

lesquale59
Membres-
Compteur de contenus
32 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par lesquale59
-
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Hello Thanos, bien dormi j espère ...... je viens de lancer Mbam mais ça risque de durer car j ai qq DD lol dès que fini et que j ai le compte rendu je le poste. A tout' -
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Bonsoir, je ne sais pas si Thanos et là mais si quelqu un peut m aider ça va de pire en pire ............ je ne peux mêm plus lancer un rapport HijackThis ... pas croyable help -
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Hello ci après le cr combo : ComboFix 08-11-20.02 - Hucko Pascal 2008-11-21 17:12:11.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1160 [GMT 1:00] Lancé depuis: c:\documents and settings\Hucko Pascal\Bureau\lesquale59.exe * Un nouveau point de restauration a été créé . /wow section - STAGE 1 Accès refusé. (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\garmin\gStart.exe C:\InfoSat.txt c:\windows\system32\drivers\downld c:\windows\system32\drivers\srosa2.sys c:\windows\system32\drivers\winfilse.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SK9OU0S -------\Legacy_SROSA -------\Service_sK9Ou0s ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-21 au 2008-11-21 )))))))))))))))))))))))))))))))))))) . 2008-11-20 22:15 . 2008-08-25 12:36 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys 2008-11-20 22:15 . 2008-08-25 12:36 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys 2008-11-20 22:15 . 2008-08-25 12:36 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys 2008-11-20 22:15 . 2008-06-02 16:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys 2008-11-20 22:14 . 2008-11-20 22:14 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\PC Tools 2008-11-20 22:11 . 2008-11-20 22:11 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Malwarebytes 2008-11-20 22:11 . 2008-11-20 22:11 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2008-11-20 22:11 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2008-11-20 22:11 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2008-11-20 22:02 . 2008-11-20 22:02 <REP> d-------- c:\program files\Fichiers communs\Borland Shared 2008-11-20 22:02 . 1999-01-20 05:01 210,032 --a------ c:\windows\system32\DBCLIENT.DLL 2008-11-20 22:02 . 1999-11-12 05:11 183,808 --a------ c:\windows\system32\BDEADMIN.CPL 2008-11-20 22:02 . 2008-11-21 04:22 13,030 --a------ C:\PDOXUSRS.NET 2008-11-20 20:53 . 2006-03-02 13:00 18,432 --a------ c:\windows\system32\Copie de win.com 2008-11-20 20:49 . 2008-11-21 04:13 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Desktopicon 2008-11-20 20:31 . 2008-11-20 20:31 <REP> d-------- C:\fsaua.data 2008-11-20 20:08 . 2008-11-20 20:08 3,120 --a------ c:\windows\system32\118290.54 2008-11-20 20:08 . 2008-11-20 20:08 3,120 --a------ c:\windows\118294.78 2008-11-20 20:07 . 2008-11-20 20:07 <REP> d-------- c:\program files\Defenza 2008-11-20 20:07 . 1996-08-20 20:37 15,840 --a------ c:\windows\system32\Machnm1.exe 2008-11-20 20:07 . 2005-09-25 16:37 5,632 --a------ c:\windows\system32\Machnm64.sys 2008-11-20 20:07 . 2003-08-13 00:27 2,304 --a------ c:\windows\system32\Machnm32.sys 2008-11-20 17:35 . 2008-11-20 17:35 <REP> d-------- c:\program files\Enigma Software Group 2008-11-20 17:23 . 2008-11-20 17:23 <REP> d-------- c:\program files\Nouveau dossier 2008-11-20 17:22 . 2008-11-20 17:22 47 --a------ c:\windows\WININIT.INI 2008-11-20 16:33 . 2008-11-20 16:33 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-11-19 22:00 . 2008-11-21 04:23 <REP> d-------- c:\program files\Mozilla Thunderbird 2008-11-19 22:00 . 2008-11-19 22:01 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Thunderbird 2008-11-19 20:16 . 