ynini

Bonjour Charles, Il ne me reste plus qu'à te dire un grand Merci pour toute l'attention que tu as porté sur mon cas. Merci Charles PS: mon pc est ok, il n'y a pas de problèmes d'icones dans la barre des tâches. Juste tres tres long au démarrage avant l'ouverture de la fenêtre de session. Ynini

Bonjour Charles, Ci-joint le rapport ComboFix, et les 3 rapports générés par dss. PS: Je n'avais pas enficher ma clef WIFI USB pendant ces 2 scans donc pas de laison internet. Durant l'un des sans, j'ai eu 2 message d'avertissement pour manque de connection reseau. Aussi, à la suite des scans, il y a beaucoup moins d'icone dans ma barre des taches (ex:antivir n'y est plus,...) A bientot. "yannick" - 17/05/2007 14:11:48 Service Pack 4 ComboFix 07-05.17.V - Running from: "C:\Documents and Settings\yannick\Bureau\" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) Infected copy of C:\WINNT\system32\winlogon.exe was found & disinfected Restored copy from - "c:\WINNT\ServicePackFiles\i386\winlogon.exe" Infected copy of C:\WINNT\system32\winlogon.exe was found & disinfected Restored copy from - "c:\WINNT\ServicePackFiles\i386\winlogon.exe" ((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-17 )))))))))))))))))))))))))))))))))) 2007-04-19 20:02 43,584 --a------ C:\WINNT\system32\drivers\avipbb.sys 2007-04-19 20:02 28,352 --a------ C:\WINNT\system32\drivers\ssmdrv.sys 2007-04-18 19:48 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic 2007-04-17 00:03 <DIR> d-------- C:\DOCUME~1\yannick\APPLIC~1\Talkback (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-12 12:26:32 -------- d-----w C:\Program Files\CartoNavPlus 2007-04-18 17:45:59 -------- d-----w C:\Program Files\SlySoft 2007-04-16 21:05:57 0 ----a-w C:\WINNT\nsreg.dat 2007-04-10 21:27:33 -------- d-----w C:\Program Files\iTunes 2007-04-10 21:23:12 -------- d-----w C:\Program Files\Apoint 2007-02-10 08:21:08 3,702 ----a-w C:\WINNT\system32\tmp.reg (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [04-12-14 01:56 ] {2E03C0FD-4C48-43A7-9A54-00240C70FF16}=C:\WINNT\system32\BhoECart.dll [] {53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [05-05-31 02:04 ] {9394EDE7-C8B5-483E-8773-474BF36AF6E4}=C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll [04-08-13 17:42 ] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}=C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll [06-01-17 16:04 ] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [06-05-31 19:37 ] "Synchronization Manager"="mobsync.exe" [03-06-19 21:05 C:\WINNT\system32\mobsync.exe] "REGSHAVE"="C:\Progra~1\REGSHAVE\REGSHAVE.exe" [02-02-04 22:32 ] "PRPCMonitor"="PRPCUI.exe" [02-10-07 03:00 C:\WINNT\system32\prpcui.exe] "PRONoMgr.exe"="C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe" [02-12-18 14:20 ] "msnappau"="C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" [04-08-13 17:41 ] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [] "LoadQM"="loadqm.exe" [] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [05-10-06 18:03 ] "Gainward"="C:\WINNT\TBPanel.exe" [99-01-29 19:22 ] "eCarteBleue-CLEO"="C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" [04-03-22 14:47 ] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [05-04-05 21:05 ] "Apoint"="C:\Program Files\Apoint\Apoint.exe" [02-08-22 19:28 ] "D-Link AirPlus G"="C:\Program Files\D-Link\AirPlus G\AirGCFG.exe" [05-11-23 16:04 ] "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [05-10-19 19:19 ] "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [07-04-19 20:02 ] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="ctfmon.exe" [01-02-20 13:09 C:\WINNT\system32\CTFMON.EXE] [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "^SetupICWDesktop"="C:\\Program Files\\Internet Explorer\\Connection Wizard\\icwconn1.exe /desktop" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "internat.exe"="internat.exe" "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring] C:\WINNT\System32\LgNotify.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages msv1_0 Security Packages kerberos msv1_0 schannel Notification Packages scecli [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] rpcss RpcSs wugroup wuauserv BITSgroup BITS HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs* WmdmPmSN *newlycreated* -IPNAT *newlycreated* -RASAUTO ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-05-17 14:22:53 Windows 5.0.2195 Service Pack 4 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ******************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\CurrentControlSet\SERVICES\ATI2MTAG] [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\ati2mtag] "ImagePath"="System32\DRIVERS\ati2mtag.sys" [HKEY_LOCAL_MACHINE\system\ControlSet003\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\CurrentControlSet\SERVICES\ATI2MTAG] [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\ati2mtag] "ImagePath"="System32\DRIVERS\ati2mtag.sys" [HKEY_LOCAL_MACHINE\system\ControlSet003\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\CurrentControlSet\SERVICES\MNMDD] [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\mnmdd] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\CurrentControlSet\SERVICES\VGASAVE] [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\VgaSave] "ImagePath"="\SystemRoot\System32\drivers\vga.sys" [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] [HKEY_LOCAL_MACHINE\system\ControlSet002\Hardware Profiles01\System\CurrentControlSet\SERVICES\ATI2MTAG] [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\ati2mtag] "ImagePath"="System32\DRIVERS\ati2mtag.sys" [HKEY_LOCAL_MACHINE\system\ControlSet003\Hardware Profiles01\System\ControlSet002\Services\ati2mtag] Completion time: 2007-05-17 14:26:02 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 07-05-17 14:26 --- E O F --- Deckard's System Scanner v20070426.43 Run by yannick on 2007-05-17 at 14:28:15 Computer is in Normal Mode. -------------------------------------------------------------------------------- Backed up registry hives. Performed disk cleanup. -- HijackThis (run as yannick.exe) --------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 14:29:06, on 17/05/2007 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\explorer.exe C:\Documents and Settings\yannick\Bureau\dss.exe C:\DOCUME~1\yannick\Bureau\yannick.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINNT\system32\BhoECart.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [REGSHAVE] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Gainward] C:\WINNT\TBPanel.exe /A O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1167944222356 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O20 - Winlogon Notify: Sebring - C:\WINNT\System32\LgNotify.dll O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Iap - Dell Computer Corporation - C:\Program Files\Dell\OpenManage\Client\Iap.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Adapter Switching (IntelRoam) - Intel Corporation - C:\Program Files\Intel\Switching\User\RoamSvc.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINNT\system32\NA_Service.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: RoamMgr - Intel Corporation - C:\WINNT\System32\RoamMgr.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe -- File Associations ----------------------------------------------------------- .cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 avgntmgr - c:\winnt\system32\drivers\avgntmgr.sys <Not Verified; AVIRA GmbH; AntiVir®> R1 Cdr4_2K - c:\winnt\system32\drivers\cdr4_2k.sys <Not Verified; Roxio; DirectCD> R1 Cdralw2k - c:\winnt\system32\drivers\cdralw2k.sys <Not Verified; Roxio; DirectCD> R1 moufiltr (Mouse Filter Driver) - c:\winnt\system32\drivers\moufiltr.sys <Not Verified; Windows ® 2000 DDK provider; Windows ® 2000 DDK driver> R1 omci (OMCI WDM Device Driver) - c:\winnt\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver> R2 ANIO (ANIO Service) - c:\winnt\system32\anio.sys <Not Verified; Alpha Networks Inc.; ANIO (NT5) Driver> R2 PRPC - c:\winnt\system32\drivers\prpc.sys <Not Verified; Intel Corp.; Intel® SpeedStep technology Applet> R2 s24trans (WLAN Transport) - c:\winnt\system32\drivers\s24trans.sys <Not Verified; Intel Corporation; Intel Wireless LAN Packet Driver> R2 TBPanel - c:\winnt\system32\drivers\tbpanel.sys <Not Verified; Microsoft Corporation; Microsoft® Windows NT Operating System> R3 Duntlw (UNTLW device) - c:\winnt\system32\drivers\duntlwnt.sys <Not Verified; Schneider Automation; Unitelway Protocol Driver> S2 UsbFltr (WayTechUSBFilterDriver) - c:\winnt\system32\drivers\usbfltr.sys (file missing) S3 bvrp_pci - c:\winnt\system32\drivers\bvrp_pci.sys S3 PCAMPR5 (PCAMPR5 NDIS Protocol Driver) - c:\winnt\system32\pcampr5.sys (file missing) S3 PCANDIS5 (PCANDIS5 NDIS Protocol Driver) - c:\winnt\system32\pcandis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows> S3 Ser2pl (Prolific2 Serial port driver) - c:\winnt\system32\drivers\ser2pl.sys <Not Verified; Prolific Technology Inc.; Prolific USB-to-Serial Bridge Cable> S3 UIUSys (Conexant Setup API) - c:\winnt\system32\drivers\uiusys.sys (file missing) -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 ANIWZCSdService (ANIWZCSd Service) - c:\program files\ani\aniwzcs2 service\aniwzcsds.exe <Not Verified; Alpha Networks Inc.; ANIWZCS2 Service Launcher (NT)> R2 AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - c:\program files\antivir personaledition classic\sched.exe <Not Verified; Avira GmbH; Scheduler> R2 Iap - c:\program files\dell\openmanage\client\iap.exe <Not Verified; Dell Computer Corporation; OpenManage Client Instrumentation> R2 IntelRoam (Adapter Switching) - c:\program files\intel\switching\user\roamsvc.exe <Not Verified; Intel Corporation; Intel Intelligent Roaming Technology> R2 NA_Service (NetAccess Service) - c:\winnt\system32\na_service.exe <Not Verified; Schneider Automation; NetAccess> R2 RegSrvc - c:\winnt\system32\regsrvc.exe <Not Verified; Intel Corporation; RegSrvc Module> R2 RoamMgr - c:\winnt\system32\roammgr.exe <Not Verified; Intel Corporation; > -- Files created between 2007-04-17 and 2007-05-17 ----------------------------- 2030-02-25 11:49:33 0 d-------- C:\Program Files\SlySoft 2007-05-05 11:29:03 0 d-------- C:\WINNT\Mozilla 2007-04-22 08:55:29 3120 --a------ C:\WINNT\55014 2007-04-19 21:15:31 0 d-------- C:\Documents and Settings\lucile\Application Data\Mozilla 2007-04-18 19:48:20 0 d-a------ C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic 2007-04-18 11:06:44 0 d-------- C:\Documents and Settings\anais\Application Data\Mozilla 2007-04-17 00:03:53 0 d-------- C:\Documents and Settings\yannick\Application Data\Talkback -- Find3M Report --------------------------------------------------------------- 2007-05-17 13:49:58 3284 --a------ C:\WINNT\system32\ANIWZCS{C0B569CC-2844-4CA3-95E3-06CEF966BDAE} 2007-05-13 13:23:00 1197132 ---h----- C:\WINNT\ShellIconCache 2007-05-12 14:26:32 0 d-------- C:\Program Files\CartoNavPlus 2007-05-02 19:50:17 3284 --a------ C:\WINNT\system32\ANIWZCS{BB531029-8A14-4484-BFB6-11359DD38430} 2007-04-16 23:05:57 0 --a------ C:\WINNT\nsreg.dat 2007-04-16 23:05:53 0 d-------- C:\Documents and Settings\yannick\Application Data\Mozilla 2007-04-10 23:27:33 0 d-------- C:\Program Files\iTunes 2007-04-10 23:23:12 0 d-------- C:\Program Files\Apoint -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll {2E03C0FD-4C48-43A7-9A54-00240C70FF16} C:\WINNT\system32\BhoECart.dll [x] {53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll {9394EDE7-C8B5-483E-8773-474BF36AF6E4} C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "Synchronization Manager"="mobsync.exe /logon" "REGSHAVE"="C:\\Progra~1\\REGSHAVE\\REGSHAVE.EXE /autorun" "PRPCMonitor"="PRPCUI.exe" "PRONoMgr.exe"="C:\\Program Files\\Intel\\NCS\\PROSet\\PRONoMgr.exe" "msnappau"="\"C:\\Program Files\\MSN Apps\\Updater\1.03.0000.1005\\fr\\msnappau.exe\"" "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" "LoadQM"="loadqm.exe" "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" "Gainward"="C:\\WINNT\\TBPanel.exe /A" "eCarteBleue-CLEO"="\"C:\\Program Files\\e-Carte Bleue\\CL\\e-Carte Bleue VISA Cleo\\ECB-CLEO.exe\" /dontopenmycards" "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe" "Apoint"="C:\\Program Files\\Apoint\\Apoint.exe" "D-Link AirPlus G"="C:\\Program Files\\D-Link\\AirPlus G\\AirGCFG.exe" "ANIWZCS2Service"="C:\\Program Files\\ANI\\ANIWZCS2 Service\\WZCSLDR2.exe" "avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "ctfmon.exe"="ctfmon.exe" [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "^SetupICWDesktop"="C:\\Program Files\\Internet Explorer\\Connection Wizard\\icwconn1.exe /desktop" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "internat.exe"="internat.exe" "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background" HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sebring HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages REG_MULTI_SZ msv1_0\ Security Packages REG_MULTI_SZ kerberosmsv1_0schannel\ Notification Packages REG_MULTI_SZ scecli\ [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] rpcss REG_MULTI_SZ RpcSs\ wugroup REG_MULTI_SZ wuauserv\ BITSgroup REG_MULTI_SZ BITS\ *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_RASAUTO -- End of Deckard's System Scanner: finished at 2007-05-17 at 14:29:39 --------- Logfile of HijackThis v1.99.1 Scan saved at 14:29:06, on 17/05/2007 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\explorer.exe C:\Documents and Settings\yannick\Bureau\dss.exe C:\DOCUME~1\yannick\Bureau\yannick.