14:05 19417640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 14:34 64512] "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe] "PinnacleDriverCheck"="C:\WINDOWS\system32\\PSDrvCheck.exe" [2004-03-11 00:26 406016] "BOOT"="C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe" [2002-08-16 15:14 476160] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-03-20 19:02 98304] "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224] "VX1000"="C:\WINDOWS\vVX1000.exe" [2006-12-06 01:38 707360] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] "LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 03:48 275800] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 15:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm "VIDC.MJPG"= Pvmjpg30.dll "VIDC.PIM1"= pclepim1.dll "vidc.VP40"= vp4vfw.dll "vidc.VP50"= vp5vfw.dll "vidc.ffds"= ffdshow.ax "vidc.uldx"= C:\PROGRA~1\ULEADS~1\ULEADV~1.0SE\DivX_UL.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Clock v6.5.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Clock v6.5.lnk backup=C:\WINDOWS\pss\OFFICE One Clock v6.5.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Notes v6.5.lnk] path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Notes v6.5.lnk backup=C:\WINDOWS\pss\OFFICE One Notes v6.5.lnkCommon Startup [HKLM\~\startupfolder\D:^Documents and Settings^packard^Menu Démarrer^Programmes^Démarrage^OFFICE One 6.5.lnk] path=D:\Documents and Settings\packard\Menu Démarrer\Programmes\Démarrage\OFFICE One 6.5.lnk backup=C:\WINDOWS\pss\OFFICE One 6.5.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\88ef2675] C:\WINDOWS\system32\prkxaixa.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACTIVBOARD] --a--c--- 2003-05-02 11:31 24576 c:\apps\ABoard\ABoard.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Antivirus] --a------ 2008-05-28 09:10 325632 C:\Program Files\VAV\vav.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] --a--c--- 2005-08-12 15:43 45056 c:\Program Files\ATI Technologies\ATI.ACE\cli.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BM8bdc15e9] C:\WINDOWS\system32\ycmxclox.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EmailChecker] --a--c--- 2003-07-02 11:13 40960 C:\APPS\EmailChecker\ech.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eroca] C:\Program Files\Eroca\Eroca.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a--c--- 2005-05-11 23:12 49152 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-10 15:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchList] --a--c--- 2004-04-07 09:49 49152 C:\Program Files\Pinnacle\Studio 10\LaunchList.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LSA Shellu] D:\Documents and Settings\packard.115263910314.000\lsass.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-10-18 12:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OoPDFSettingsv6.exe] C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck] --a------ 2004-03-11 00:26 406016 C:\WINDOWS\system32\PSDrvCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys] --a--c--- 2005-11-17 10:51 975360 C:\APPS\SMP\SmpSys.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2] --a--c--- 2004-11-26 12:43 90112 C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] -ra------ 2006-03-30 17:45 313472 C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck] C:\WINDOWS\system32\dumprep 0 -u [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vade Retro Outlook Express] --a--c--- 2004-10-04 14:03 310272 C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\\AOL 9.0\\aol.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"= "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"= "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"= "C:\\Program Files\\LimeWire\\LimeWire.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"= "C:\\Program Files\\nero\\Nero 7\\Nero Home\\NeroHome.exe"= "D:\\StubInstaller.exe"= "C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"= "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"= "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"= "C:\\WINDOWS\\system32\\dpvsetup.exe"= "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\APPS\\skype\\phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "9181:TCP"= 9181:TCP:BitComet 9181 TCP "9181:UDP"= 9181:UDP:BitComet 9181 UDP R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe" [2007-01-05 00:13] R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 12:51] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08] R3 VX1000;VX-1000;C:\WINDOWS\system32\DRIVERS\VX1000.sys [2006-12-06 01:39] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 11:45] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 15:18] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81f91e70-f2e2-11da-b0ed-806d6172696f}] \shell\Rip\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c911ba6e-83be-11db-8fdb-806d6172696f}] \shell\play\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L" . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-13 13:30:00 C:\WINDOWS\Tasks\Configurer mon PC.job" - C:\Apps\SMP\PCSETUP.EXE "2008-06-13 13:30:03 C:\WINDOWS\Tasks\Extension de garantie.job" - C:\APPS\SMP\PBCARNOT.EXE "2008-06-13 13:30:02 C:\WINDOWS\Tasks\HDReg.job" - c:\Apps\HDReg\HDRegRem.exe "2008-06-13 13:30:03 C:\WINDOWS\Tasks\Master CD_DVD Creator.job" - C:\Apps\SMP\MCDCHECK.EXE "2008-06-13 13:39:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
  3. Je m'occupe de faire tout ca en début d'aprem et repost dans la soirée. En attendant merci pour ton aide et bonne aprés midi
  4. Bonjour J'ai réguliérement sur mon bureau des pages de pub qui s'affichent, j'ai pourtant fait un nettoyage avec avast - spybot - avg anti rootki - avg anti - SmitfraudFix - Navilog mais rien n'y fait ! Voici mon rapport, merci de votre aide Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:50:03, on 10/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Safe mode Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE D:\Documents and Settings\packard.115263910314.000\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe O4 - HKLM\..\Run: [bOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [88ef2675] rundll32.exe "C:\WINDOWS\system32\ysdeexcn.dll",b O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [bM8bdc15e9] Rundll32.exe "C:\WINDOWS\system32\phoireke.dll",s O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [skype] "C:\APPS\skype\phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe O4 - Global Startup: pccmsi.lnk = D:\Documents and Settings\packard.115263910314.000\Local Settings\Temp\TIS\setup.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite...vex-2.0.6.0.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/323/webolr/OCX/FlashAX.cab O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 8250 bytes
  5. Probléme résolu, GURU MEDITATION ma mis sur la piste, j'ai téléchargé le pilote realtek hight definition audio drivers en tapant tout simplement le nom sur google Merci pour ton aide
  6. Bonjour et merci pour ton aide J'ai télécharger le pilote ATI puis le pilote son, mais j'ai exactement le mem message d'erreur Your system does not have microsoft's universal audio architecture (UAA) Hight definition audio bus driver installed. You must install this driver before installing the realtek hight definition audio drivers Que dois je faire maintenant ?
  7. Bonjour Suite à un formatage, j'ai réinstallé les pilotes de ma carte mére (site HP) Par contre j'ai un sioucis pour le pilote du son et plus particuliérement le "high definition audio bus driver" que je ne trouve pas. Le pilote du son sur le site HP ne veut pas s'installer car il manque le "high definition audio bus driver" Modéle PC: Compaq presario SR1918FR Quelqu'un aurait-il une idée ?
  8. Bonjour Probléme résolu avec nlite ! Merci pour ton aide dnlilas
  9. Merci pour ton aide quand meme
  10. Oui c'est ca, juste aprés le formatage quand l'installation de XP débute il me demande le drivers, au début je lui ai donné le drivers sata trouvé sur le support hp Comment je peut procéder ?
  11. En fait au démarrage de l'installation j'ai été obligé de faire f6 pour pouvoir installer le drivers sata, j'ai pu commencer l'installation, choisir ma partition, la formater mais tout de suite derriére il me demande d'insérer se fameux intel matrix storage manager driver Je ne peut pas continuer l'installation sans ca ! Comment je peut faire ?
  12. Je m'excuse, j'ai enfin réussi a télécharger ton fichier zip, j'ai dézippé l'archive sur la disquette, la disquette contien bien tous les fichiers que tu me dis mais rien ne se passe quand je valide pour poursuivre mon installation Que faire ?
  13. Merci pour le lien, je m'excuse mais je ne suis pas des plus doué, je ne trouve pas le fichier que tu veut que je télécharge !?!
  14. Bonjour dnlilas C'est un .exe, quand je fais l'installation je ne trouve pas les fichiers que tu me donne, seulement iaahci et iastor Comment faire, je commence à désespérer !!
  15. Bonjour J'ai réussi à installer le driver SATA avec un lecteur de disquette USB, par contre maintenant il me demande d'insérer la disquette intel matrix storage manager driver, je l'ai trouvé sur le site de HP mais le fichier fait 17,6 Mo donc ne tient pas sur une disquette, comment faire, je suis bloqué !!! Merci
×
×
  • Créer...