2008-11-19 20:16 <REP> d-------- c:\program files\Panda Security 2008-11-19 20:11 . 2008-11-19 22:10 <REP> d-------- c:\windows\BDOSCAN8 2008-11-19 20:11 . 2008-11-19 23:21 <REP> d-------- c:\program files\Fichiers communs\BitDefender 2008-11-19 20:06 . 2008-11-19 20:06 <REP> d-------- c:\documents and settings\All Users\Application Data\Fighters 2008-11-19 19:00 . 2008-11-19 19:49 <REP> d-------- c:\documents and settings\Hucko Pascal\.housecall6.6 2008-11-19 18:53 . 2008-11-19 18:53 <REP> d-------- c:\documents and settings\All Users\Application Data\Lavasoft 2008-11-19 18:26 . 2008-11-19 18:26 <REP> d-------- c:\windows\system32\Kaspersky Lab 2008-11-18 04:27 . 2008-11-18 04:27 <REP> d-------- c:\windows\system32\config\systemprofile\Application Data\PC Suite 2008-11-18 04:18 . 2008-11-18 04:18 <REP> d-------- c:\program files\Unity 2008-11-16 20:28 . 2008-11-16 20:28 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Ulead Systems 2008-11-16 20:25 . 2008-11-16 20:37 <REP> d-------- c:\documents and settings\All Users\Application Data\Ulead Systems 2008-11-16 07:45 . 2008-11-16 07:45 <REP> d-------- C:\Emule_fin 2008-11-15 20:51 . 2008-11-15 22:22 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Ashampoo 2008-11-15 20:50 . 2008-11-15 20:50 <REP> d-------- c:\documents and settings\All Users\Application Data\ashampoo 2008-11-13 04:22 . 2008-11-13 04:22 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Canon 2008-11-12 16:04 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-11-12 16:04 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 16:03 . 2008-11-19 20:57 <REP> d-------- c:\program files\Error Repair Professional 2008-11-09 19:26 . 2008-04-14 04:33 159,232 --a------ c:\windows\system32\ptpusd.dll 2008-11-09 19:26 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll 2008-11-08 13:51 . 2008-11-08 13:51 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\ZoomBrowser EX 2008-11-08 13:50 . 2008-11-08 13:51 <REP> d-------- c:\documents and settings\All Users\Application Data\PhotoStitch 2008-11-08 13:10 . 2008-11-08 13:10 <REP> d-------- c:\documents and settings\All Users\Application Data\ZoomBrowser 2008-11-08 13:08 . 2008-11-08 13:29 <REP> d-------- c:\program files\Canon 2008-11-04 04:20 . 2008-11-04 04:20 42 --a------ c:\windows\system32\RegistryEasy.lie 2008-11-02 14:22 . 2008-11-08 13:03 <REP> d-------- c:\program files\Fichiers communs\Canon 2008-11-01 15:00 . 2008-11-01 15:00 <REP> d-------- C:\Clé USB Lydie 2008-11-01 08:49 . 2008-11-02 17:29 <REP> d-------- C:\Photos mariage 04-10-2008 2008-10-26 20:20 . 2008-10-26 20:20 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\EPSON 2008-10-24 12:46 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll 2008-10-23 17:47 . 1998-07-30 16:40 306,688 --a------ c:\windows\IsUn040c.exe 2008-10-23 17:35 . 2008-10-23 17:35 <REP> d-------- c:\documents and settings\Hucko Pascal\WINDOWS 2008-10-23 17:14 . 2008-10-23 17:14 <REP> d-------- c:\documents and settings\Hucko Pascal\Application Data\Leadertech 2008-10-23 10:30 . 2008-03-16 13:30 216,064 -r-hs---- c:\windows\system32\nbDX.dll 2008-10-23 10:30 . 2006-01-12 23:23 123,904 -r-hs---- c:\windows\system32\AVCDX.ax 2008-10-23 10:30 . 2003-11-20 23:00 54,784 -r-hs---- c:\windows\system32\RLAPEDec.ax 2008-10-23 10:30 . 2004-04-26 23:00 37,888 -r-hs---- c:\windows\system32\RLMPCDec.ax 2008-10-23 10:30 . 2007-02-21 11:47 31,232 -r-hs---- c:\windows\system32\msfDX.