Aller au contenu

after42

Membres
  • Compteur de contenus

    147
  • Inscription

  • Dernière visite

Messages posté(e)s par after42

  1. Salut

     

    Non ce n'est pas pour ca que je ne répond pas, je n'avais pas encore éffectué le lettoyge demandé

     

    Voici le rapport Combofix

     

    ComboFix 08-06-10.5 - packard 2008-06-16 15:13:31.2 - NTFSx86

    Endroit: D:\Documents and Settings\packard.115263910314.000\Bureau\ComboFix.exe

    Command switches used :: D:\Documents and Settings\packard.115263910314.000\Bureau\CFScript.txt

    * Création d'un nouveau point de restauration

     

    FILE ::

    C:\WINDOWS\system32\C579545325.sys

    C:\WINDOWS\system32\xfgllpwx.ini

    C:\WINDOWS\system32\xfgllpwx.tmp

    D:\Documents and Settings\packard.115263910314.000\lsass.exe

    .

     

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    C:\Program Files\AskSBar

    C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    C:\Program Files\VAV

    C:\Program Files\VAV\vav.cpl

    C:\Program Files\VAV\vav.exe

    C:\Program Files\VAV\vav1.dat

    C:\WINDOWS\BM8bdc15e9.xml

    C:\WINDOWS\cookies.ini

    C:\WINDOWS\pskt.ini

    C:\WINDOWS\system32\AIOXayay.ini

    C:\WINDOWS\system32\AIOXayay.ini2

    C:\WINDOWS\system32\apbdfccv.dll

    C:\WINDOWS\system32\befpewya.dll

    C:\WINDOWS\system32\C579545325.sys

    C:\WINDOWS\system32\ckbjvcik.dll

    C:\WINDOWS\system32\duthwoab.dll

    C:\WINDOWS\system32\ehunmnef.ini

    C:\WINDOWS\system32\hjmrdlrm.dll

    C:\WINDOWS\system32\hmhkugdu.dll

    C:\WINDOWS\system32\ikxqhrvj.dll

    C:\WINDOWS\system32\ivyfqeea.ini

    C:\WINDOWS\system32\JPstBJjl.ini

    C:\WINDOWS\system32\JPstBJjl.ini2

    C:\WINDOWS\system32\jQrAJRqr.ini

    C:\WINDOWS\system32\jQrAJRqr.ini2

    C:\WINDOWS\system32\lvwmmqya.ini

    C:\WINDOWS\system32\munuydbb.dll

    C:\WINDOWS\system32\pckbegar.dll

    C:\WINDOWS\system32\QqWELkkj.ini

    C:\WINDOWS\system32\QqWELkkj.ini2

    C:\WINDOWS\system32\rqRJArQj.dll

    C:\WINDOWS\system32\rqRLBUNf.dll

    C:\WINDOWS\system32\sxghlsqk.ini

    C:\WINDOWS\system32\usdqaril.dll

    C:\WINDOWS\system32\vccfdbpa.ini

    C:\WINDOWS\system32\vntiho05

    C:\WINDOWS\system32\vntiho18

    C:\WINDOWS\system32\vsopxjnn.dll

    C:\WINDOWS\system32\wmicrfct.dll

    C:\WINDOWS\system32\xfgllpwx.ini

    C:\WINDOWS\system32\xfgllpwx.tmp

    C:\WINDOWS\system32\yojdepra.dll

    .

    ---- Previous Run -------

    .