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINNT\system32\BhoECart.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [REGSHAVE] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Gainward] C:\WINNT\TBPanel.exe /A O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1167944222356 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O20 - Winlogon Notify: Sebring - C:\WINNT\System32\LgNotify.dll O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Iap - Dell Computer Corporation - C:\Program Files\Dell\OpenManage\Client\Iap.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Adapter Switching (IntelRoam) - Intel Corporation - C:\Program Files\Intel\Switching\User\RoamSvc.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINNT\system32\NA_Service.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: RoamMgr - Intel Corporation - C:\WINNT\System32\RoamMgr.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe Deckard's System Scanner v20070426.43 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows 2000 Professionnel (build 2195) SP 4.0 Architecture: X86; Language: French CPU 0: Intel® Pentium® M processor 1300MHz Percentage of Memory in Use: 78% Physical Memory (total/avail): 255.23 MiB / 54.35 MiB Pagefile Memory (total/avail): 614.76 MiB / 414.68 MiB Virtual Memory (total/avail): 2047.88 MiB / 1999.04 MiB C: is Fixed (NTFS) - 27.95 GiB total, 11.19 GiB free. D: is CDROM (No Media) -- Security Center ------------------------------------------------------------- AUOptions is disabled. -- Environment Variables ------------------------------------------------------- activex=C:\WINNT\DOWNLO~1 ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\DOCUME~1\yannick\APPLIC~1 Cache=C:\DOCUME~1\yannick\LOCALS~1\TEMPOR~1 catchme=13867.cfexe ccset=2 chcp= 850 CLASSPATH=C:\Program Files\Java\j2re1.4.1_01\lib\ext\QTJava.zip Common Administrative Tools=C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\OUTILS~1 Common AppData=C:\DOCUME~1\ALLUSE~1\APPLIC~1 Common Desktop=C:\DOCUME~1\ALLUSE~1\Bureau Common Documents=C:\DOCUME~1\ALLUSE~1\DOCUME~1 Common Favorites=C:\DOCUME~1\ALLUSE~1\Favoris Common Programs=C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 Common Start Menu=C:\DOCUME~1\ALLUSE~1\MENUDM~1 Common Startup=C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\DMARRA~1 Common Templates=C:\DOCUME~1\ALLUSE~1\MODLES~1 CommonProgramFiles=C:\Program Files\Fichiers communs COMPUTERNAME=HUDREAUX ComSpec=C:\WINNT\system32\cmd.exe Cookies=C:\DOCUME~1\yannick\Cookies datex=2007-05-17 dd=05 ddd=1[7-9] dddB=[23]. default AppData=C:\DOCUME~1\DEFAUL~1\APPLIC~1 default Cache=C:\DOCUME~1\DEFAUL~1\LOCALS~1\TEMPOR~1 default Cookies=C:\DOCUME~1\DEFAUL~1\Cookies default Desktop=C:\DOCUME~1\DEFAUL~1\Bureau default Favorites=C:\DOCUME~1\DEFAUL~1\Favoris default Fonts=C:\WINNT\Fonts default History=C:\DOCUME~1\DEFAUL~1\LOCALS~1\HISTOR~1 default Local AppData=C:\DOCUME~1\DEFAUL~1\LOCALS~1\APPLIC~1 default Local Settings=C:\DOCUME~1\DEFAUL~1\LOCALS~1 default My Pictures=C:\DOCUME~1\DEFAUL~1\MESDOC~1\MESIMA~1 default NetHood=C:\DOCUME~1\DEFAUL~1\Voisinage réseau default Personal=C:\DOCUME~1\DEFAUL~1\MESDOC~1 default PrintHood=C:\DOCUME~1\DEFAUL~1\VOISIN~2 default Programs=C:\DOCUME~1\DEFAUL~1\Menu Démarrer\Programmes default Recent=C:\DOCUME~1\DEFAUL~1\Recent default SendTo=C:\DOCUME~1\DEFAUL~1\SendTo default Start Menu=C:\DOCUME~1\DEFAUL~1\Menu Démarrer default Startup=C:\DOCUME~1\DEFAUL~1\Menu Démarrer\Programmes\Démarrage default Templates=C:\DOCUME~1\DEFAUL~1\Modèles Desktop=C:\DOCUME~1\yannick\Bureau Favorites=C:\DOCUME~1\yannick\Favoris Fonts=C:\WINNT\Fonts History=C:\DOCUME~1\yannick\LOCALS~1\HISTOR~1 hjtpath=C:\Documents and Settings\yannick\Bureau home=C:\ComboFix\ HOMEDRIVE=C: HOMEPATH=\ Local AppData=C:\DOCUME~1\yannick\LOCALS~1\APPLIC~1 LOGONSERVER=\\HUDREAUX mm=04 My Pictures=C:\DOCUME~1\yannick\MESDOC~1\MESIMA~1 NetHood=C:\DOCUME~1\yannick\VOISIN~1 ninety=2007-02-05 NUMBER_OF_PROCESSORS=1 OS=Windows_NT Os2LibPath=C:\WINNT\system32\os2\dll; Path=C:\ComboFix\;C:\WINNT\system32 PATHEXT=.cfexe;.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH Personal=C:\DOCUME~1\yannick\MESDOC~1 PrintHood=C:\DOCUME~1\yannick\VOISIN~2 PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 6 Model 9 Stepping 5, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=0905 ProgramFiles=C:\Program Files Programs=C:\DOCUME~1\yannick\MENUDM~1\PROGRA~1 PROMPT=$P$G QTJAVA=C:\Program Files\Java\j2re1.4.1_01\lib\ext\QTJava.zip Recent=C:\DOCUME~1\yannick\Recent SendTo=C:\DOCUME~1\yannick\SendTo sixty=2007-03-05 Start Menu=C:\DOCUME~1\yannick\MENUDM~1 Startup=C:\DOCUME~1\yannick\MENUDM~1\PROGRA~1\DMARRA~1 system=C:\WINNT\system32 SystemDrive=C: SysTemp=C:\WINNT\TEMP SystemRoot=C:\WINNT TEMP=C:\DOCUME~1\yannick\LOCALS~1\Temp Templates=C:\DOCUME~1\yannick\MODLES~1 thirty=2007-04-05 TMP=C:\DOCUME~1\yannick\LOCALS~1\Temp USERDOMAIN=HUDREAUX USERNAME=yannick USERPROFILE=C:\Documents and Settings\yannick value=thirty windir=C:\WINNT yy=2007 -- User Profiles --------------------------------------------------------------- anais (admin) lucile marie (new local) yannick (admin) Administrateur (admin) -- Add/Remove Programs --------------------------------------------------------- Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Flash Player Plugin --> C:\WINNT\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 7.0 - Français --> MsiExec.exe /I{AC76BA86-7AD7-1036-7646-A70000000000} AirPlus G --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{2B7E4354-0492-460A-BDB1-1F59EE141025} /l1036 ALPS Touch Pad Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}\setup.exe" UNINSTALL ANIO Service --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}\Setup.exe" ANIWZCS2 Service --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C590030-7469-453E-8589-D15DA9D03F52}\Setup.exe" ArcSoft Camera Suite 1.3 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7}\setup.exe" -l0x40c ATI - Utilitaire de désinstallation du logiciel --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Control Panel --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" ATI Display Driver --> rundll32 C:\WINNT\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Avira AntiVir PersonalEdition Classic --> C:\Program Files\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE Barre d'outils MSN --> C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\mtbs.exe c Broadcom Driver Installer --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{BE6890C7-31EF-478C-812E-1E2899ABFCA9} /l1036 BSPlayer --> "C:\Program Files\Webteh\BSplayer\uninstall.exe" Canon Camera Support Core Library --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{B9B9863A-32FD-4133-ADB7-46244ED77694} /l1036 Canon Camera TWAIN Driver 6.4 --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{0F78FFDB-006D-465F-AB10-452A8855C494} /l1036 Canon Camera Window for ZoomBrowser EX --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{F37942A8-B21B-4C5A-A1D2-B676BF55EAE0} Canon Internet Library for ZoomBrowser EX --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2F81FBFC-9A37-431F-9050-14B55485DF5A} Canon MovieEdit Task for ZoomBrowser EX --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{DE286975-ACF1-45B8-9EF7-34E162B2C817} Canon PhotoRecord --> MsiExec.exe /X{BEF56F2D-56ED-4176-BF72-7B68D4A3B98D} Canon RAW Image Task for ZoomBrowser EX --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{9518F764-C54D-47B2-9E73-154B21E79FD2} Canon RemoteCapture Task for ZoomBrowser EX --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2C164906-E68F-462A-9010-70DD022223EF} Canon S200 --> C:\WINNT\System32\CNMCP3W.EXE -@C:\WINNT\IsUn040c.exe -f"C:\BJPrinter\CNMWINNT\Canon S200 Installer\Inst\DeIsL1.isu" -pCanon S200-c"C:\BJPrinter\CNMWINNT\Canon S200 Installer\Inst\bjinst.dll Canon Utilities PhotoStitch 3.1 --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{EF4C7EB0-D71B-43A3-9552-8053DE4B0401} Canon Utilities ZoomBrowser EX --> MsiExec.exe /X{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2} CartoNavPlus --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{E9DBAD8F-011B-48C9-A298-C163D3D6F86F} CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe" CompeGPS 5.21 --> "C:\Program Files\CompeGPS\unins000.exe" Conexant D480 MDC V.9x Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24x6&SUBSYS_542214F1\HXFSETUP.EXE -U -Idel5422k.inf Correctif Windows 2000 - KB842773 --> C:\WINNT\$NtUninstallKB842773$\spuninst\spuninst.exe CutePDF Printer Setup --> C:\WINNT\System32\UnCutePP.exe Dell Modem-On-Hold --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\Setup.exe" -l0x40c ControlPanelAnyText Dell ResourceCD --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D78653C3-A8FF-415F-92E6-D774E634FF2D}\setup.exe" e-Carte Bleue VISA Cléo --> RunDll32 advpack.dll,LaunchINFSection C:\WINNT\INF\ECBCLEO.INF, DefaultUninstall.ntx86 Expertool --> RunDll32 Setupapi.dll,InstallHinfSection TB.Remove 4 TBNT4.inf FUJIFILM USB Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F373956-6960-11D5-BAE5-00E0188E010B}\SETUP.EXE" Google Earth --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly HijackThis 1.99.1 --> C:\Documents and Settings\yannick\Bureau\HijackThis.exe /uninstall Intel SpeedStep technology Applet --> C:\WINNT\IsUninst.exe -f"C:\WINNT\System32\Intel® SpeedStep technology Applet.isu" Intel® PROSet --> MsiExec.exe /I{8552A53D-5226-462B-8E7C-B3174C04E7BD} InterVideo WinDVD --> "C:\Program Files\InstallShield Installation Information\{98E8A2EF-4EAE-43B8-A172-74842B764777}\setup.exe" REMOVEALL iTunes --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{13616DE2-9795-4910-8C93-80D45AF09658} /l1036 Java 2 Runtime Environment, SE v1.4.1_01 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1666FA7C-CB5F-11D6-A78C-00B0D079AF64}\setup.exe" Anytext Java Web Start --> "C:\Program Files\Java Web Start\uninst-javaws.exe" Kaspersky Online Scanner --> C:\WINNT\system32\KASPER~1\KASPER~1\kavuninstall.exe Language pack for Ad-Aware SE --> C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG Les Sims 2 --> C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe Logitech SetPoint --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c Macromedia Flash Player 8 --> RunDll32 advpack.dll,LaunchINFSection C:\WINNT\INF\swflash.inf,DefaultUninstall,5 MapSource --> C:\WINNT\IsUn040c.exe -f"C:\Program Files\Garmin\MapSource\Uninst.isu" Microsoft ActiveSync 3.7 --> "C:\WINNT\ISUN040C.EXE" -f"C:\Program Files\Microsoft ActiveSync\DeIsL2.isu" -c"C:\Program Files\Microsoft ActiveSync\ceuninst.dll" Microsoft Office 2000 SR-1 Disque 2 --> MsiExec.exe /I{0004040C-78E1-11D2-B60F-006097C998E7} Microsoft Office 2000 SR-1 Professional --> MsiExec.exe /I{0001040C-78E1-11D2-B60F-006097C998E7} Microsoft Office XP Media Content --> MsiExec.exe /I{9030040C-6000-11D3-8CFE-0050048383C9} Mise à jour système du Lecteur Windows Media (Série 9) --> C:\PROGRA~1\WINDOW~2\setup_wm.exe /Uninstall Modem Helper --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\Setup.exe" -l0x40c ControlPanel Mozilla Firefox (2.0.0.1) --> C:\Program Files\Mozilla Firefox\uninstall\uninst.exe MSN Messenger 7.0 --> MsiExec.exe /I{ABEB838C-A1A7-4C5D-B7E1-8B4314600816} OMCI --> MsiExec.exe /X{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B} Panda ActiveScan --> C:\WINNT\system32\ASUninst.exe Panda ActiveScan Pilotes Audio SigmaTel AC97 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7959721D-8268-4565-9E0E-C41A9F4848A9}\setup.exe" -l0x40c -nodialog -uninstall QuickTime --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} /l1036 SA Driver Manager --> C:\WINNT\IsUninst.exe -fC:\WINNT\system32\XWAYMgrUninst.isu -cC:\WINNT\system32\XwayMgrU.dll SA UNITELWAY WDM Driver --> C:\WINNT\IsUninst.exe -fC:\WINNT\system32\UNITELWAYW2KDriverUninst.isu -cC:\WINNT\system32\DUNTLWU.DLL SLD Codec Pack --> C:\Program Files\SLD Codec Pack\uninstall.exe SMSC IrCC V4.10.1999.4 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC86822D-3A20-11D5-801C-00E029348F40}\Setup.exe" -l0x40c Sony Ericsson PC Suite --> MsiExec.exe /I{50F90522-2ACE-434E-9987-F42A5F06208F} Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe" TeLL me More --> C:\TeLLmeMore\UnInstal.exe C:\TeLLmeMore\ Vijeo-Designer --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A5C2DE-3122-4714-8110-65C74DD1DF0A}\setup.exe" -l0x40c UNINSTALL -removeonly Windows 2000 Service Pack 4 --> C:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spuninst\spuninst.exe WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall Yahoo! Install Manager --> C:\WINNT\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL -- End of Deckard's System Scanner: finished at 2007-05-17 at 14:29:39 ---------

Salut Charles, Fichier éliminé. Mon PC fonctionne correctement. A bientot.