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-21 16:24 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2008-11-20 19:07 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-20 16:24 --------- d-----w c:\program files\Fichiers communs\Symantec Shared 2008-11-19 19:35 --------- d-----w c:\program files\Symantec 2008-11-16 18:54 --------- d-----w c:\documents and settings\Hucko Pascal\Application Data\XnView 2008-11-12 15:08 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-11-11 09:29 --------- d-----w c:\program files\Fichiers communs\Adobe 2008-11-04 03:36 --------- d-----w c:\program files\Dofus 2008-11-04 03:35 --------- d-----w c:\program files\Wakfu 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-24 06:51 --------- d-----w c:\documents and settings\Hucko Pascal\Application Data\Cyberlink 2008-10-23 16:37 --------- d-----w c:\program files\Digital Photo Navigator 1.5 2008-10-23 10:07 --------- d-----w c:\documents and settings\All Users\Application Data\Symantec 2008-10-21 16:21 --------- d-----w c:\documents and settings\Hucko Pascal\Application Data\AVSMedia 2008-10-21 14:39 --------- d-----w c:\program files\Norton 360 2008-10-19 10:51 --------- d-----w c:\program files\CyberLink 2008-10-19 10:51 --------- d-----w c:\documents and settings\All Users\Application Data\CyberLink 2008-10-19 10:50 --------- d-----w c:\program files\CyberLink DVD Solution 2008-10-18 16:04 --------- d-----w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 2008-09-26 15:33 15,496 ----a-w c:\windows\system32\drivers\vffilter.sys 2008-09-23 02:17 --------- d-----w c:\program files\Piolet 2008-07-26 20:12 56 --sha-w c:\documents and settings\All Users\Application Data\dc64vg9.sys 2004-08-09 21:30 40,960 ----a-w c:\program files\Uninstall_CDS.exe 2006-05-03 09:06 163,328 --sha-r c:\windows\system32\flvDX.dll 2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll 2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "H/PC Connection Agent"="h:\installation_de_base_pc\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-09 68856] "DAEMON Tools Lite"="h:\logiciels divers\DAEMON Tools Lite\daemon.exe" [2008-08-08 490952] "EPSON Stylus DX5000 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE" [2006-09-22 139264] "EPSON Stylus DX5000 Series (Copie 1)"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE" [2006-09-22 139264] "RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-10-19 160592] "SpybotSD TeaTimer"="h:\logiciels_antivirus\Spybot - Search & Destroy\TeaTimer.exe" [2008-11-20 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-31 36864] "36X Raid Configurer"="c:\windows\system32\JMRaidSetup.exe" [2006-11-17 1953792] "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2008-11-20 115816] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-19 8429568] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-04-19 81920] "Symantec PIF AlertEng"="c:\program files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-11-20 583048] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-06 29744] "TomTomHOME.exe"="h:\logiciels divers\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024] "NSLauncher"="c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe" [2007-09-07 3100672] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344] "sclauncher"="c:\program files\SimpleCenter\bin\win\sclauncher.exe" [2007-09-07 94208] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "RemoteControl"="c:\program files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2004-06-28 32768] "Adobe Reader Speed Launcher"="h:\installation_de_base_pc\Adobe Reader\Reader\Reader_sl.exe" [2008-10-15 39792] "a-squared"="h:\logiciels_antivirus\a-squared Anti-Malware\a-squared Anti-Malware\a2guard.exe" [2008-11-20 1816208] "spywarefighterguard"="h:\logiciels_antivirus\SpywareFighter\spywarefighter\SpywarefighterUser.exe" [2008-09-26 180872] "avast!"="h:\logiciels_antivirus\avast!