    C:\Program Files\AskTBar

    C:\Program Files\AskTBar\bar\History\search2

    C:\Program Files\AskTBar\PopSwatr\History\allowed

    C:\Program Files\AskTBar\PopSwatr\History\notallow

    C:\Program Files\Eroca

    C:\Program Files\Eroca\Eroca.exe

    C:\Program Files\Spcron

    C:\Program Files\Spcron\Spc.dll

    C:\WINDOWS\BM8bdc15e9.xml

    C:\WINDOWS\cookies.ini

    C:\WINDOWS\pskt.ini

    C:\WINDOWS\system32\A1

    C:\WINDOWS\system32\AGfLoUvw.ini

    C:\WINDOWS\system32\AGfLoUvw.ini2

    C:\WINDOWS\system32\avtkqndf.dll

    C:\WINDOWS\system32\axiaxkrp.ini

    C:\WINDOWS\system32\bevwrdky.ini

    C:\WINDOWS\system32\bjevvqqm.dll

    C:\WINDOWS\system32\byXRjhhe.dll

    C:\WINDOWS\system32\Dcbaayay.ini

    C:\WINDOWS\system32\Dcbaayay.ini2

    C:\WINDOWS\system32\dgOWxGgh.ini

    C:\WINDOWS\system32\dgOWxGgh.ini2

    C:\WINDOWS\system32\dkmoreaq.ini

    C:\WINDOWS\system32\drrdadid.dll

    C:\WINDOWS\system32\dwpregxx.dll

    C:\WINDOWS\system32\eeMorBeg.ini

    C:\WINDOWS\system32\eeMorBeg.ini2

    C:\WINDOWS\system32\ehpfkrvk.ini

    C:\WINDOWS\system32\emgvahim.dll

    C:\WINDOWS\system32\emvajakj.ini

    C:\WINDOWS\system32\eymhyyyp.ini

    C:\WINDOWS\system32\gnecqfqy.dll

    C:\WINDOWS\system32\hiogtarr.dll

    C:\WINDOWS\system32\hwcahrvr.ini

    C:\WINDOWS\system32\IOUtEfhk.ini

    C:\WINDOWS\system32\IOUtEfhk.ini2

    C:\WINDOWS\system32\jkajavme.dll

    C:\WINDOWS\system32\jkkICUOF.dll

    C:\WINDOWS\system32\kyxbpuvc.dll

    C:\WINDOWS\system32\lhvklbbj.dll

    C:\WINDOWS\system32\lTBJRqru.ini

    C:\WINDOWS\system32\lTBJRqru.ini2

    C:\WINDOWS\system32\mcrh.tmp

    C:\WINDOWS\system32\mqqsegem.dll

    C:\WINDOWS\system32\msgaobje.dll

    C:\WINDOWS\system32\MSINET.oca

    C:\WINDOWS\system32\mytcupoi.ini

    C:\WINDOWS\system32\ncxeedsy.ini

    C:\WINDOWS\system32\ncyycfhf.dll

    C:\WINDOWS\system32\neyuvmsx.ini

    C:\WINDOWS\system32\nfbjuest.ini

    C:\WINDOWS\system32\pac.txt

    C:\WINDOWS\system32\prkxaixa.dll

    C:\WINDOWS\system32\pxquckge.dll

    C:\WINDOWS\system32\pyyyhmye.dll

    C:\WINDOWS\system32\qaeromkd.dll

    C:\WINDOWS\system32\qgbscpur.ini

    C:\WINDOWS\system32\QqWELkkj.ini

    C:\WINDOWS\system32\QqWELkkj.ini2

    C:\WINDOWS\system32\qtlswepo.ini

    C:\WINDOWS\system32\rratgoih.ini

    C:\WINDOWS\system32\rsthfiac.ini

    C:\WINDOWS\system32\rupcsbgq.dll

    C:\WINDOWS\system32\uautcnvb.ini

    C:\WINDOWS\system32\uwluxuim.dll

    C:\WINDOWS\system32\W3

    C:\WINDOWS\system32\W3\dutdtx2.exe

    C:\WINDOWS\system32\wdmphhdv.dll

    C:\WINDOWS\system32\wkrnjpac.dll

    C:\WINDOWS\system32\wvUligdE.dll

    C:\WINDOWS\system32\XFiOoUvw.ini

    C:\WINDOWS\system32\XFiOoUvw.ini2

    C:\WINDOWS\system32\xgxeuehc.dll

    C:\WINDOWS\system32\xixrpern.ini

    C:\WINDOWS\system32\xlfccxdg.dll

    C:\WINDOWS\system32\xlokpxjg.dll

    C:\WINDOWS\system32\xsmvuyen.dll

    C:\WINDOWS\system32\ycmxclox.dll

    C:\WINDOWS\system32\ykdrwveb.dll

    C:\WINDOWS\system32\yqpvnvnh.dll

     

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    -------\Legacy_NWSAPAGENT

    -------\Service_NwSapAgent

     

     

    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-16 to 2008-06-16 ))))))))))))))))))))))))))))))))))))

    .

     

    2008-06-10 15:35 . 2008-06-10 15:35 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Grisoft

    2008-06-10 15:33 . 2008-06-10 15:33 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Grisoft

    2008-06-10 15:33 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

    2008-06-06 10:02 . 2008-06-06 10:02 208 --ah----- C:\sqmdata05.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt06.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt05.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmdata06.sqm

    2008-06-05 20:57 . 2008-06-08 19:46 4 --a------ C:\WINDOWS\msoffice.ini

    2008-06-05 17:23 . 2008-06-05 17:26 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

    2008-06-05 17:23 . 2008-06-05 17:23 <REP> d-------- C:\Program Files\Spybot - Search & Destroy

    2008-06-05 17:11 . 2008-06-05 17:55 <REP> d-------- C:\Program Files\Navilog1

    2008-06-05 17:11 . 2008-06-05 17:11 <REP> d-------- C:\Program Files\CCleaner

    2008-06-05 16:48 . 2008-06-05 16:55 2,404 --a------ C:\WINDOWS\system32\tmp.reg

    2008-06-05 16:47 . 2007-09-22 13:59 3,377 --a------ C:\WINDOWS\msnchk.exe

    2008-06-04 22:10 . 2008-06-04 22:10 <REP> d-------- C:\download

    2008-06-04 22:09 . 2008-06-04 22:09 <REP> d-------- C:\FACTONLY

    2008-06-04 18:46 . 2008-06-08 19:46 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\AOL

    2008-06-04 18:35 . 2008-06-04 18:35 <REP> d-------- C:\Program Files\Real

    2008-06-04 18:35 . 2008-06-04 18:35 24,576 --a------ C:\WINDOWS\system32\prefscpl.cpl

    2008-06-04 18:28 . 2008-06-04 18:28 <REP> d-------- C:\OEMCUST

    2008-06-04 18:28 . 2008-06-04 22:09 <REP> d-------- C:\CABS

    2008-06-02 21:24 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\LocalService.AUTORITE NT.009\Application Data\X10 Commander

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\ModŠles

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Mes documents

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Favoris

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\packard.115263910314.007

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\NetworkService.AUTORITE NT.009

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\LocalService.AUTORITE NT.009

    2008-06-02 18:00 . 2008-05-28 09:10 45,056 --a------ C:\WINDOWS\system32\vav.cpl

    2008-06-02 15:50 . 2008-06-04 22:09 <REP> d-------- C:\Program Files\AntiMalwareGuard

    2008-05-31 01:23 . 2008-05-31 01:23 8,835 --a--c--- C:\WINDOWS\system32\dpufr.qm

    2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\WINDOWS\system32\IP5

    2008-05-29 12:43 . 2008-05-30 06:40 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Azureus

    2008-05-29 12:43 . 2008-05-29 12:43 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Azureus

    2008-05-25 11:04 . 2008-05-25 20:29 2,516 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys

    2008-05-25 11:00 . 2008-05-25 20:26 <REP> d-------- C:\Program Files\Corel

    2008-05-25 09:54 . 2008-05-25 09:57 <REP> d-------- C:\Program Files\Rip It !