Salut Charles, J'ai bien désactivé le service mais aprés les scans. Voilà le rapport de Kaspersky: Merci et a bientot. ------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Sunday, May 13, 2007 11:54:21 AM Système d'exploitation : Microsoft Windows 2000 Professional, Service Pack 4 (Build 2195) Kaspersky On-line Scanner version : 5.0.83.0 Dernière mise à jour de la base antivirus Kaspersky : 13/05/2007 Enregistrements dans la base antivirus Kaspersky : 298921 ------------------------------------------------------------------------------- Paramètres d'analyse: Analyser avec la base antivirus suivante: standard Analyser les archives: vrai Analyser les bases de messagerie: vrai Cible de l'analyse - Poste de travail: C:\ D:\ Statistiques de l'analyse: Total d'objets analysés: 98011 Nombre de virus trouvés: 3 Nombre d'objets infectés: 4 / 0 Nombre d'objets suspects: 0 Durée de l'analyse: 00:54:43 Nom de l'objet infecté / Nom du virus / Dernière action C:\BJPrinter\CNMWINNT\Canon S200\Canon S20001\lucile.dat L'objet est verrouillé ignoré C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré C:\Documents and Settings\yannick\.jpi_cache\jar\1.0\e1.jar-4c9aec9d-72980980.zip/TakePrivileges.class Infecté : Trojan.Java.ClassLoader.an ignoré C:\Documents and Settings\yannick\.jpi_cache\jar\1.0\e1.jar-4c9aec9d-72980980.zip/Installer.class Infecté : Trojan-Downloader.Java.Agent.a ignoré C:\Documents and Settings\yannick\.jpi_cache\jar\1.0\e1.jar-4c9aec9d-72980980.zip ZIP: infecté - 2 ignoré C:\Documents and Settings\yannick\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\yannick\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\yannick\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\yannick\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\yannick\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\yannick\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\yannick\ntuser.dat.LOG L'objet est verrouillé ignoré C:\WINNT\CSC000001 L'objet est verrouillé ignoré C:\WINNT\Debug\ipsecpa.log L'objet est verrouillé ignoré C:\WINNT\Debug\oakley.log L'objet est verrouillé ignoré C:\WINNT\Debug\PASSWD.LOG L'objet est verrouillé ignoré C:\WINNT\SchedLgU.Txt L'objet est verrouillé ignoré C:\WINNT\security\logs\scepol.log L'objet est verrouillé ignoré C:\WINNT\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré C:\WINNT\Sti_Trace.log L'objet est verrouillé ignoré C:\WINNT\system32\config\AppEvent.Evt L'objet est verrouillé ignoré C:\WINNT\system32\config\default L'objet est verrouillé ignoré C:\WINNT\system32\config\DEFAULT.LOG L'objet est verrouillé ignoré C:\WINNT\system32\config\sam L'objet est verrouillé ignoré C:\WINNT\system32\config\SAM.LOG L'objet est verrouillé ignoré C:\WINNT\system32\config\SecEvent.Evt L'objet est verrouillé ignoré C:\WINNT\system32\config\security L'objet est verrouillé ignoré C:\WINNT\system32\config\SECURITY.LOG L'objet est verrouillé ignoré C:\WINNT\system32\config\software L'objet est verrouillé ignoré C:\WINNT\system32\config\SOFTWARE.LOG L'objet est verrouillé ignoré C:\WINNT\system32\config\SysEvent.Evt L'objet est verrouillé ignoré C:\WINNT\system32\config\system L'objet est verrouillé ignoré C:\WINNT\system32\config\SYSTEM.ALT L'objet est verrouillé ignoré C:\WINNT\system32\wbem\Repository\CIM.REP L'objet est verrouillé ignoré C:\WINNT\system32\WINLOGON.EXE Infecté : Trojan.Win32.Patched.m ignoré C:\WINNT\WindowsUpdate.log L'objet est verrouillé ignoré Analyse terminée.

Bonjours Charles Ingals, Voilà enfin les 2 rapports. J'ai désactivé le service comme indiqué. Merci. A bientot. SDFix: Version 1.83 Run by yannick - sam. 12/05/2007 - 15:17:33.65 Microsoft Windows 2000 [Version 5.00.2195] Running From: C:\DOCUME~1\yannick\Bureau\SDFIX\SDFix Safe Mode: Checking Services: Name: EXAMPLE Runtime ImagePath: \??\C:\WINNT\system32\main.sys \??\C:\WINNT\System32\runtime.sys EXAMPLE - Deleted Runtime - Deleted Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: Below files will be copied to Backups folder then removed: C:\as.txt - Deleted Removing Temp Files ADS Check: Checking if ADS is attached to system32 Folder C:\WINNT\system32 No streams found. Checking if ADS is attached to svchost.exe C:\WINNT\system32\svchost.exe No streams found. Final Check: Remaining Services: ------------------ Remaining Files: --------------- Backups Folder: - C:\DOCUME~1\yannick\Bureau\SDFIX\SDFix\backups\backups.zip Checking For Files with Hidden Attributes: C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT10.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT11.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT12.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT3.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT4.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT5.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT6.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT7.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT8.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BIT9.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITA.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITB.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITC.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITD.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITE.tmp C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\BITF.tmp Finished StartupList report, 12/05/2007, 19:04:50 StartupList version: 1.52.2 Started from : C:\Documents and Settings\yannick\Bureau\HijackThis.EXE Detected: Windows 2000 SP4 (WinNT 5.00.2195) Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106) * Using default options * Including empty and uninteresting sections * Showing rarely important sections ================================================== Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\system32\regsvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\PRPCUI.exe C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\D-Link\AirPlus G\AirGCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Apoint\Apntex.exe C:\WINNT\system32\ctfmon.exe C:\Documents and Settings\yannick\Bureau\HijackThis.exe -------------------------------------------------- Listing of startup folders: Shell folders Startup: [C:\Documents and Settings\yannick\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders AltStartup: *Folder not found* User shell folders Startup: *Folder not found* User shell folders AltStartup: *Folder not found* Shell folders Common Startup: [C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage] Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE Shell folders Common AltStartup: *Folder not found* User shell folders Common Startup: *Folder not found* User shell folders Alternate Common Startup: *Folder not found* -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINNT\system32\userinit.exe, [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *Registry value not found* [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime Synchronization Manager = mobsync.exe /logon REGSHAVE = C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun PRPCMonitor = PRPCUI.exe PRONoMgr.exe = C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe msnappau = "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" Logitech Hardware Abstraction Layer = KHALMNPR.EXE LoadQM = loadqm.exe iTunesHelper = "C:\Program Files\iTunes\iTunesHelper.exe" Gainward = C:\WINNT\TBPanel.exe /A eCarteBleue-CLEO = "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards ATIPTA = C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe Apoint = C:\Program Files\Apoint\Apoint.exe D-Link AirPlus G = C:\Program Files\D-Link\AirPlus G\AirGCFG.exe ANIWZCS2Service = C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe avgnt = "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ctfmon.exe = ctfmon.exe -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\Run [OptionalComponents] *No values found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- File association entry for .EXE: HKEY_CLASSES_ROOT\exefile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .COM: HKEY_CLASSES_ROOT\comfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .BAT: HKEY_CLASSES_ROOT\batfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .PIF: HKEY_CLASSES_ROOT\piffile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .SCR: HKEY_CLASSES_ROOT\scrfile\shell\open\command (Default) = "%1" /S -------------------------------------------------- File association entry for .HTA: HKEY_CLASSES_ROOT\htafile\shell\open\command (Default) = C:\WINDOWS\system32\mshta.exe "%1" %* -------------------------------------------------- File association entry for .TXT: HKEY_CLASSES_ROOT\txtfile\shell\open\command (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1 -------------------------------------------------- Enumerating Active Setup stub paths: HKLM\Software\Microsoft\Active Setup\Installed Components (* = disabled by HKCU twin) [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] StubPath = C:\WINNT\inf\unregmp2.exe /ShowWMP [>{26923b43-4d38-484f-9b9e-de460746276c}] * StubPath = "C:\WINNT\System32\shmgrate.exe" OCInstallUserConfigIE [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] * StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] * StubPath = "C:\WINNT\System32\shmgrate.exe" OCInstallUserConfigOE [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT [{6A5110B5-E14B-4268-A065-EF89FF33C325}] * StubPath = regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\wmp.inf,PerUserStub [{7790769C-0471-11d2-AF11-00C04FA35D02}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install [{89820200-ECBD-11cf-8B85-00AA005B4340}] * StubPath = regsvr32.exe /s /n /i:U shell32.dll [{89820200-ECBD-11cf-8B85-00AA005B4383}] * StubPath = %SystemRoot%\System32\ie4uinit.exe [{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] * StubPath = %SystemRoot%\System32\updcrl.exe -e -u %SystemRoot%\System32\verisignpub1.crl -------------------------------------------------- Enumerating ICQ Agent Autostart apps: HKCU\Software\Mirabilis\ICQ\Agent\Apps *Registry key not found* -------------------------------------------------- Load/Run keys from C:\WINNT\WIN.INI: load=*INI section not found* run=*INI section not found* Load/Run keys from Registry: HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\Windows: load= HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs= -------------------------------------------------- Shell & screensaver key from C:\WINNT\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=C:\WINNT\system32\ss3dfo.scr drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Checking for EXPLORER.EXE instances: C:\WINNT\Explorer.exe: PRESENT! C:\Explorer.exe: not present C:\WINNT\Explorer\Explorer.exe: not present C:\WINNT\System\Explorer.exe: not present C:\WINNT\System32\Explorer.exe: not present C:\WINNT\Command\Explorer.exe: not present C:\WINNT\Fonts\Explorer.exe: not present -------------------------------------------------- Checking for superhidden extensions: .lnk: HIDDEN! (arrow overlay: yes) .pif: HIDDEN! (arrow overlay: yes) .exe: not hidden .com: not hidden .bat: not hidden .hta: not hidden .scr: not hidden .shs: HIDDEN! .shb: HIDDEN! .vbs: not hidden .vbe: not hidden .wsh: not hidden .scf: HIDDEN! (arrow overlay: NO!) .url: HIDDEN! (arrow overlay: yes) .js: not hidden .jse: not hidden -------------------------------------------------- Verifying REGEDIT.EXE integrity: - Regedit.exe found in C:\WINNT - .reg open command is normal (regedit.exe %1) - Regedit.exe has no CompanyName property! It is either missing or named something else. - Regedit.exe has no OriginalFilename property! It is either missing or named something else. - Regedit.exe has no FileDescription property! It is either missing or named something else. Registry check failed! -------------------------------------------------- Enumerating Browser Helper Objects: (no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} e-Carte Bleue Browser Helper Object - C:\WINNT\system32\BhoECart.dll (file missing) - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} (no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F} (no name) - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} (no name) - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -------------------------------------------------- Enumerating Task Scheduler jobs: *No jobs found* -------------------------------------------------- Enumerating Download Program Files: [DirectAnimation Java Classes] CODEBASE = file://C:\WINNT\Java\classes\dajava.cab OSD = C:\WINNT\Downloaded Program Files\DirectAnimation Java Classes.osd [Microsoft XML Parser for Java] CODEBASE = file://C:\WINNT\Java\classes\xmldso.cab OSD = C:\WINNT\Downloaded Program Files\Microsoft XML Parser for Java.osd [CKAVWebScan Object] InProcServer32 = C:\WINNT\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll CODEBASE = http://webscanner.kaspersky.fr/kavwebscan_unicode.cab [YInstStarter Class] InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll [WUWebControl Class] InProcServer32 = C:\WINNT\System32\wuweb.dll CODEBASE = http://update.microsoft.com/windowsupdate/...b?1167944222356 [ActiveScan Installer Class] InProcServer32 = C:\WINNT\Downloaded Program Files\asinst.dll CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab [shockwave Flash Object] InProcServer32 = C:\WINNT\System32\Macromed\Flash\Flash9b.ocx CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab -------------------------------------------------- Enumerating Winsock LSP files: NameSpace #1: C:\WINNT\System32\rnr20.dll NameSpace #2: C:\WINNT\System32\winrnr.dll Protocol #1: C:\WINNT\system32\msafd.dll Protocol #2: C:\WINNT\system32\msafd.dll Protocol #3: C:\WINNT\system32\msafd.dll Protocol #4: C:\WINNT\system32\rsvpsp.dll Protocol #5: C:\WINNT\system32\rsvpsp.dll Protocol #6: C:\WINNT\system32\msafd.dll Protocol #7: C:\WINNT\system32\msafd.dll Protocol #8: C:\WINNT\system32\msafd.dll Protocol #9: C:\WINNT\system32\msafd.dll Protocol #10: C:\WINNT\system32\msafd.dll Protocol #11: C:\WINNT\system32\msafd.dll Protocol #12: C:\WINNT\system32\msafd.dll Protocol #13: C:\WINNT\system32\msafd.dll Protocol #14: C:\WINNT\system32\msafd.dll Protocol #15: C:\WINNT\system32\msafd.dll Protocol #16: C:\WINNT\system32\msafd.dll Protocol #17: C:\WINNT\system32\msafd.dll Protocol #18: C:\WINNT\system32\msafd.dll Protocol #19: C:\WINNT\system32\msafd.dll Protocol #20: C:\WINNT\system32\msafd.dll Protocol #21: C:\WINNT\system32\msafd.dll Protocol #22: C:\WINNT\system32\msafd.dll Protocol #23: C:\WINNT\system32\msafd.dll Protocol #24: C:\WINNT\system32\msafd.dll -------------------------------------------------- Enumerating Windows NT/2000/XP services Pilote ACPI Microsoft: System32\DRIVERS\ACPI.sys (system) Environnement de prise en charge de réseau AFD: \SystemRoot\System32\drivers\afd.sys (autostart) Filtre de bus AGP Intel: System32\DRIVERS\agp440.sys (system) Avertissement: %SystemRoot%\System32\services.exe (manual start) ANIO Service: \??\C:\WINNT\system32\ANIO.SYS (autostart) ANIWZCSd Service: C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (autostart) AntiVir PersonalEdition Classic Scheduler: C:\Program Files\AntiVir PersonalEdition Classic\sched.exe (autostart) AntiVir PersonalEdition Classic Guard: C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe (autostart) Alps Touch Pad Filter Driver for Windows 2000/XP: System32\DRIVERS\Apfiltr.sys (manual start) Gestion d'applications: %SystemRoot%\system32\services.exe (manual start) Pilote de média asynchrone RAS: System32\DRIVERS\asyncmac.sys (manual start) Contrôleur de disque dur IDE/ESDI standard: System32\DRIVERS\atapi.sys (system) ati: System32\DRIVERS\ati.sys (manual start) Ati HotKey Poller: %SystemRoot%\System32\Ati2evxx.exe (autostart) ati2mtag: System32\DRIVERS\ati2mtag.sys (manual start) Protocole client ATM ARP: System32\DRIVERS\atmarpc.sys (manual start) Pilote audio Stub: System32\DRIVERS\audstub.sys (manual start) avgntdd: SYSTEM32\DRIVERS\avgntdd.sys (system) avgntmgr: SYSTEM32\drivers\avgntmgr.sys (system) avipbb: system32\DRIVERS\avipbb.sys (system) Broadcom 570x Gigabit Integrated Controller: System32\DRIVERS\b57w2k.sys (manual start) Service de transfert intelligent en arrière-plan: %SystemRoot%\system32\svchost.exe -k BITSgroup (autostart) Explorateur d'ordinateur: %SystemRoot%\System32\services.exe (autostart) Closed Caption Decoder: System32\DRIVERS\CCDECODE.sys (manual start) Pilote de CD-ROM: System32\DRIVERS\cdrom.sys (system) Service d'indexation: %SystemRoot%\system32\cisvc.exe (manual start) Gestionnaire de l'Album: %SystemRoot%\system32\clipsrv.exe (manual start) Pilote pour Batterie à méthode de contrôle ACPI Microsoft: System32\DRIVERS\CmBatt.sys (manual start) Pilote de batterie composite Microsoft: System32\DRIVERS\compbatt.sys (system) Client DHCP: %SystemRoot%\System32\services.exe (autostart) Pilote de disque: System32\DRIVERS\disk.sys (system) Service d'administration du Gestionnaire de disque logique: %SystemRoot%\System32\dmadmin.exe /com (manual start) dmboot: System32\drivers\dmboot.sys (disabled) Pilote de Gestionnaire de disque logique: System32\DRIVERS\dmio.sys (system) Gestionnaire de disque logique: %SystemRoot%\System32\services.exe (autostart) Synthé logiciel Microsoft DirectMusic (WDM): system32\drivers\DMusic.sys (manual start) Client DNS: %SystemRoot%\System32\services.exe (autostart) UNTLW device: System32\Drivers\DuntlwNT.sys (manual start) Journal des événements: %SystemRoot%\system32\services.exe (autostart) Système d'événements de COM+: C:\WINNT\System32\svchost.exe -k netsvcs (manual start) Service de télécopie: %systemroot%\system32\faxsvc.exe (manual start) Pilote du Gestionnaire de volume: System32\DRIVERS\ftdisk.sys (system) GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start) Classificateur de paquets générique: System32\DRIVERS\msgpc.sys (manual start) HID Input Service: %SystemRoot%\system32\hidserv.exe (autostart) Pilote de classe HID Microsoft: System32\DRIVERS\hidusb.sys (autostart) HSFHWICH: System32\DRIVERS\HSFHWICH.sys (manual start) HSF_DP: System32\DRIVERS\HSF_DP.sys (manual start) Pilote pour clavier i8042 et souris sur port PS/2: System32\DRIVERS\i8042prt.sys (system) Iap: C:\Program Files\Dell\OpenManage\Client\Iap.exe (autostart) InstallDriver Table Manager: C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (manual start) Adapter Switching: C:\Program Files\Intel\Switching\User\RoamSvc.exe (autostart) Pilote de filtre de trafic IP: System32\DRIVERS\ipfltdrv.sys (manual start) Pilote de tunnelage IP dans IP: System32\DRIVERS\ipinip.sys (manual start) Traducteur d'adresses réseau IP: System32\DRIVERS\ipnat.sys (manual start) iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start) Pilote IPSEC: System32\DRIVERS\ipsec.sys (manual start) Protocole IrDA: System32\DRIVERS\irda.sys (autostart) IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start) Moniteur infrarouge: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de bus Plug-and-Play ISA/EISA: System32\DRIVERS\isapnp.sys (system) Sony Ericsson 600i driver (WDM): System32\DRIVERS\k600bus.sys (manual start) Sony Ericsson 600i USB WMC Modem Filter: System32\DRIVERS\k600mdfl.sys (manual start) Sony Ericsson 600i USB WMC Modem Drivers: System32\DRIVERS\k600mdm.sys (manual start) Sony Ericsson 600i USB WMC Device Management Drivers: System32\DRIVERS\k600mgmt.sys (manual start) Sony Ericsson 600i USB WMC OBEX Interface Drivers: System32\DRIVERS\k600obex.sys (manual start) Pilote de la classe Clavier: System32\DRIVERS\kbdclass.sys (system) Mélangeur audio Wave de noyau Microsoft: system32\drivers\kmixer.sys (manual start) Serveur: %SystemRoot%\System32\services.exe (autostart) Station de travail: %SystemRoot%\System32\services.exe (autostart) Logitech SetPoint HID Mouse Filter Driver: System32\DRIVERS\LHidKE.Sys (manual start) Logitech SetPoint USB Receiver device driver: System32\Drivers\LHidUsbK.Sys (manual start) Service d'application d'assistance TCP/IP NetBIOS: %SystemRoot%\System32\services.exe (autostart) Logitech SetPoint Mouse Filter Driver: System32\DRIVERS\LMouKE.Sys (manual start) Machine Debug Manager: "C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe" (autostart) mdmxsdk: System32\DRIVERS\mdmxsdk.sys (autostart) Affichage des messages: %SystemRoot%\System32\services.exe (disabled) Pilote de commutation de carte Intel: System32\DRIVERS\mipmn2k.sys (manual start) Partage de Bureau à distance NetMeeting: C:\WINNT\System32\mnmsrvc.exe (manual start) Pilote de la classe Souris: System32\DRIVERS\mouclass.sys (system) Pilote HID de souris: System32\DRIVERS\mouhid.sys (manual start) BDA MPE Filter: System32\DRIVERS\MPE.sys (manual start) MRXSMB: System32\DRIVERS\mrxsmb.sys (system) Distributed Transaction Coordinator: C:\WINNT\System32\msdtc.exe (manual start) Microsoft IR Communications Driver: System32\DRIVERS\MSIRCOMM.sys (manual start) Windows Installer: C:\WINNT\System32\msiexec.exe /V (manual start) Proxy de service de répartition Microsoft: system32\drivers\MSKSSRV.sys (manual start) Proxy d'horloge de répartition Microsoft: system32\drivers\MSPCLOCK.sys (manual start) Proxy de gestion de qualité de répartition Microsoft: system32\drivers\MSPQM.sys (manual start) Microsoft Streaming Tee/Sink-to-Sink Converter: system32\drivers\MSTEE.sys (manual start) Mup: system32\drivers\mup.sys (system) NABTS/FEC VBI Codec: System32\DRIVERS\NABTSFEC.sys (manual start) NetAccess Service: C:\WINNT\system32\NA_Service.exe (autostart) Pilote TAPI NDIS d'accès à distance: System32\DRIVERS\ndistapi.sys (manual start) NDIS Protocole mode utilisateur E/S: System32\DRIVERS\ndisuio.sys (manual start) Pilote réseau étendu NDIS d'accès à distance: System32\DRIVERS\ndiswan.sys (manual start) Interface NetBIOS: System32\DRIVERS\netbios.sys (system) NetBT: System32\DRIVERS\netbt.sys (system) DDE réseau: %SystemRoot%\system32\netdde.exe (manual start) DSDM DDE réseau: %SystemRoot%\system32\netdde.exe (manual start) NetDetect: \SystemRoot\system32\drivers\netdtect.sys (manual start) Ouverture de session réseau: %SystemRoot%\System32\lsass.exe (manual start) Connexions réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Intel NCS NetService: C:\Program Files\Intel\NCS\Sync\NetSvc.exe (manual start) Fournisseur de la prise en charge de sécurité LM NT: %SystemRoot%\System32\lsass.exe (manual start) Médias amovibles: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de filtre de trafic IPX: System32\DRIVERS\nwlnkflt.sys (manual start) Pilote de transfert de trafic IPX: System32\DRIVERS\nwlnkfwd.sys (manual start) O2Micro SmartCardBus Reader: System32\DRIVERS\ozscr.sys (manual start) OMCI WDM Device Driver: System32\DRIVERS\omci.sys (system) Pilote de classe parallèle: System32\DRIVERS\parallel.sys (manual start) Pilote de port parallèle: System32\DRIVERS\parport.sys (system) PCAMPR5 NDIS Protocol Driver: \??