\ashDisp.exe" [2008-11-20 81000] "SpyHunter Security Suite"="c:\program files\Enigma Software Group\SpyHunter\SpyHunter3.exe" [2008-09-10 864256] "PCDAS"="c:\program files\Defenza\pcd-as.exe" [2006-12-15 1359872] "UnlockerAssistant"="h:\logiciels divers\Unlocker\UnlockerAssistant.exe" [2008-11-20 15872] "ISTray"="h:\logiciels_antivirus\Spyware Doctor\pctsTray.exe" [2008-08-25 1168264] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "nwiz"="nwiz.exe" [2007-04-19 c:\windows\system32\nwiz.exe] 2 ème partie : [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\Hucko Pascal\Menu D‚marrer\Programmes\D‚marrage\ OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440] PrintKey 2000 Fr.lnk - c:\program files\PrintKey 2000 Fr\Printkey 2000 Fr.exe [2001-06-25 869888] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Ask Harrap's Shorter.lnk - h:\logiciels divers\Dictionnaire.Harraps.Shorter.Francais-Anglais.[sGA]\bin\HiHarrapsTray.exe [2008-10-23 17:49:08 122880] HotSync Manager.lnk - h:\logiciels divers\Palm\Hotsync.exe [2008-01-03 1392640] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tools32] 2004-11-15 21:21 12800 c:\windows\system32\tools32.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.I420"= i420vfw.dll "VIDC.MJPG"= Pvmjpg30.dll "msacm.l3codec"= l3codecp.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "h:\installation_de_base_pc\Microsoft ActiveSync\rapimgr.exe"= h:\installation_de_base_pc\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "h:\installation_de_base_pc\Microsoft ActiveSync\wcescomm.exe"= h:\installation_de_base_pc\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "h:\installation_de_base_pc\Microsoft ActiveSync\WCESMgr.exe"= h:\installation_de_base_pc\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Pinnacle\\Studio 11\\programs\\RM.exe"= "c:\\Program Files\\Pinnacle\\Studio 11\\programs\\Studio.exe"= "c:\\Program Files\\Pinnacle\\Studio 11\\programs\\PMSRegisterFile.exe"= "c:\\Program Files\\Pinnacle\\Studio 11\\programs\\umi.exe"= "c:\\Program Files\\Piolet\\Piolet.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service "6334:TCP"= 6334:TCP:messenger "1722:TCP"= 1722:TCP:messenger [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowInboundEchoRequest"= 1 (0x1) R2 PTK License-SPYWAREFIGHTER-140355176;PTK License-SPYWAREFIGHTER-140355176;h:\logiciels_antivirus\SpywareFighter\licenseservice.exe [2008-09-26 283272] R2 PTK Live Update-SPYWAREFIGHTER-140355176;PTK Live Update-SPYWAREFIGHTER-140355176;h:\logiciels_antivirus\SpywareFighter\updateservice.exe [2008-09-26 307848] R2 PTK Scanner-SPYWAREFIGHTER-140355176;PTK Scanner-SPYWAREFIGHTER-140355176;h:\logiciels_antivirus\SpywareFighter\ScannerService.exe [2008-09-26 311944] R2 PTK SharedAccess-SPYWAREFIGHTER-140355176;PTK SharedAccess-SPYWAREFIGHTER-140355176;h:\logiciels_antivirus\SpywareFighter\configservice.exe [2008-09-26 139912] R2 UxTuneUp;TuneUp Extension de thème;c:\windows\System32\svchost.exe -k netsvcs [2006-03-02 14336] R3 BENDER;Pinnacle DV/AV Capture;c:\windows\system32\drivers\bender.sys [2008-08-28 203264] R3 TuneUp.Defrag;TuneUp Drive Defrag Service;c:\windows\System32\TuneUpDefragService.exe [2008-06-20 307968] R3 Vfscan;Vfscan;c:\windows\system32\DRIVERS\vffilter.sys [2008-09-26 15496] S1 aswSP;avast! Self Protection; [] S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [] S2 tools32;MSWC Tools;rundll32.exe c:\windows\system32\tools32.dll,yvyg [] S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;"c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-06-21 29744] S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys [2008-11-20 38496] S3 stusb2ir;USB 2.0 IrDA Bridge;c:\windows\system32\DRIVERS\stusb2ir.sys [2008-09-06 40856] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - COMHOST . Contenu du dossier 'Tâches planifiées' 2008-11-21 c:\windows\Tasks\Maintenance en 1 clic.job - c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-03-03 08:42] 2008-11-20 c:\windows\Tasks\Norton Security Scan for Hucko Pascal.job - h:\logiciels_antivirus\NortonSecurityScan Online\Nss.exe [2008-09-19 04:18] 2008-11-20 c:\windows\Tasks\RegEasy.job - h:\logiciels_antivirus\Registry Easy\RegistryEasy.exe [2008-02-21 14:18] . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-gStart - c:\garmin\gStart.exe SafeBoot-sglfb.sys SafeBoot-tga.sys SafeBoot-wd.sys SafeBoot-sacsvr . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Hucko Pascal\Application Data\Mozilla\Firefox\Profiles\19nfsj1p.default\ FF -: plugin - c:\program files\Unity\WebPlayer\loader\npUnity3D32.dll FF -: plugin - h:\installation_de_base_pc\Adobe Reader\Reader\browser\nppdf32.dll FF -: plugin - h:\logici~2\Palm\PACKAG~1\NPInstal.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-21 17:23:19 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\TuneUp Utilities 2008\OneClick.exe c:\windows\system32\rundll32.exe h:\logiciels divers\CDBurnerXP\NMSAccessU.exe c:\windows\system32\nvsvc32.exe h:\instal~1\MICROS~1\rapimgr.exe h:\logiciels divers\Dictionnaire.Harraps.Shorter.Francais-Anglais.[sGA]\bin\HiHarrapsTray.exe h:\logiciels_antivirus\Spyware Doctor\pctsAuxs.exe h:\logiciels_antivirus\Spyware Doctor\pctsSvc.exe c:\program files\Canon\CAL\CALMAIN.exe c:\program files\TuneUp Utilities 2008\RegistryCleaner.exe h:\logiciels_antivirus\SpywareFighter\Spywarefighter\SpywarefighterTray.exe c:\program files\PC Connectivity Solution\ServiceLayer.exe . ************************************************************************** . Heure de fin: 2008-11-21 17:28:40 - La machine a redémarré ComboFix-quarantined-files.txt 2008-11-21 16:28:21 Avant-CF: 65 316 302 848 octets libres Après-CF: 65,328,054,272 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect 274 --- E O F --- 2008-11-12 15:11:04 -
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Hello je sais pas si c est normal mais il m affiche à plusieurs reprise pv.cfexe n est pas une application win32 valide merci d avance pour ta réponse -
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Merci Thanos. je suis au travail. je rentre à 17 heures. je le fais dès que je suis chez moi. A tout' -
Demande aide analyse LOG
lesquale59 a répondu à un(e) sujet de lesquale59 dans Analyses et éradication malwares
Hello, personne pour un petit coup de main ? cordialement -
Bonjour, depuis 3 jours j ai le message "ceci n est pas un programme WIN32 valide". Je n ai plus de Norton 360. J ai tenté d installé un 'tas' de soft mais l erreur persiste Pouvez vous m aider à analyser ma Log et me dire ce que je dois faire ? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:56:13, on 20/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe H:\logiciels divers\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe H:\Logiciels_Antivirus\SpywareFighter\configservice.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe H:\Logiciels_Antivirus\SpywareFighter\licenseservice.exe H:\Logiciels_Antivirus\SpywareFighter\updateservice.exe H:\Logiciels_Antivirus\SpywareFighter\ScannerService.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe H:\logiciels divers\TomTom HOME\TomTomHOME.exe C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\Program Files\SimpleCenter\bin\win\sclauncher.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe H:\Logiciels_Antivirus\SpywareFighter\spywarefighter\SpywarefighterUser.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe C:\Program Files\Defenza\pcd-as.exe C:\WINDOWS\system32\ctfmon.exe H:\Installation_de_base_PC\Microsoft ActiveSync\Wcescomm.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe H:\logiciels divers\DAEMON Tools Lite\daemon.exe C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe H:\INSTAL~1\MICROS~1\rapimgr.exe h:\logiciels_antivirus\spywarefighter\spywarefighter\SPYWAREfighterTray.exe H:\logiciels divers\Dictionnaire.Harraps.Shorter.Francais-Anglais.[sGA]\bin\HiHarrapsTray.exe H:\logiciels divers\Palm\Hotsync.