    2008-05-23 07:42 . 2008-05-23 07:42 268 --ah----- C:\sqmdata04.sqm

    2008-05-23 07:42 . 2008-05-23 07:42 244 --ah----- C:\sqmnoopt04.sqm

    2008-05-23 00:22 . 2008-05-23 00:22 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll

    2008-05-23 00:22 . 2008-05-23 00:22 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe

    2008-05-23 00:22 . 2008-05-23 00:22 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm

    2008-05-23 00:22 . 2008-05-23 00:22 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb

    2008-05-23 00:20 . 2008-05-23 00:20 1,044,480 --a--c--- C:\WINDOWS\system32\libdivx.dll

    2008-05-23 00:20 . 2008-05-23 00:20 200,704 --a--c--- C:\WINDOWS\system32\ssldivx.dll

    2008-05-23 00:19 . 2008-05-23 00:19 196,608 --a--c--- C:\WINDOWS\system32\dtu100.dll

    2008-05-23 00:19 . 2008-05-23 00:19 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe

    2008-05-23 00:19 . 2008-05-23 00:19 81,920 --a------ C:\WINDOWS\system32\dpl100.dll

    2008-05-23 00:19 . 2008-05-23 00:19 3,067 --a--c--- C:\WINDOWS\system32\dtu_fr.qm

    2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest

    2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest

    2008-05-23 00:18 . 2008-05-23 00:18 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll

     

    .

    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-06-15 07:35 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Skype

    2008-06-14 17:04 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\LimeWire

    2008-06-12 18:13 --------- d-----w C:\Program Files\DivX

    2008-06-08 17:47 --------- d-----w D:\Documents and Settings\All Users\Application Data\AOL

    2008-06-08 17:47 --------- d-----w C:\Program Files\Fichiers communs\AOL

    2008-05-13 06:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\AdobeUM

    2008-05-11 07:53 505,742 ----a-w C:\WINDOWS\macromix.dll

    2008-05-11 07:53 30,544 ----a-w C:\WINDOWS\dirdib.drv

    2008-05-10 07:27 --------- d-----w C:\Program Files\Sun

    2008-05-10 07:27 --------- d-----w C:\Program Files\Java

    2008-04-19 09:28 --------- d-----w C:\Program Files\SureThing CD Labeler 5

    2008-04-19 09:28 --------- d-----w C:\Program Files\Fichiers communs\SureThing Shared

    2008-04-19 09:25 --------- d-----w C:\Program Files\AbiSuite2

    2008-04-16 20:18 --------- d-----w D:\Documents and Settings\All Users\Application Data\AVS4YOU

    2008-04-16 20:17 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\PC Suite

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Nokia

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\All Users\Application Data\PC Suite

    2008-04-16 20:10 --------- d-----w C:\Program Files\PC Connectivity Solution

    2008-04-16 20:10 --------- d-----w C:\Program Files\DIFX

    2008-04-16 20:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Installations

    2008-04-16 19:32 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Acoustica

    2008-04-16 18:55 --------- d-----w C:\Program Files\LimeWire

    2007-06-16 21:02 774,144 -c--a-w C:\Program Files\RngInterstitial.dll

    2007-05-27 20:04 476 ----a-w C:\Program Files\Raccourci vers LimeWire.lnk

    2006-06-10 22:26 627,712 -csha-w C:\Program Files\ehthumbs.db

    2005-01-16 12:26 17,590,858 -c--a-w C:\Program Files\neodivx.zip

    .

     

    ((((((((((((((((((((((((((((( snapshot@2008-06-13_15.53.00.18 )))))))))))))))))))))))))))))))))))))))))

    .

    - 2008-06-13 13:47:43 2,048 --s-a-w C:\WINDOWS\bootstat.dat

    + 2008-06-16 13:19:39 2,048 --s-a-w C:\WINDOWS\bootstat.dat

    + 2008-06-16 13:22:21 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_ca8.dat

    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    REGEDIT4

    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15:00 15360]

    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]

    "Skype"="C:\APPS\skype\phone\Skype.exe" [2006-01-18 14:05 19417640]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 14:34 64512]

    "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]

    "PinnacleDriverCheck"="C:\WINDOWS\system32\\PSDrvCheck.exe" [2004-03-11 00:26 406016]

    "BOOT"="C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe" [2002-08-16 15:14 476160]

    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-03-20 19:02 98304]

    "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939]

    "VX1000"="C:\WINDOWS\vVX1000.exe" [2006-12-06 01:38 707360]

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

    "LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 03:48 275800]

    "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]

    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

     

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 15:00 15360]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles

    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm

    "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm

    "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm

    "VIDC.MJPG"= Pvmjpg30.dll

    "VIDC.PIM1"= pclepim1.dll

    "vidc.VP40"= vp4vfw.dll

    "vidc.VP50"= vp5vfw.dll

    "vidc.ffds"= ffdshow.ax

    "vidc.uldx"= C:\PROGRA~1\ULEADS~1\ULEADV~1.0SE\DivX_UL.dll

     

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk

    backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk

    backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk

    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Clock v6.5.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Clock v6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One Clock v6.5.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Notes v6.5.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Notes v6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One Notes v6.5.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^packard^Menu Démarrer^Programmes^Démarrage^OFFICE One 6.5.lnk]

    path=D:\Documents and Settings\packard\Menu Démarrer\Programmes\Démarrage\OFFICE One 6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One 6.5.lnkStartup

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACTIVBOARD]

    --a--c--- 2003-05-02 11:31 24576 c:\apps\ABoard\ABoard.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

    --a--c--- 2005-08-12 15:43 45056 c:\Program Files\ATI Technologies\ATI.ACE\cli.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EmailChecker]