\C:\WINNT\system32\PCAMPR5.SYS (manual start) PCANDIS5 NDIS Protocol Driver: \??\C:\WINNT\system32\PCANDIS5.SYS (manual start) Pilote de bus PCI: System32\DRIVERS\pci.sys (system) PCIIde: System32\DRIVERS\pciide.sys (system) Pcmcia: System32\DRIVERS\pcmcia.sys (system) Plug-and-Play: %SystemRoot%\system32\services.exe (autostart) Agent de stratégie IPSEC: %SystemRoot%\System32\lsass.exe (autostart) Miniport réseau étendu (PPTP): System32\DRIVERS\raspptp.sys (manual start) Emplacement protégé: %SystemRoot%\system32\services.exe (autostart) Pilote de liaison parallèle directe: System32\DRIVERS\ptilink.sys (manual start) Pilote de connexion automatique d'accès distant: System32\DRIVERS\rasacd.sys (system) Gestionnaire de connexion automatique d'accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Miniport réseau étendu (modem IrDA): System32\DRIVERS\rasirda.sys (manual start) Miniport réseau étendu (L2TP): System32\DRIVERS\rasl2tp.sys (manual start) Gestionnaire de connexions d'accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Parallèle direct: System32\DRIVERS\raspti.sys (manual start) Microsoft Streaming Network Raw Channel Access: system32\drivers\RCA.sys (manual start) Rdbss: System32\DRIVERS\rdbss.sys (system) Pilote de filtre de lecture digitale de CD audio: System32\DRIVERS\redbook.sys (system) RegSrvc: C:\WINNT\System32\RegSrvc.exe (autostart) Routage et accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled) Service d'accès à distance au Registre: %SystemRoot%\system32\regsvc.exe (autostart) RoamMgr: C:\WINNT\System32\RoamMgr.exe (autostart) Microsoft Legacy Modem Driver: System32\Drivers\RootMdm.sys (manual start) Localisateur d'appels de procédure distante (RPC): %SystemRoot%\System32\locator.exe (manual start) Appel de procédure distante (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart) QoS RSVP: %SystemRoot%\System32\rsvp.exe -s (manual start) D-Link USB Wireless LAN Card Driver: System32\DRIVERS\Dr71WU.sys (manual start) Spectrum24 Event Monitor: C:\WINNT\System32\S24EvMon.exe (autostart) WLAN Transport: System32\DRIVERS\s24trans.sys (autostart) Gestionnaire de comptes de sécurité: %SystemRoot%\system32\lsass.exe (autostart) Prise en charge des cartes à puces: %SystemRoot%\System32\SCardSvr.exe (manual start) Carte à puce: %SystemRoot%\System32\SCardSvr.exe (autostart) Planificateur de tâches: %SystemRoot%\system32\MSTask.exe (autostart) Service d'exécution par délégation: %SystemRoot%\system32\services.exe (autostart) Notification d'événement système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Prolific2 Serial port driver: System32\DRIVERS\ser2pl.sys (manual start) Pilote de filtre Serenum: System32\DRIVERS\serenum.sys (manual start) Pilote de port série: System32\DRIVERS\serial.sys (system) Partage de connexion Internet: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) BDA Slip De-Framer: System32\DRIVERS\SLIP.sys (manual start) Pilote de périphérique SMC IrCC Miniport: System32\DRIVERS\smcirda.sys (manual start) Spouleur d'impression: %SystemRoot%\system32\spoolsv.exe (autostart) Srv: System32\DRIVERS\srv.sys (manual start) ssmdrv: system32\DRIVERS\ssmdrv.sys (manual start) Audio Driver (WDM) - SigmaTel CODEC: system32\drivers\STAC97.sys (manual start) Still Image Service: %systemroot%\system32\stisvc.exe (autostart) BDA IPSink: System32\DRIVERS\StreamIP.sys (manual start) Pilote de bus logiciel: System32\DRIVERS\swenum.sys (manual start) Synthétiseur de table de sons GC noyau Microsoft: system32\drivers\swmidi.sys (manual start) Périphérique audio système Microsoft: system32\drivers\sysaudio.sys (manual start) Journaux et alertes de performance: %SystemRoot%\system32\smlogsvc.exe (manual start) Téléphonie: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Pilote du protocole TCP/IP: System32\DRIVERS\tcpip.sys (system) Telnet: %SystemRoot%\system32\tlntsvr.exe (manual start) Client de suivi de lien distribué: %SystemRoot%\system32\services.exe (autostart) Pilote de contrôleur hôte universel USB Microsoft: System32\DRIVERS\uhcd.sys (manual start) Conexant Setup API: system32\drivers\UIUSys.sys (manual start) Pilote de mise à jour du microcode: System32\DRIVERS\update.sys (manual start) Onduleur: %SystemRoot%\System32\ups.exe (manual start) Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: System32\DRIVERS\usbehci.sys (manual start) WayTechUSBFilterDriver: System32\DRIVERS\UsbFltr.sys (autostart) Pilote de concentrateur standard USB Microsoft: System32\DRIVERS\usbhub.sys (manual start) USB Hub Support: System32\DRIVERS\usbhub20.sys (manual start) Classe d'imprimantes USB Microsoft: System32\DRIVERS\usbprint.sys (manual start) Pilote de scanneur USB: System32\DRIVERS\usbscan.sys (manual start) Pilote de stockage de masse USB: System32\DRIVERS\USBSTOR.SYS (manual start) Gestionnaire d'utilitaires: %SystemRoot%\System32\UtilMan.exe (manual start) VgaSave: \SystemRoot\System32\drivers\vga.sys (system) Horloge Windows: %SystemRoot%\System32\services.exe (manual start) Pilote Intel® PRO/Wireless 7100 Adapter: System32\DRIVERS\w70n5.sys (manual start) Pilote ARP IP d'accès à distance: System32\DRIVERS\wanarp.sys (manual start) Windows CE USB Serial Host Driver: System32\DRIVERS\wceusbsh.sys (manual start) Pilote WINMM de compatibilité audio WDM Microsoft: system32\drivers\wdmaud.sys (manual start) winachsf: System32\DRIVERS\HSF_CNXT.sys (manual start) Infrastructure de gestion Windows: %SystemRoot%\System32\WBEM\WinMgmt.exe (autostart) Service de numéro de série du lecteur multimédia portable: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Extensions du pilote WMI: %SystemRoot%\system32\Services.exe (manual start) World Standard Teletext Codec: System32\DRIVERS\WSTCODEC.SYS (manual start) Mises à jour automatiques: %systemroot%\system32\svchost.exe -k wugroup (autostart) Configuration sans fil: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: *Registry value not found* -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: Network.ConnectionTray: C:\WINNT\system32\NETSHELL.dll WebCheck: C:\WINNT\System32\webcheck.dll SysTray: stobject.dll -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- End of report, 34 288 bytes Report generated in 2.393 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

up merci

Bonsoir Charles Ingals, Avec un peu de décalage dans ma réponse, voici les résultats: * le fichier C:\WINNT\System32\runtime.sys n'existe pas sur mon disque. * scan en ligne avec Panda sans soucis: Incident Statut Analyse Virus:Trj/ClassLoader.E Désinfecté C:\Documents and Settings\yannick\.jpi_cache\jar\1.0\e1.jar-4c9aec9d-72980980.zip[NewURLClassLoader.class] * rapport DiagHelp: C:\WINNT\System32/drivers\ElbyCDFL.sys -->26/12/2006 14:54:35 C:\WINNT\System32/drivers\ElbyCDIO.sys -->26/12/2006 14:54:34 C:\WINNT\System32/drivers\avgntmgr.sys -->22/11/2006 14:30:31 C:\WINNT\System32/drivers\avgntdd.sys -->22/11/2006 14:30:31 C:\WINNT\System32/drivers\AvgAsCln.sys -->05/09/2006 18:03:16 C:\WINNT\System32/drivers\rt73.bin -->16/11/2005 19:21:34 C:\WINNT\System32/drivers\Dr71WU.sys -->03/11/2005 21:39:02 C:\WINNT\System32\Perflib_Perfdata_64c.dat -->16/04/2007 22:24:08 C:\WINNT\System32\NetAccessLog.txt -->16/04/2007 22:22:44 C:\WINNT\System32\asfiles.txt -->10/04/2007 23:01:34 C:\WINNT\System32\Uninstall.ico -->10/04/2007 22:57:17 C:\WINNT\System32\pavas.ico -->10/04/2007 22:57:16 C:\WINNT\System32\Help.ico -->10/04/2007 22:57:16 C:\WINNT\System32\ANIWZCS{C0B569CC-2844-4CA3-95E3-06CEF966BDAE} -->10/04/2007 22:16:25 C:\WINNT\System32\CONFIG.NT -->22/03/2007 19:32:02 C:\WINNT\System32\Perflib_Perfdata_2cc.dat -->20/03/2007 21:56:42 C:\WINNT\System32\Perflib_Perfdata_2a4.dat -->18/03/2007 15:25:25 C:\WINNT\System32\Perflib_Perfdata_288.dat -->05/03/2007 20:37:24 C:\WINNT\System32\Perflib_Perfdata_294.dat -->04/03/2007 19:24:32 C:\WINNT\System32\Perflib_Perfdata_29c.dat -->03/03/2007 00:53:01 C:\WINNT\System32\ANIWZCS{BB531029-8A14-4484-BFB6-11359DD38430} -->01/03/2007 22:04:56 C:\WINNT\System32\UNITELWAYW2KDriverUninst.isu -->22/02/2007 20:26:56 C:\WINNT\System32\XWAYMgrUninst.isu -->22/02/2007 20:26:49 C:\WINNT\System32\Perflib_Perfdata_298.dat -->22/02/2007 20:17:10 C:\WINNT\System32\Perflib_Perfdata_2a8.dat -->16/02/2007 20:09:13 C:\WINNT\System32\Perflib_Perfdata_2f0.dat -->15/02/2007 23:24:25 C:\WINNT\System32\WINLOGON.EXE -->14/02/2007 22:13:46 C:\WINNT\System32\Perflib_Perfdata_2d0.dat -->14/02/2007 21:55:47 C:\WINNT\System32\tmp.txt -->10/02/2007 10:21:08 C:\WINNT\System32\tmp.reg -->10/02/2007 10:21:08 C:\WINNT\System32\Perflib_Perfdata_1578.dat -->10/02/2007 09:43:10 C:\WINNT\System32\Perflib_Perfdata_13d8.dat -->10/02/2007 09:43:09 C:\WINNT\mmdet.log -->16/04/2007 22:25:26 C:\WINNT\Windows Update.log -->16/04/2007 22:25:21 C:\WINNT\WindowsUpdate.log -->16/04/2007 22:22:58 C:\WINNT\SchedLgU.Txt -->12/04/2007 23:21:15 C:\WINNT\ShellIconCache -->12/04/2007 23:21:09 C:\WINNT\win.ini -->10/04/2007 23:46:19 C:\WINNT\setupapi.log -->10/04/2007 22:57:54 C:\WINNT\ntbtlog.txt -->29/03/2007 22:17:24 C:\WINNT\Sti_Trace.log -->21/03/2007 00:49:46 C:\WINNT\PL7SYS.INI -->10/03/2007 10:33:41 C:\WINNT\55014 -->27/02/2007 14:39:55 C:\WINNT\115138.ocx -->22/02/2007 20:32:30 C:\WINNT\113090.ocx -->22/02/2007 20:27:20 C:\WINNT\system.ini -->22/02/2007 20:26:27 C:\WINNT\PRFSERV.INI -->22/02/2007 20:10:05 C:\WINNT\FraUinst.exe |03/01/2006 18:52:00 C:\WINNT\IsUn040c.exe |05/08/2004 15:37:24 C:\WINNT\IsUninst.exe |05/08/2004 15:47:58 C:\WINNT\KHALMNPR.Exe |18/06/2005 15:12:00 C:\WINNT\OptChecker.exe |02/01/2007 21:12:11 C:\WINNT\OptRemove.exe |02/01/2007 21:12:11 C:\WINNT\QTINSTAL.EXE |24/09/2005 21:23:01 C:\WINNT\QTW16DEL.EXE |24/09/2005 21:23:17 C:\WINNT\TBPanel.exe |17/12/2004 11:08:43 C:\WINNT\TBZoom.exe |17/12/2004 11:08:43 C:\WINNT\twunk_16.exe |21/08/2002 22:51:54 C:\WINNT\twunk_32.exe |21/08/2002 22:51:54 C:\WINNT\UN16040C.EXE |24/09/2005 20:30:29 C:\WINNT\uneng.exe |15/09/2004 10:54:34 C:\WINNT\unin040c.exe |24/02/2006 20:09:50 C:\WINNT\UnSetup.exe |03/01/2006 18:52:00 C:\WINNT\pcdlib32.dll |04/11/2005 18:57:52 C:\WINNT\POCE98.DLL |23/09/1998 22:10:16 C:\WINNT\POCELANG.DLL |23/02/1999 15:12:18 C:\WINNT\TBManage.dll |17/12/2004 11:08:43 C:\WINNT\twain.dll |21/08/2002 22:51:53 C:\WINNT\twain_32.dll |21/08/2002 22:51:53 C:\WINNT\WCDTGR.DLL |22/02/2007 20:10:27 C:\WINNT\WCDTGR2.DLL |22/02/2007 20:10:27 C:\WINNT\WDTGR.DLL |22/02/2007 20:10:27 C:\WINNT\WDTGR2.DLL |22/02/2007 20:10:27 C:\WINNT\WNETWAY.DLL |22/02/2007 20:10:27 C:\WINNT\WNETWAY2.DLL |22/02/2007 20:10:27 C:\WINNT\WNETWT16.DLL |22/02/2007 20:10:27 C:\WINNT\WNETWT32.DLL |22/02/2007 20:10:27 C:\WINNT\system32\AdHocWiz.exe |03/02/2003 12:03:18 C:\WINNT\system32\append.exe |21/08/2002 22:41:55 C:\WINNT\system32\asuninst.exe |10/04/2007 22:57:48 C:\WINNT\system32\ati2evxx.exe |15/06/2005 22:10:17 C:\WINNT\system32\Ati2mdxx.exe |15/06/2005 22:10:17 C:\WINNT\system32\CnfUTW3.exe |22/02/2007 20:26:44 C:\WINNT\system32\CNMCP3W.EXE |30/11/2005 22:09:55 C:\WINNT\system32\debug.exe |21/08/2002 22:42:49 C:\WINNT\system32\Deutz Engine.exe |07/06/2006 