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\PrintKey 2000 Fr\Printkey 2000 Fr.exe h:\logiciels_antivirus\spywarefighter\product.exe H:\logiciels divers\FreeCommander\FreeCommander.exe H:\temp_téléchargement_internet\ELIBAGLA.CØAABØØH.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Defenza\pcdscanner.exe C:\Documents and Settings\Hucko Pascal\Local Settings\Temporary Internet Files\Content.IE5\CR2NCTWP\HiJackThis[1].exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - H:\Logiciels_Antivirus\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [TomTomHOME.exe] "H:\logiciels divers\TomTom HOME\TomTomHOME.exe" -s O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [sclauncher] C:\Program Files\SimpleCenter\bin\win\sclauncher.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Installation_de_base_PC\Adobe Reader\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [a-squared] "H:\Logiciels_Antivirus\a-squared Anti-Malware\a-squared Anti-Malware\a2guard.exe" O4 - HKLM\..\Run: [spywarefighterguard] H:\Logiciels_Antivirus\SpywareFighter\spywarefighter\SpywarefighterUser.exe O4 - HKLM\..\Run: [avast!] "H:\Logiciels_Antivirus\avast!\ashDisp.exe" O4 - HKLM\..\Run: [spyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe O4 - HKLM\..\Run: [PCDAS] C:\Program Files\Defenza\pcd-as.exe /10003 O4 - HKLM\..\Run: [unlockerAssistant] H:\logiciels divers\Unlocker\UnlockerAssistant.exe O4 - HKLM\..\RunOnce: [ReEXEc] H:\temp_téléchargement_internet\ELIBAGLA.CØAABØØH.EXE O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [gStart] C:\Garmin\gStart.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "H:\Installation_de_base_PC\Microsoft ActiveSync\Wcescomm.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "H:\logiciels divers\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S431.tmp" /EF "HKCU" O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S443.tmp" /EF "HKCU" O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKCU\..\Run: [spybotSD TeaTimer] H:\Logiciels_Antivirus\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: PrintKey 2000 Fr.lnk = C:\Program Files\PrintKey 2000 Fr\Printkey 2000 Fr.exe O4 - Global Startup: Ask Harrap's Shorter.lnk = H:\logiciels divers\Dictionnaire.Harraps.Shorter.Francais-Anglais.[sGA]\bin\HiHarrapsTray.exe O4 - Global Startup: HotSync Manager.lnk = H:\logiciels divers\Palm\Hotsync.exe O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - H:\INSTAL~1\MICROS~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\INSTAL~1\MICROS~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - H:\INSTAL~1\MICROS~1\INetRepl.dll O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Logiciels_Antivirus\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Logiciels_Antivirus\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.secuser.com O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O20 - Winlogon Notify: tools32 - C:\WINDOWS\SYSTEM32\tools32.dll O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: NMSAccessU - Unknown owner - H:\logiciels divers\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys O23 - Service: PTK License-SPYWAREFIGHTER-140355176 - SPAMfighter - H:\Logiciels_Antivirus\SpywareFighter\licenseservice.exe O23 - Service: PTK Live Update-SPYWAREFIGHTER-140355176 - SPAMfighter - H:\Logiciels_Antivirus\SpywareFighter\updateservice.exe O23 - Service: PTK Scanner-SPYWAREFIGHTER-140355176 - SPAMfighter - H:\Logiciels_Antivirus\SpywareFighter\ScannerService.exe O23 - Service: PTK SharedAccess-SPYWAREFIGHTER-140355176 - SPAMfighter - H:\Logiciels_Antivirus\SpywareFighter\configservice.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: MSWC Tools (tools32) - Unknown owner - rundll32.exe (file missing) O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 16294 bytes merci d avance