    --a--c--- 2003-07-02 11:13 40960 C:\APPS\EmailChecker\ech.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

    --a--c--- 2005-05-11 23:12 49152 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]

    --a--c--- 2004-08-10 15:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchList]

    --a--c--- 2004-04-07 09:49 49152 C:\Program Files\Pinnacle\Studio 10\LaunchList.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

    --------- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

    --a------ 2007-10-18 12:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OoPDFSettingsv6.exe]

    C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]

    --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]

    --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]

    --a------ 2004-03-11 00:26 406016 C:\WINDOWS\system32\PSDrvCheck.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys]

    --a--c--- 2005-11-17 10:51 975360 C:\APPS\SMP\SmpSys.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]

    C:\PROGRA~1\SYMNET~1\SNDMon.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2]

    --a--c--- 2004-11-26 12:43 90112 C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]

    -ra------ 2006-03-30 17:45 313472 C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vade Retro Outlook Express]

    --a--c--- 2004-10-04 14:03 310272 C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%ProgramFiles%\\AOL 9.0\\aol.exe"=

    "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=

    "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=

    "C:\\Program Files\\LimeWire\\LimeWire.exe"=

    "C:\\Program Files\\Messenger\\msmsgs.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "C:\\Program Files\\nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=

    "C:\\Program Files\\nero\\Nero 7\\Nero Home\\NeroHome.exe"=

    "D:\\StubInstaller.exe"=

    "C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=

    "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=

    "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

    "C:\\WINDOWS\\system32\\dpvsetup.exe"=

    "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    "C:\\APPS\\skype\\phone\\Skype.exe"=

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "9181:TCP"= 9181:TCP:BitComet 9181 TCP

    "9181:UDP"= 9181:UDP:BitComet 9181 UDP

     

    R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe" [2007-01-05 00:13]

    R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 12:51]

    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08]

    R3 VX1000;VX-1000;C:\WINDOWS\system32\DRIVERS\VX1000.sys [2006-12-06 01:39]

    R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 11:45]

    S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 15:18]

    S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81f91e70-f2e2-11da-b0ed-806d6172696f}]

    \shell\Rip\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L"

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c911ba6e-83be-11db-8fdb-806d6172696f}]

    \shell\play\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"

     

    .

    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

    "2008-06-16 13:00:00 C:\WINDOWS\Tasks\Configurer mon PC.job"

    - C:\Apps\SMP\PCSETUP.EXE

    "2008-06-16 13:00:01 C:\WINDOWS\Tasks\Extension de garantie.job"

    - C:\APPS\SMP\PBCARNOT.EXE

    "2008-06-16 13:00:00 C:\WINDOWS\Tasks\HDReg.job"

    - c:\Apps\HDReg\HDRegRem.exe

    "2008-06-16 13:00:01 C:\WINDOWS\Tasks\Master CD_DVD Creator.job"

    - C:\Apps\SMP\MCDCHECK.EXE

    "2008-06-16 12:39:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

  2. Bonsoir

     

    Voici le rapport combofix:

     

    ComboFix 08-06-10.5 - packard 2008-06-13 15:38:16.1 - NTFSx86

    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.490 [GMT 2:00]

    Endroit: D:\Documents and Settings\packard.115263910314.000\Bureau\ComboFix.exe

    Command switches used :: D:\Documents and Settings\packard.115263910314.000\Bureau\CFScript.txt

    * Création d'un nouveau point de restauration

     

    FILE ::

    C:\WINDOWS\system32\phoireke.dll

    C:\WINDOWS\system32\ysdeexcn.dll

    .

     

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    C:\Program Files\AskTBar