22:28:24 C:\WINNT\system32\dfrgfat.exe |04/01/2007 23:22:15 C:\WINNT\system32\dfrgntfs.exe |04/01/2007 23:22:15 C:\WINNT\system32\dmadmin.exe |04/01/2007 23:22:18 C:\WINNT\system32\dmremote.exe |04/01/2007 23:22:19 C:\WINNT\system32\dosx.exe |21/08/2002 22:42:59 C:\WINNT\system32\dumphive.exe |10/02/2007 10:20:11 C:\WINNT\system32\duninstall.exe |25/11/2004 12:22:38 C:\WINNT\system32\dvdplay.exe |15/12/1999 01:30:38 C:\WINNT\system32\edlin.exe |21/08/2002 22:43:27 C:\WINNT\system32\exe2bin.exe |21/08/2002 22:43:32 C:\WINNT\system32\fastopen.exe |21/08/2002 22:43:33 C:\WINNT\system32\installW2k.exe |22/02/2007 20:26:44 C:\WINNT\system32\instuntlw98.exe |22/02/2007 20:26:44 C:\WINNT\system32\java.exe |25/11/2004 12:22:01 C:\WINNT\system32\javaw.exe |25/11/2004 12:22:01 C:\WINNT\system32\mem.exe |21/08/2002 22:46:07 C:\WINNT\system32\mscdexnt.exe |21/08/2002 22:46:41 C:\WINNT\system32\msswchx.exe |04/01/2007 23:28:06 C:\WINNT\system32\NA_Config.exe |22/02/2007 20:26:47 C:\WINNT\system32\NA_MBP.exe |22/02/2007 20:26:47 C:\WINNT\system32\NA_Service.exe |22/02/2007 20:26:47 C:\WINNT\system32\NA_XWAY.exe |22/02/2007 20:26:47 C:\WINNT\system32\nlsfunc.exe |21/08/2002 22:48:00 C:\WINNT\system32\nw16.exe |21/08/2002 22:48:24 C:\WINNT\system32\PfWizard.exe |03/02/2003 11:59:00 C:\WINNT\system32\prpcui.exe |05/08/2004 15:48:01 C:\WINNT\system32\redir.exe |21/08/2002 22:49:30 C:\WINNT\system32\RegSrvc.exe |12/01/2003 17:08:26 C:\WINNT\system32\RoamMgr.exe |03/02/2003 11:58:08 C:\WINNT\system32\S24EvMon.exe |12/01/2003 17:09:46 C:\WINNT\system32\SbrngSvc.exe |03/02/2003 11:53:40 C:\WINNT\system32\setver.exe |21/08/2002 22:50:08 C:\WINNT\system32\share.exe |21/08/2002 22:50:11 C:\WINNT\system32\SrchSTS.exe |10/02/2007 10:20:11 C:\WINNT\system32\swreg.exe |10/02/2007 10:20:09 C:\WINNT\system32\swsc.exe |10/02/2007 10:20:10 C:\WINNT\system32\swxcacls.exe |10/02/2007 10:20:11 C:\WINNT\system32\TPIDITST.exe |01/03/2002 12:20:22 C:\WINNT\system32\UnCutePP.exe |16/06/2005 21:39:15 C:\WINNT\system32\vwipxspx.exe |21/08/2002 22:52:31 C:\WINNT\system32\ZCfgSvc.exe |03/02/2003 11:57:16 C:\WINNT\system32\aIPH.dll |22/01/2007 20:51:03 C:\WINNT\system32\amstream.dll |05/08/2004 16:38:08 C:\WINNT\system32\ANICtl.dll |22/01/2007 20:51:03 C:\WINNT\system32\ANIOApi.dll |22/01/2007 20:50:50 C:\WINNT\system32\ANIWZCS2.dll |22/01/2007 20:51:03 C:\WINNT\system32\AQCKGen.dll |22/01/2007 20:51:03 C:\WINNT\system32\ati2cqag.dll |15/06/2005 22:10:17 C:\WINNT\system32\ati2dvag.dll |15/06/2005 22:10:17 C:\WINNT\system32\ati2edxx.dll |15/06/2005 22:10:17 C:\WINNT\system32\ati2evxx.dll |15/06/2005 22:10:17 C:\WINNT\system32\ati3d1ag.dll |05/08/2004 11:38:15 C:\WINNT\system32\ati3d2ag.dll |05/08/2004 11:38:15 C:\WINNT\system32\ati3duag.dll |15/06/2005 22:10:17 C:\WINNT\system32\ATIDDC.DLL |15/06/2005 22:10:17 C:\WINNT\system32\ATIDEMGR.dll |15/06/2005 22:10:17 C:\WINNT\system32\Atiidtxx.dll |05/08/2004 11:38:17 C:\WINNT\system32\atiiiexx.dll |15/06/2005 22:10:18 C:\WINNT\system32\atikvmag.dll |15/06/2005 22:10:18 C:\WINNT\system32\atimcd.dll |05/08/2004 15:22:12 C:\WINNT\system32\atimcdr3.dll |05/08/2004 15:22:13 C:\WINNT\system32\atioglxx.dll |15/06/2005 22:10:18 C:\WINNT\system32\atipdlxx.dll |15/06/2005 22:10:19 C:\WINNT\system32\atitvo32.dll |15/06/2005 22:10:19 C:\WINNT\system32\ativcoxx.dll |15/06/2005 22:10:19 C:\WINNT\system32\ativvaxx.dll |15/06/2005 22:10:19 C:\WINNT\system32\atmfd.dll |04/01/2007 23:21:38 C:\WINNT\system32\atmlib.dll |04/01/2007 23:21:39 C:\WINNT\system32\cdral.dll |17/12/2002 12:32:40 C:\WINNT\system32\cdrtc.dll |17/12/2002 12:32:54 C:\WINNT\system32\CNDPTPC.dll |08/06/2005 21:52:53 C:\WINNT\system32\CNDPTPU.dll |08/06/2005 21:52:53 C:\WINNT\system32\CNMLM3w.DLL |30/11/2005 22:10:03 C:\WINNT\system32\CNMVS3w.DLL |30/11/2005 22:10:03 C:\WINNT\system32\cutemon2k.dll |16/06/2005 21:39:15 C:\WINNT\system32\DellSys.dll |04/04/2002 12:55:24 C:\WINNT\system32\dfrgres.dll |21/08/2002 22:42:51 C:\WINNT\system32\dfrgsnap.dll |04/01/2007 23:22:15 C:\WINNT\system32\dfrgui.dll |21/08/2002 22:42:51 C:\WINNT\system32\dgrpsetu.dll |30/07/2004 11:46:33 C:\WINNT\system32\dgsetup.dll |21/08/2002 22:42:52 C:\WINNT\system32\dmconfig.dll |04/01/2007 23:22:18 C:\WINNT\system32\dmintf.dll |04/01/2007 23:22:18 C:\WINNT\system32\dmserver.dll |04/01/2007 23:22:19 C:\WINNT\system32\dmutil.dll |04/01/2007 23:22:19 C:\WINNT\system32\DrvCnfRg.dll |22/02/2007 20:26:44 C:\WINNT\system32\DUNTLWU.dll |22/02/2007 20:26:44 C:\WINNT\system32\efsadu.dll |21/08/2002 22:43:27 C:\WINNT\system32\ElbyCDIO.dll |13/12/2006 22:24:42 C:\WINNT\system32\EqnClass.Dll |30/07/2004 11:46:33 C:\WINNT\system32\eraser.dll |25/07/2003 12:14:34 C:\WINNT\system32\FFCore.dll |22/03/2004 14:46:22 C:\WINNT\system32\FFECart.dll |22/03/2004 14:46:24 C:\WINNT\system32\FFRAFLIB.DLL |11/08/2004 10:21:31 C:\WINNT\system32\FFTIFF16.dll |11/08/2004 10:21:31 C:\WINNT\system32\FINFCHECK.dll |11/08/2004 10:20:11 C:\WINNT\system32\FINFCOPY.dll |11/08/2004 10:20:10 C:\WINNT\system32\FREGSHEX.DLL |11/08/2004 10:20:09 C:\WINNT\system32\GEARAspi.dll |31/05/2005 10:20:36 C:\WINNT\system32\hhactivex.dll |14/06/2005 14:01:30 C:\WINNT\system32\HPDCMON.DLL |08/12/1998 13:24:40 C:\WINNT\system32\HSFCI010.dll |14/06/2005 10:17:27 C:\WINNT\system32\HTICONS.DLL |04/01/2007 23:23:06 C:\WINNT\system32\hypertrm.dll |30/07/2004 12:03:57 C:\WINNT\system32\iccvid.dll |21/08/2002 22:44:03 C:\WINNT\system32\imgcmn.dll |30/07/2004 12:03:47 C:\WINNT\system32\imgshl.dll |30/07/2004 12:03:47 C:\WINNT\system32\INETWH32.dll |17/12/2002 13:04:54 C:\WINNT\system32\ir32_32.dll |07/11/1995 14:46:00 C:\WINNT\system32\ir41_qc.dll |22/03/1998 15:34:14 C:\WINNT\system32\ir41_qcx.dll |22/03/1998 15:34:14 C:\WINNT\system32\ir50_32.dll |17/05/1999 15:12:56 C:\WINNT\system32\ir50_lcs.dll |06/11/1997 14:53:30 C:\WINNT\system32\ir50_qc.dll |07/10/1998 17:46:18 C:\WINNT\system32\ir50_qcx.dll |07/10/1998 17:50:22 C:\WINNT\system32\JJAKEn.dll |22/01/2007 20:51:04 C:\WINNT\system32\jpeg1x32.dll |30/07/2004 12:03:47 C:\WINNT\system32\jpeg2x32.dll |30/07/2004 12:03:47 C:\WINNT\system32\LgNotify.dll |03/02/2003 11:59:06 C:\WINNT\system32\malslib.dll |09/02/2005 12:08:47 C:\WINNT\system32\mciqtz32.dll |05/08/2004 16:38:08 C:\WINNT\system32\mdmxsdk.dll |14/06/2005 10:17:27 C:\WINNT\system32\MipCfg.dll |24/10/2002 12:32:00 C:\WINNT\system32\mipmnlog.dll |24/10/2002 12:32:00 C:\WINNT\system32\MMSwitch.dll |15/11/2002 14:11:26 C:\WINNT\system32\msdmo.dll |05/08/2004 16:38:11 C:\WINNT\system32\msencode.dll |30/08/2002 19:24:06 C:\WINNT\system32\MSRTEDIT.DLL |22/01/1999 20:46:58 C:\WINNT\system32\msswch.dll |04/01/2007 23:28:06 C:\WINNT\system32\NA_Util.dll |22/02/2007 20:26:47 C:\WINNT\system32\odSupp_M.dll |22/01/2007 20:51:03 C:\WINNT\system32\Oemdspif.dll |15/06/2005 22:10:19 C:\WINNT\system32\ogg.dll |14/12/2002 23:46:02 C:\WINNT\system32\oggDS.dll |14/12/2002 23:46:02 C:\WINNT\system32\oieng400.dll |04/01/2007 23:29:01 C:\WINNT\system32\oiprt400.dll |30/07/2004 12:03:47 C:\WINNT\system32\oislb400.dll |30/07/2004 12:03:48 C:\WINNT\system32\oissq400.dll |30/07/2004 12:03:48 C:\WINNT\system32\oitwa400.dll |30/07/2004 12:03:48 C:\WINNT\system32\oiui400.dll |30/07/2004 12:03:47 C:\WINNT\system32\PCDLIB32.DLL |09/12/1998 02:53:58 C:\WINNT\system32\pdf995mon.dll |16/06/2005 21:27:33 C:\WINNT\system32\pdfmona.dll |16/06/2005 21:27:33 C:\WINNT\system32\PfMgrApi.dll |12/01/2003 17:09:20 C:\WINNT\system32\Pn802_11.dll |03/02/2003 12:03:44 C:\WINNT\system32\PRPCLANG.DLL |05/08/2004 15:48:01 C:\WINNT\system32\PRPCUI.dll |05/08/2004 15:48:01 C:\WINNT\system32\PsGuiMgr.dll |03/02/2003 11:57:02 C:\WINNT\system32\psisdecd.dll |03/06/2005 21:25:40 C:\WINNT\system32\PsRegApi.dll |12/01/2003 17:08:42 C:\WINNT\system32\pvmjpg21.dll |12/12/2002 16:33:20 C:\WINNT\system32\qcut.dll |21/08/2002 22:49:16 C:\WINNT\system32\qedwipes.dll |05/08/2004 16:38:11 C:\WINNT\system32\RcdScan.dll |14/06/2005 14:01:30 C:\WINNT\system32\Roboex32.dll |17/12/2002 13:04:54 C:\WINNT\system32\S24MUDLL.DLL |12/01/2003 17:09:52 C:\WINNT\system32\s24netcfg.dll |01/03/2002 12:20:12 C:\WINNT\system32\SbrngAPI.dll |12/01/2003 17:25:58 C:\WINNT\system32\SMSUninst.dll |01/03/2002 12:20:14 C:\WINNT\system32\spxcoins.dll |15/09/2004 11:12:03 C:\WINNT\system32\tifflt.dll |30/07/2004 12:03:48 C:\WINNT\system32\TPIDI16.DLL |01/03/2002 12:20:16 C:\WINNT\system32\TPIDI32.dll |01/03/2002 12:20:18 C:\WINNT\system32\tsbyuv.dll |15/12/1999 01:30:06 C:\WINNT\system32\tsd32.dll |21/08/2002 22:51:50 C:\WINNT\system32\UNITELW.dll |22/02/2007 20:26:44 C:\WINNT\system32\vidx16.dll |22/03/1998 13:50:02 C:\WINNT\system32\vorbis.dll |14/12/2002 23:46:02 C:\WINNT\system32\vorbisenc.dll |14/12/2002 22:46:04 C:\WINNT\system32\vp6vfw.dll |30/08/2004 14:25:24 C:\WINNT\system32\VPN.dll |03/02/2003 12:03:50 C:\WINNT\system32\VSFilter.dll |13/08/2004 00:11:14 C:\WINNT\system32\Vxdif.dll |14/06/2005 22:57:56 C:\WINNT\system32\W20NCPA.dll |14/06/2005 14:05:45 C:\WINNT\system32\W32n50.dll |04/01/2007 23:51:30 C:\WINNT\system32\w70n5msg.dll |14/06/2005 14:05:45 C:\WINNT\system32\WConfig.dll |12/01/2003 17:10:54 C:\WINNT\system32\WiFiAdap.dll |12/01/2003 17:10:08 C:\WINNT\system32\win87em.dll |21/08/2002 22:53:05 C:\WINNT\system32\wlanapi.dll |22/01/2007 20:51:04 C:\WINNT\system32\WlanApp.dll |22/01/2007 20:51:04 C:\WINNT\system32\WLANDLL.dll |03/02/2003 11:57:48 C:\WINNT\system32\WooDial2000.dll |04/01/2007 23:51:42 C:\WINNT\system32\xiffr3_0.dll |30/07/2004 12:03:48 C:\WINNT\system32\xvidcore.dll |20/12/2004 12:03:26 C:\WINNT\system32\xvidvfw.dll |20/12/2004 12:08:28 C:\WINNT\system32\XwayMgrU.dll |22/02/2007 20:26:47 C:\WINNT\system32\ZPORT4AS.dll |10/04/2007 22:57:48 Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\WINNT\system32 19/06/2003 21:05 5 392 CSRSS.EXE 1 fichier(s) 5 392 octets 0 Rép(s) 9 943 269 376 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\WINNT\Downloaded Program Files 10/04/2007 22:57 <DIR> . 10/04/2007 22:57 <DIR> .. 24/08/2006 08:28 141 424 asinst.dll 22/08/2006 09:06 537 asinst.inf 30/10/2006 20:51 65 desktop.ini 14/10/1997 18:52 697 DirectAnimation Java Classes.osd 08/08/2006 12:45 576 kavwebscan.inf 20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd 08/12/2003 13:58 3 759 swflash.inf 26/05/2005 05:19 291 wuweb.inf 8 fichier(s) 148 511 octets Total des fichiers listés : 8 fichier(s) 148 511 octets 2 Rép(s) 9 943 269 376 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006 http://www.gmer.net scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files 10/04/2007 22:47 <DIR> . 10/04/2007 22:47 <DIR> .. 