    C:\Program Files\AskTBar\bar\History\search2

    C:\Program Files\AskTBar\PopSwatr\History\allowed

    C:\Program Files\AskTBar\PopSwatr\History\notallow

    C:\Program Files\Eroca

    C:\Program Files\Eroca\Eroca.exe

    C:\Program Files\Spcron

    C:\Program Files\Spcron\Spc.dll

    C:\WINDOWS\BM8bdc15e9.xml

    C:\WINDOWS\cookies.ini

    C:\WINDOWS\pskt.ini

    C:\WINDOWS\system32\A1

    C:\WINDOWS\system32\AGfLoUvw.ini

    C:\WINDOWS\system32\AGfLoUvw.ini2

    C:\WINDOWS\system32\avtkqndf.dll

    C:\WINDOWS\system32\axiaxkrp.ini

    C:\WINDOWS\system32\bevwrdky.ini

    C:\WINDOWS\system32\bjevvqqm.dll

    C:\WINDOWS\system32\byXRjhhe.dll

    C:\WINDOWS\system32\Dcbaayay.ini

    C:\WINDOWS\system32\Dcbaayay.ini2

    C:\WINDOWS\system32\dgOWxGgh.ini

    C:\WINDOWS\system32\dgOWxGgh.ini2

    C:\WINDOWS\system32\dkmoreaq.ini

    C:\WINDOWS\system32\drrdadid.dll

    C:\WINDOWS\system32\dwpregxx.dll

    C:\WINDOWS\system32\eeMorBeg.ini

    C:\WINDOWS\system32\eeMorBeg.ini2

    C:\WINDOWS\system32\ehpfkrvk.ini

    C:\WINDOWS\system32\emgvahim.dll

    C:\WINDOWS\system32\emvajakj.ini

    C:\WINDOWS\system32\eymhyyyp.ini

    C:\WINDOWS\system32\gnecqfqy.dll

    C:\WINDOWS\system32\hiogtarr.dll

    C:\WINDOWS\system32\hwcahrvr.ini

    C:\WINDOWS\system32\IOUtEfhk.ini

    C:\WINDOWS\system32\IOUtEfhk.ini2

    C:\WINDOWS\system32\jkajavme.dll

    C:\WINDOWS\system32\jkkICUOF.dll

    C:\WINDOWS\system32\kyxbpuvc.dll

    C:\WINDOWS\system32\lhvklbbj.dll

    C:\WINDOWS\system32\lTBJRqru.ini

    C:\WINDOWS\system32\lTBJRqru.ini2

    C:\WINDOWS\system32\mcrh.tmp

    C:\WINDOWS\system32\mqqsegem.dll

    C:\WINDOWS\system32\msgaobje.dll

    C:\WINDOWS\system32\MSINET.oca

    C:\WINDOWS\system32\mytcupoi.ini

    C:\WINDOWS\system32\ncxeedsy.ini

    C:\WINDOWS\system32\ncyycfhf.dll

    C:\WINDOWS\system32\neyuvmsx.ini

    C:\WINDOWS\system32\nfbjuest.ini

    C:\WINDOWS\system32\pac.txt

    C:\WINDOWS\system32\prkxaixa.dll

    C:\WINDOWS\system32\pxquckge.dll

    C:\WINDOWS\system32\pyyyhmye.dll

    C:\WINDOWS\system32\qaeromkd.dll

    C:\WINDOWS\system32\qgbscpur.ini

    C:\WINDOWS\system32\QqWELkkj.ini

    C:\WINDOWS\system32\QqWELkkj.ini2

    C:\WINDOWS\system32\qtlswepo.ini

    C:\WINDOWS\system32\rratgoih.ini

    C:\WINDOWS\system32\rsthfiac.ini

    C:\WINDOWS\system32\rupcsbgq.dll

    C:\WINDOWS\system32\uautcnvb.ini

    C:\WINDOWS\system32\uwluxuim.dll

    C:\WINDOWS\system32\W3

    C:\WINDOWS\system32\W3\dutdtx2.exe

    C:\WINDOWS\system32\wdmphhdv.dll

    C:\WINDOWS\system32\wkrnjpac.dll

    C:\WINDOWS\system32\wvUligdE.dll

    C:\WINDOWS\system32\XFiOoUvw.ini

    C:\WINDOWS\system32\XFiOoUvw.ini2

    C:\WINDOWS\system32\xgxeuehc.dll

    C:\WINDOWS\system32\xixrpern.ini

    C:\WINDOWS\system32\xlfccxdg.dll

    C:\WINDOWS\system32\xlokpxjg.dll

    C:\WINDOWS\system32\xsmvuyen.dll

    C:\WINDOWS\system32\ycmxclox.dll

    C:\WINDOWS\system32\ykdrwveb.dll

    C:\WINDOWS\system32\yqpvnvnh.dll

     

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    -------\Legacy_NWSAPAGENT

    -------\Service_NwSapAgent

     

     

    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-13 to 2008-06-13 ))))))))))))))))))))))))))))))))))))

    .

     

    2008-06-13 12:36 . 2008-06-13 15:48 54,156 --ah----- C:\WINDOWS\QTFont.qfn

    2008-06-13 12:36 . 2008-06-13 12:36 1,409 --a------ C:\WINDOWS\QTFont.for

    2008-06-12 20:24 . 2008-06-12 20:24 296,960 --a------ C:\WINDOWS\system32\jkkLEWqQ.dll

    2008-06-10 15:35 . 2008-06-10 15:35 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Grisoft

    2008-06-10 15:33 . 2008-06-10 15:33 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Grisoft

    2008-06-10 15:33 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

    2008-06-10 07:20 . 2008-06-10 07:20 111,616 --a------ C:\WINDOWS\system32\befpewya.dll

    2008-06-09 18:47 . 2008-06-09 18:47 111,616 --a------ C:\WINDOWS\system32\yojdepra.dll

    2008-06-06 10:02 . 2008-06-06 10:02 208 --ah----- C:\sqmdata05.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt06.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmnoopt05.sqm

    2008-06-06 10:02 . 2008-06-06 10:02 172 --ah----- C:\sqmdata06.sqm

    2008-06-05 20:57 . 2008-06-08 19:46 4 --a------ C:\WINDOWS\msoffice.ini

    2008-06-05 17:23 . 2008-06-05 17:26 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

    2008-06-05 17:23 . 2008-06-05 17:23 <REP> d-------- C:\Program Files\Spybot - Search & Destroy

    2008-06-05 17:11 . 2008-06-05 17:55 <REP> d-------- C:\Program Files\Navilog1

    2008-06-05 17:11 . 2008-06-05 17:11 <REP> d-------- C:\Program Files\CCleaner

    2008-06-05 16:48 . 2008-06-05 16:55 2,404 --a------ C:\WINDOWS\system32\tmp.reg

    2008-06-05 16:47 . 2007-09-22 13:59 3,377 --a------ C:\WINDOWS\msnchk.exe

    2008-06-04 22:10 . 2008-06-04 22:10 <REP> d-------- C:\download

    2008-06-04 22:09 . 2008-06-04 22:09 <REP> d-------- C:\FACTONLY

    2008-06-04 18:46 . 2008-06-08 19:46 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\AOL

    2008-06-04 18:35 . 2008-06-04 18:35 <REP> d-------- C:\Program Files\Real

    2008-06-04 18:35 . 2008-06-04 18:35 24,576 --a------ C:\WINDOWS\system32\prefscpl.cpl

    2008-06-04 18:28 . 2008-06-04 18:28 <REP> d-------- C:\OEMCUST

    2008-06-04 18:28 . 2008-06-04 22:09 <REP> d-------- C:\CABS

    2008-06-02 21:24 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\LocalService.AUTORITE NT.009\Application Data\X10 Commander

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\ModŠles

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Mes documents

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d-------- D:\Documents and Settings\packard.115263910314.007\Favoris

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\packard.115263910314.007

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\NetworkService.AUTORITE NT.009

    2008-06-02 21:17 . 2008-06-02 21:24 <REP> d---s---- D:\Documents and Settings\LocalService.AUTORITE NT.009

    2008-06-02 18:00 . 2008-06-10 16:23 <REP> d-------- C:\Program Files\VAV

    2008-06-02 18:00 . 2008-05-28 09:10 45,056 --a------ C:\WINDOWS\system32\vav.cpl

    2008-06-02 15:50 . 2008-06-04 22:09 <REP> d-------- C:\Program Files\AntiMalwareGuard

    2008-06-02 14:54 . 2008-06-02 14:54 294 ---hs---- C:\WINDOWS\system32\xfgllpwx.tmp

    2008-06-02 14:54 . 2008-06-02 14:54 294 ---hs---- C:\WINDOWS\system32\xfgllpwx.ini

    2008-05-31 08:30 . 2008-06-02 15:55 <REP> d-------- C:\WINDOWS\system32\vntiho18

    2008-05-31 01:23 . 2008-05-31 01:23 8,835 --a--c--- C:\WINDOWS\system32\dpufr.qm

    2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\WINDOWS\system32\IP5

    2008-05-30 21:32 . 2008-05-30 21:32 <REP> d-------- C:\WINDOWS\system32\vntiho05

    2008-05-29 12:43 . 2008-05-30 06:40 <REP> d-------- D:\Documents and Settings\packard.115263910314.000\Application Data\Azureus

    2008-05-29 12:43 . 2008-05-29 12:43 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Azureus

    2008-05-29 12:43 . 2008-06-13 15:19 <REP> d-a------ C:\Program Files\AskSBar

    2008-05-25 11:04 . 2008-05-25 20:29 2,516 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys

    2008-05-25 11:04 . 2008-05-25 11:04 8 -r-hs---- C:\WINDOWS\system32\C579545325.sys

    2008-05-25 11:00 . 2008-05-25 20:26 <REP> d-------- C:\Program Files\Corel

    2008-05-25 09:54 . 2008-05-25 09:57 <REP> d-------- C:\Program Files\Rip It !

    2008-05-23 07:42 . 2008-05-23 07:42 268 --ah----- C:\sqmdata04.sqm

    2008-05-23 07:42 . 2008-05-23 07:42 244 --ah----- C:\sqmnoopt04.sqm

    2008-05-23 00:22 . 2008-05-23 00:22 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll

    2008-05-23 00:22 . 2008-05-23 00:22 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe

    2008-05-23 00:22 . 2008-05-23 00:22 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm

    2008-05-23 00:22 . 2008-05-23 00:22 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb

    2008-05-23 00:20 . 2008-05-23 00:20 1,044,480 --a--c--- C:\WINDOWS\system32\libdivx.dll

    2008-05-23 00:20 . 2008-05-23 00:20 200,704 --a--c--- C:\WINDOWS\system32\ssldivx.dll

    2008-05-23 00:19 . 2008-05-23 00:19 196,608 --a--c--- C:\WINDOWS\system32\dtu100.dll

    2008-05-23 00:19 . 2008-05-23 00:19 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe

    2008-05-23 00:19 . 2008-05-23 00:19 81,920 --a------ C:\WINDOWS\system32\dpl100.dll

    2008-05-23 00:19 . 2008-05-23 00:19 3,067 --a--c--- C:\WINDOWS\system32\dtu_fr.qm

    2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest

    2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest

    2008-05-23 00:18 . 2008-05-23 00:18 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll

    2008-05-20 23:04 . 2008-05-20 23:04 32,768 --a------ C:\WINDOWS\system32\vntiho05\vntiho051080.exe

     

    .

    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-06-13 10:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Skype

    2008-06-12 18:13 --------- d-----w C:\Program Files\DivX

    2008-06-11 19:38 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\LimeWire

    2008-06-08 17:47 --------- d-----w D:\Documents and Settings\All Users\Application Data\AOL

    2008-06-08 17:47 --------- d-----w C:\Program Files\Fichiers communs\AOL

    2008-05-30 23:22 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll

    2008-05-30 23:22 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll

    2008-05-30 23:22 815,104 ----a-w C:\WINDOWS\system32\divx_xx0a.dll

    2008-05-30 23:22 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll

    2008-05-30 23:22 683,520 ----a-w C:\WINDOWS\system32\DivX.dll

    2008-05-30 23:22 593,920 -c--a-w C:\WINDOWS\system32\dpuGUI11.dll

    2008-05-30 23:22 57,344 -c--a-w C:\WINDOWS\system32\dpv11.dll

    2008-05-30 23:22 53,248 -c--a-w C:\WINDOWS\system32\dpuGUI10.dll

    2008-05-30 23:22 344,064 -c--a-w C:\WINDOWS\system32\dpus11.dll

    2008-05-30 23:22 294,912 -c--a-w C:\WINDOWS\system32\dpu11.dll

    2008-05-30 23:22 294,912 -c--a-w C:\WINDOWS\system32\dpu10.dll

    2008-05-13 06:33 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\AdobeUM

    2008-05-11 07:53 505,742 ----a-w C:\WINDOWS\macromix.dll

    2008-05-11 07:53 30,544 ----a-w C:\WINDOWS\dirdib.drv

    2008-05-10 07:27 --------- d-----w C:\Program Files\Sun

    2008-05-10 07:27 --------- d-----w C:\Program Files\Java

    2008-04-19 09:28 --------- d-----w C:\Program Files\SureThing CD Labeler 5

    2008-04-19 09:28 --------- d-----w C:\Program Files\Fichiers communs\SureThing Shared

    2008-04-19 09:25 --------- d-----w C:\Program Files\AbiSuite2

    2008-04-16 20:18 --------- d-----w D:\Documents and Settings\All Users\Application Data\AVS4YOU