30/07/2004 12:03 <DIR> Accessoires 16/06/2005 20:03 <DIR> Adobe 19/01/2007 22:42 <DIR> Alwil Software 22/01/2007 20:51 <DIR> ANI 10/04/2007 23:02 <DIR> AntiVir PersonalEdition Classic 10/04/2007 23:23 <DIR> Apoint 04/11/2005 19:06 <DIR> ArcSoft 16/02/2007 00:54 <DIR> a-squared Free 05/08/2004 11:38 <DIR> ATI Technologies 14/06/2005 14:10 <DIR> Broadcom 08/06/2005 21:52 <DIR> Canon 18/03/2007 15:28 <DIR> CartoNavPlus 10/02/2007 15:45 <DIR> CCleaner 24/02/2006 20:10 <DIR> Common Files 08/05/2006 12:33 <DIR> CompeGPS 30/07/2004 11:05 <DIR> ComPlus Applications 14/06/2005 10:17 <DIR> CONEXANT 05/08/2004 15:45 <DIR> Dell 14/06/2005 14:22 <DIR> Dell Modem-On-Hold 02/01/2007 22:26 <DIR> D-Link 03/06/2005 21:30 <DIR> EA GAMES 14/06/2005 15:52 <DIR> E-Carte Bleu 14/06/2005 15:52 <DIR> e-Carte Bleue 27/11/2005 13:57 <DIR> Eraser 30/10/2006 21:22 <DIR> Fichiers communs 01/06/2005 20:56 <DIR> FinePixViewer 31/05/2006 19:33 <DIR> Free Audio Pack 27/09/2005 20:44 <DIR> Garmin 21/03/2006 22:05 <DIR> Google 04/03/2007 18:48 <DIR> Grisoft 16/02/2007 00:18 <DIR> Hijackthis Version Française 14/06/2005 14:06 <DIR> Intel 10/04/2007 23:27 <DIR> Internet Explorer 15/09/2004 11:33 <DIR> InterVideo 02/01/2007 21:11 <DIR> Inventel 31/05/2006 19:35 <DIR> iPod 10/04/2007 23:27 <DIR> iTunes 25/11/2004 12:21 <DIR> Java 25/11/2004 12:22 <DIR> Java Web Start 03/01/2007 23:15 <DIR> Lavasoft 18/06/2005 15:12 <DIR> Logitech 28/10/2006 12:13 <DIR> Messenger 09/02/2005 12:09 <DIR> Microsoft ActiveSync 01/06/2005 22:50 <DIR> microsoft frontpage 01/06/2005 22:51 <DIR> Microsoft Office 28/02/2006 22:47 <DIR> Modem Helper 28/10/2006 12:41 <DIR> MSN Apps 05/01/2007 00:29 <DIR> MSN Messenger 30/05/2006 20:24 <DIR> MUSICMATCH 04/01/2007 23:35 <DIR> NetMeeting 04/01/2007 23:35 <DIR> Outlook Express 31/05/2006 19:38 <DIR> QuickTime 11/08/2004 10:20 <DIR> REGSHAVE 30/05/2005 23:56 <DIR> Roflex4 26/02/2007 22:47 <DIR> Schneider Electric 05/08/2004 11:41 <DIR> SigmaTel 21/01/2006 01:05 <DIR> SLD Codec Pack 25/02/2030 11:49 <DIR> SlySoft 03/06/2005 19:18 <DIR> Snapshot Viewer 14/05/2006 11:42 <DIR> Sony Ericsson 10/04/2007 23:38 <DIR> Spybot - Search & Destroy 07/01/2007 21:28 <DIR> Wanadoo 21/01/2006 00:32 <DIR> Webteh 04/01/2007 23:35 <DIR> Windows Media Player 04/01/2007 23:37 <DIR> Windows NT 16/06/2005 21:34 <DIR> WinZip 16/02/2007 00:23 <DIR> Yahoo! 0 fichier(s) 0 octets 69 Rép(s) 9 943 228 416 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\fichiers communs 30/10/2006 21:22 <DIR> . 30/10/2006 21:22 <DIR> .. 03/03/2007 17:29 <DIR> Adaptec Shared 16/06/2005 20:05 <DIR> Adobe 01/06/2005 22:52 <DIR> Designer 14/06/2005 22:59 <DIR> InstallShield 18/06/2005 15:12 <DIR> Logitech 30/10/2006 20:47 <DIR> Microsoft Shared 30/07/2004 11:46 <DIR> ODBC 30/10/2006 20:52 <DIR> Services 30/10/2006 21:22 <DIR> System 14/05/2006 11:43 <DIR> Teleca Shared 0 fichier(s) 0 octets 12 Rép(s) 9 943 224 320 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 04/01/2007 23:35 <DIR> . 04/01/2007 23:35 <DIR> .. 11/08/2004 10:00 <DIR> 1033 01/06/2005 21:55 <DIR> 1036 15/02/2001 05:45 1 318 912 MSONSEXT.DLL 03/06/1999 19:09 122 937 MSOWS409.DLL 13/08/1999 10:09 127 032 MSOWS40c.DLL 22/01/2001 03:25 86 016 PKMWS.DLL 18/03/1999 06:37 593 977 RAGENT.DLL 5 fichier(s) 2 248 874 octets 4 Rép(s) 9 943 285 760 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\common files 24/02/2006 20:10 <DIR> . 24/02/2006 20:10 <DIR> .. 24/02/2006 20:10 <DIR> Borland Shared 14/05/2006 11:44 <DIR> Microsoft shared 0 fichier(s) 0 octets 4 Rép(s) 9 943 285 760 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\ 11/11/2001 01:00 68 096 diff.exe 27/08/2006 15:10 103 424 grep.exe 28/08/2001 13:00 147 968 msconfig.exe 3 fichier(s) 319 488 octets 0 Rép(s) 9 943 285 760 octets libres c:\Documents and Settings\Administrateur\Local Settings\Temp\First15.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\VP6Install.exe c:\Documents and Settings\anais\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe c:\Documents and Settings\yannick\Bureau\antivir_workstation_win7u_en_h.exe c:\Documents and Settings\yannick\Bureau\ATF-Cleaner.exe c:\Documents and Settings\yannick\Bureau\DSLtest20.exe c:\Documents and Settings\yannick\Bureau\HijackThis.exe c:\Documents and Settings\yannick\Bureau\OTMoveIt.exe c:\Documents and Settings\yannick\Bureau\updatecdr4_53_71.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\accwiz.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\admin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\at.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\author.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autochk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autoconv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autofmt.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autolfn.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cacls.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cfgwiz.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\chkdsk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\chkntfs.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cipher.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cleanjpm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cluster.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cmd.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cmstp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\conf.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\conime.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\control.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\convert.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\convlog.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\csrss.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dcomcnfg.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dfrgfat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dfrgntfs.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\diskperf.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dllhost.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dllhst3g.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dmadmin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dmremote.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\drwtsn32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dtcsetup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\encinst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\esentutl.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\eudcedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\evntwin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\explorer.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\faxsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\find.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\findstr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fortutil.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpadmcgi.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpcount.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpremadm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ftp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hh.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hidserv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\htimage.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hypertrm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\icwconn1.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\iisreset.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\iisrstas.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\imagemap.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\inetinfo.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\inetmgr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\krnl386.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\label.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\locator.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\lodctr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\lsass.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\magnify.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mmc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mobsync.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mofcomp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mplayer2.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mq1sync.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqbkup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqmig.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\msinfo32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mspaint.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\msswchx.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mstask.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mtstocom.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\narrator.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nbtstat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nddeapir.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\net1.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\netdde.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\netstat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nslookup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntbackup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntdsutil.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntkrnlpa.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntoskrnl.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntvdm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\osk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\packager.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\pws.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\pwstray.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\recover.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regedt32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regsvr32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsh.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsnotify.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsvp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\runas.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\savedump.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\scardsvr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\scrcons.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\secedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\services.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\shmgrate.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\shtml.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\skeys.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\smlogsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\smss.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\sndrec32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\snmp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\snmptrap.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spiisupd.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spoolsv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\stimon.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\stisvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\subst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\taskmgr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tcptest.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\telnet.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tftp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tlntsess.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tlntsvr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\unsecapp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\userinit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\utilman.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\w32tm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\wbemtest.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winhlp32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winhstb.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winlogon.