    2008-04-16 20:17 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\PC Suite

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Nokia

    2008-04-16 20:11 --------- d-----w D:\Documents and Settings\All Users\Application Data\PC Suite

    2008-04-16 20:10 --------- d-----w C:\Program Files\PC Connectivity Solution

    2008-04-16 20:10 --------- d-----w C:\Program Files\DIFX

    2008-04-16 20:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Installations

    2008-04-16 19:32 --------- d-----w D:\Documents and Settings\packard.115263910314.000\Application Data\Acoustica

    2008-04-16 18:55 --------- d-----w C:\Program Files\LimeWire

    2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll

    2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll

    2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys

    2007-06-16 21:02 774,144 -c--a-w C:\Program Files\RngInterstitial.dll

    2007-05-27 20:04 476 ----a-w C:\Program Files\Raccourci vers LimeWire.lnk

    2006-06-10 22:26 627,712 -csha-w C:\Program Files\ehthumbs.db

    2005-01-16 12:26 17,590,858 -c--a-w C:\Program Files\neodivx.zip

    .

     

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    REGEDIT4

    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

     

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{840A9079-D9B0-4684-B630-05C9BF04A240}]

    2008-06-12 20:24 296960 --a------ C:\WINDOWS\system32\jkkLEWqQ.dll

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15:00 15360]

    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]

    "Skype"="C:\APPS\skype\phone\Skype.exe" [2006-01-18 14:05 19417640]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 14:34 64512]

    "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]

    "PinnacleDriverCheck"="C:\WINDOWS\system32\\PSDrvCheck.exe" [2004-03-11 00:26 406016]

    "BOOT"="C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe" [2002-08-16 15:14 476160]

    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-03-20 19:02 98304]

    "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939]

    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]

    "VX1000"="C:\WINDOWS\vVX1000.exe" [2006-12-06 01:38 707360]

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

    "LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 03:48 275800]

    "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]

    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

     

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 15:00 15360]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles

    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm

    "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm

    "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm

    "VIDC.MJPG"= Pvmjpg30.dll

    "VIDC.PIM1"= pclepim1.dll

    "vidc.VP40"= vp4vfw.dll

    "vidc.VP50"= vp5vfw.dll

    "vidc.ffds"= ffdshow.ax

    "vidc.uldx"= C:\PROGRA~1\ULEADS~1\ULEADV~1.0SE\DivX_UL.dll

     

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk

    backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk

    backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk

    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Clock v6.5.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Clock v6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One Clock v6.5.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^OFFICE One Notes v6.5.lnk]

    path=D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\OFFICE One Notes v6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One Notes v6.5.lnkCommon Startup

     

    [HKLM\~\startupfolder\D:^Documents and Settings^packard^Menu Démarrer^Programmes^Démarrage^OFFICE One 6.5.lnk]

    path=D:\Documents and Settings\packard\Menu Démarrer\Programmes\Démarrage\OFFICE One 6.5.lnk

    backup=C:\WINDOWS\pss\OFFICE One 6.5.lnkStartup

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\88ef2675]

    C:\WINDOWS\system32\prkxaixa.dll

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACTIVBOARD]

    --a--c--- 2003-05-02 11:31 24576 c:\apps\ABoard\ABoard.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Antivirus]

    --a------ 2008-05-28 09:10 325632 C:\Program Files\VAV\vav.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

    --a--c--- 2005-08-12 15:43 45056 c:\Program Files\ATI Technologies\ATI.ACE\cli.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BM8bdc15e9]

    C:\WINDOWS\system32\ycmxclox.dll

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EmailChecker]

    --a--c--- 2003-07-02 11:13 40960 C:\APPS\EmailChecker\ech.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eroca]

    C:\Program Files\Eroca\Eroca.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

    --a--c--- 2005-05-11 23:12 49152 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]

    --a--c--- 2004-08-10 15:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchList]

    --a--c--- 2004-04-07 09:49 49152 C:\Program Files\Pinnacle\Studio 10\LaunchList.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LSA Shellu]

    D:\Documents and Settings\packard.115263910314.000\lsass.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

    --------- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

    --a------ 2007-10-18 12:34 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OoPDFSettingsv6.exe]

    C:\Program Files\OFFICE One6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]

    --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]

    --a--c--- 2004-08-10 15:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]

    --a------ 2004-03-11 00:26 406016 C:\WINDOWS\system32\PSDrvCheck.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys]

    --a--c--- 2005-11-17 10:51 975360 C:\APPS\SMP\SmpSys.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]

    C:\PROGRA~1\SYMNET~1\SNDMon.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2]

    --a--c--- 2004-11-26 12:43 90112 C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]

    -ra------ 2006-03-30 17:45 313472 C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck]

    C:\WINDOWS\system32\dumprep 0 -u

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vade Retro Outlook Express]

    --a--c--- 2004-10-04 14:03 310272 C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%ProgramFiles%\\AOL 9.0\\aol.exe"=

    "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=

    "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=

    "C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=

    "C:\\Program Files\\LimeWire\\LimeWire.exe"=

    "C:\\Program Files\\Messenger\\msmsgs.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "C:\\Program Files\\nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=

    "C:\\Program Files\\nero\\Nero 7\\Nero Home\\NeroHome.exe"=

    "D:\\StubInstaller.exe"=

    "C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=

    "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=

    "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

    "C:\\WINDOWS\\system32\\dpvsetup.exe"=

    "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    "C:\\APPS\\skype\\phone\\Skype.exe"=

     

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "9181:TCP"= 9181:TCP:BitComet 9181 TCP

    "9181:UDP"= 9181:UDP:BitComet 9181 UDP

     

    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]

    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]

    R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe" [2007-01-05 00:13]

    R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 12:51]

    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08]

    R3 VX1000;VX-1000;C:\WINDOWS\system32\DRIVERS\VX1000.sys [2006-12-06 01:39]

    R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 11:45]

    S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 15:18]

    S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81f91e70-f2e2-11da-b0ed-806d6172696f}]

    \shell\Rip\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L"

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c911ba6e-83be-11db-8fdb-806d6172696f}]

    \shell\play\Command - "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"

     

    .

    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

    "2008-06-13 13:30:00 C:\WINDOWS\Tasks\Configurer mon PC.job"

    - C:\Apps\SMP\PCSETUP.EXE

    "2008-06-13 13:30:03 C:\WINDOWS\Tasks\Extension de garantie.job"

    - C:\APPS\SMP\PBCARNOT.EXE

    "2008-06-13 13:30:02 C:\WINDOWS\Tasks\HDReg.job"

    - c:\Apps\HDReg\HDRegRem.exe

    "2008-06-13 13:30:03 C:\WINDOWS\Tasks\Master CD_DVD Creator.job"

    - C:\Apps\SMP\MCDCHECK.EXE

    "2008-06-13 13:39:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

  3. Bonjour

     

    J'ai réguliérement sur mon bureau des pages de pub qui s'affichent, j'ai pourtant fait un nettoyage avec avast - spybot - avg anti rootki - avg anti - SmitfraudFix - Navilog mais rien n'y fait !

     

    Voici mon rapport, merci de votre aide

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 16:50:03, on 10/06/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16640)

    Boot mode: Safe mode

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    D:\Documents and Settings\packard.115263910314.000\Bureau\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

    R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL

    R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll

    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

    O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

    O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe

    O4 - HKLM\..\Run: [bOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [88ef2675] rundll32.exe "C:\WINDOWS\system32\ysdeexcn.dll",b

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [bM8bdc15e9] Rundll32.exe "C:\WINDOWS\system32\phoireke.dll",s

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [skype] "C:\APPS\skype\phone\Skype.exe" /nosplash /minimized

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU')

    O4 - HKUS\S-1-5-20\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE RÉSEAU')

    O4 - HKUS\S-1-5-20\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE RÉSEAU')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe

    O4 - Global Startup: pccmsi.lnk = D:\Documents and Settings\packard.115263910314.000\Local Settings\Temp\TIS\setup.exe

    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

    O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

    O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

    O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm

    O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite...vex-2.0.6.0.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

    O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/323/webolr/OCX/FlashAX.cab

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

     

    --

    End of file - 8250 bytes

  4. Regardes ici : http://h10025.www1.hp.com/ewfrf/wc/softwar...product=3237002 . Les pilotes son Realtek sont en bas de page . Mais il faut que tu installes avant le pilote du chipset ATI de ta carte mère .

     

    Bonjour et merci pour ton aide

     

    J'ai télécharger le pilote ATI puis le pilote son, mais j'ai exactement le mem message d'erreur

     

    Your system does not have microsoft's universal audio architecture (UAA) Hight definition audio bus driver installed.

    You must install this driver before installing the realtek hight definition audio drivers

     

    Que dois je faire maintenant ?

  5. Bonjour

     

    Suite à un formatage, j'ai réinstallé les pilotes de ma carte mére (site HP)

     

    Par contre j'ai un sioucis pour le pilote du son et plus particuliérement le "high definition audio bus driver" que je ne trouve pas.

     

    Le pilote du son sur le site HP ne veut pas s'installer car il manque le "high definition audio bus driver"

     

    Modéle PC: Compaq presario SR1918FR

     

    Quelqu'un aurait-il une idée ?

  6. En fait au démarrage de l'installation j'ai été obligé de faire f6 pour pouvoir installer le drivers sata, j'ai pu commencer l'installation, choisir ma partition, la formater mais tout de suite derriére il me demande d'insérer se fameux intel matrix storage manager driver

     

    Je ne peut pas continuer l'installation sans ca !

     

    Comment je peut faire ?

  7. Bonjour

     

    Je posséde un PC portable HP pavilion DV5000, j'ai voulu réinstaller windows XP dessus mais j'ai le message d'erreur suivant qui apparait au début de l'installation:

     

    "Le programme d'installation n'a détecté aucun lecteur de disque dur installé dans votre ordinateur"

     

    Du coup j'ai démonté mon disque dur et je l'ai formaté complétement avec un autre PC, mais la toujours le meme message d'erreur lors de l'installation, comment faire ? Est-ce que mon disque dur commence a me lacher ?

     

    Merci de votre aide

  8. Bonjour à tous

     

    J'ai un soucis avec mon imprimante multifonction HP, l'installation avec vista se déroule sans soucis, mais 2-3 jours plus tard plus rien ne fonctionne, quand je r'allume l'imprimante le PC détecte un nouveau matériel comme si il avait désinstaller l'imprimante avant !!!

     

    Quelqu'un a-t'il une idée du probléme ?

     

    merci d'avance pour votre aide

  9. Salut charles ingals

     

    Voici le rapport Erase!beta

     

     

    ********EraseProg! (A.Rothstein) V1.8********

     

     

     

    Nettoyage commence le 25/07/2007 a 5:49:26,40

     

    ***************************************

     

    -Navilog = trouve!

     

    -Navilog = Suppression effectuee!

     

    Programme(s) supprime(s) avec succes!

    ***************************************

     

    Fin le 25/07/2007 a 5:49:27,37

     

    Merci d'avoir utilise EraseProg!

     

     

    Je me suis bien inscrit sur Malware-Complaints et j'ai posté un message dans "autres infections"

     

    Encore merci à toi pour ton aide précieuse et félicitations pour ton sérieux

×
×
  • Créer...