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winmgmt.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winrep.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winver.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\wpnpinst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spuninst\spuninst.exe c:\Documents and Settings\yannick\Bureau\b\Firefox Setup 2.0.0.1.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\AMADA\dpm\DPM.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\AMADA\num pc set link\SPM.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\COURBE32.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\Ecodial.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\ECODLANG.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\hh.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\Hpersfdp.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\LAUNCH32.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\MODULE\Internet.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\_ISDEL.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\SETUP.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\UNINST.EXE c:\Documents and Settings\yannick\Bureau\b\GPSBABEL\gpsbabel.exe c:\Documents and Settings\yannick\Bureau\b\GPSBABEL\GPSBabelGUI.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\catchme.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\diff.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\dumphive.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\Fport.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\grep.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\streams.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\swreg.exe c:\Documents and Settings\yannick\Mes documents\Downloads\avwinsfx.exe c:\Documents and Settings\yannick\Mes documents\Downloads\GoogleToolbarInstaller.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\b2701frx.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\Disk0\_isdel.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\Disk0\setup.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\_ISDel.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\40Comupd.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\autorun.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\Setup.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\UnitCode\Updater.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ITNConv.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\LOGConv.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\LogConv_ppc.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\sendmap20.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\GPSmap\GPSmap0085\cgpsmapper.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\Mapedit\mapedit.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\bsplayer137.826.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\pdf995s.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\ps2pdf995.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\Shareaza_2.1.0.0.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\sld.codec.pack.2.2.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\winzip80.exe Merci beaucoup et à bientôt.

Bonjour Charles Ingals, Tout d'abord merci de ton travail pour moi. Avec un peu de retard, voila les 3 rapports demandés. Tout s'est passé ss probleme. A bientot. --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 23:27:40 29/03/2007 + Résultat de l'analyse: C:\_OTMoveIt\MovedFiles\WINNT\TEMP\wuauclt.exe -> Downloader.Small.ego : Nettoyé et sauvegardé (mise en quarantaine). C:\_OTMoveIt\MovedFiles\WINNT\System32\main.sys -> Trojan.Agent.ady : Nettoyé et sauvegardé (mise en quarantaine). C:\_OTMoveIt\MovedFiles\WINNT\System32\wsys.dll -> Trojan.Agent.ady : Nettoyé et sauvegardé (mise en quarantaine). Fin du rapport DllUnregisterServer procedure not found in C:\WINNT\System32\wsys.dll C:\WINNT\System32\wsys.dll NOT unregistered. C:\WINNT\System32\wsys.dll moved successfully. C:\WINNT\System32\main.sys moved successfully. File move failed. C:\WINNT\System32\1_exception.nls scheduled to be moved on reboot. C:\WINNT\TEMP\wuauclt.exe moved successfully. Created on 03/29/2007 22:11:05 StartupList report, 02/04/2007, 22:43:07 StartupList version: 1.52.2 Started from : C:\Documents and Settings\yannick\Bureau\HijackThis.EXE Detected: Windows 2000 SP4 (WinNT 5.00.2195) Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106) * Using default options * Including empty and uninteresting sections * Showing rarely important sections ================================================== Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\system32\regsvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\PRPCUI.exe C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\D-Link\AirPlus G\AirGCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINNT\system32\ctfmon.exe C:\Program Files\Apoint\Apntex.exe C:\Documents and Settings\yannick\Bureau\HijackThis.exe -------------------------------------------------- Listing of startup folders: Shell folders Startup: [C:\Documents and Settings\yannick\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders AltStartup: *Folder not found* User shell folders Startup: *Folder not found* User shell folders AltStartup: *Folder not found* Shell folders Common Startup: [C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage] Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE Shell folders Common AltStartup: *Folder not found* User shell folders Common Startup: *Folder not found* User shell folders Alternate Common Startup: *Folder not found* -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINNT\system32\userinit.exe, [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *Registry value not found* [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime Synchronization Manager = mobsync.exe /logon REGSHAVE = C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun PRPCMonitor = PRPCUI.exe PRONoMgr.exe = C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe msnappau = "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" Logitech Hardware Abstraction Layer = KHALMNPR.EXE LoadQM = loadqm.exe iTunesHelper = "C:\Program Files\iTunes\iTunesHelper.exe" Gainward = C:\WINNT\TBPanel.exe /A eCarteBleue-CLEO = "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards ATIPTA = C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe Apoint = C:\Program Files\Apoint\Apoint.exe D-Link AirPlus G = C:\Program Files\D-Link\AirPlus G\AirGCFG.exe ANIWZCS2Service = C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe CloneCDTray = "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s avgnt = "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ctfmon.exe = ctfmon.exe -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\Run [OptionalComponents] *No values found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- File association entry for .EXE: HKEY_CLASSES_ROOT\exefile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .COM: HKEY_CLASSES_ROOT\comfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .BAT: HKEY_CLASSES_ROOT\batfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .PIF: HKEY_CLASSES_ROOT\piffile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .SCR: HKEY_CLASSES_ROOT\scrfile\shell\open\command (Default) = "%1" /S -------------------------------------------------- File association entry for .HTA: HKEY_CLASSES_ROOT\htafile\shell\open\command (Default) = C:\WINNT\System32\mshta.exe "%1" %* -------------------------------------------------- File association entry for .TXT: HKEY_CLASSES_ROOT\txtfile\shell\open\command (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1 -------------------------------------------------- Enumerating Active Setup stub paths: HKLM\Software\Microsoft\Active Setup\Installed Components (* = disabled by HKCU twin) [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] StubPath = C:\WINNT\inf\unregmp2.exe /ShowWMP [>{26923b43-4d38-484f-9b9e-de460746276c}] * StubPath = "C:\WINNT\System32\shmgrate.exe" OCInstallUserConfigIE [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] * StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] * StubPath = "C:\WINNT\System32\shmgrate.exe" OCInstallUserConfigOE [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT [{6A5110B5-E14B-4268-A065-EF89FF33C325}] * StubPath = regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\wmp.inf,PerUserStub [{7790769C-0471-11d2-AF11-00C04FA35D02}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install [{89820200-ECBD-11cf-8B85-00AA005B4340}] * StubPath = regsvr32.exe /s /n /i:U shell32.dll [{89820200-ECBD-11cf-8B85-00AA005B4383}] * StubPath = %SystemRoot%\System32\ie4uinit.exe [{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] * StubPath = %SystemRoot%\System32\updcrl.exe -e -u %SystemRoot%\System32\verisignpub1.crl -------------------------------------------------- Enumerating ICQ Agent Autostart apps: HKCU\Software\Mirabilis\ICQ\Agent\Apps *Registry key not found* -------------------------------------------------- Load/Run keys from C:\WINNT\WIN.INI: load=*INI section not found* run=*INI section not found* Load/Run keys from Registry: HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\Windows: load= HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs= -------------------------------------------------- Shell & screensaver key from C:\WINNT\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=C:\WINNT\system32\ss3dfo.scr drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Checking for EXPLORER.EXE instances: C:\WINNT\Explorer.exe: PRESENT! C:\Explorer.exe: not present C:\WINNT\Explorer\Explorer.exe: not present C:\WINNT\System\Explorer.exe: not present C:\WINNT\System32\Explorer.exe: not present C:\WINNT\Command\Explorer.exe: not present C:\WINNT\Fonts\Explorer.exe: not present -------------------------------------------------- Checking for superhidden extensions: .lnk: HIDDEN! (arrow overlay: yes) .pif: HIDDEN! (arrow overlay: yes) .exe: not hidden .com: not hidden .bat: not hidden .hta: not hidden .scr: not hidden .shs: HIDDEN! .shb: HIDDEN! .vbs: not hidden .vbe: not hidden .wsh: not hidden .scf: HIDDEN! (arrow overlay: NO!) .url: HIDDEN! (arrow overlay: yes) .js: not hidden .jse: not hidden -------------------------------------------------- Verifying REGEDIT.EXE integrity: - Regedit.exe found in C:\WINNT - .reg open command is normal (regedit.exe %1) - Regedit.exe has no CompanyName property! It is either missing or named something else. - Regedit.exe has no OriginalFilename property! It is either missing or named something else. - Regedit.exe has no FileDescription property! It is either missing or named something else. Registry check failed! -------------------------------------------------- Enumerating Browser Helper Objects: (no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} e-Carte Bleue Browser Helper Object - C:\WINNT\system32\BhoECart.dll (file missing) - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} (no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F} (no name) - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} (no name) - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -------------------------------------------------- Enumerating Task Scheduler jobs: *No jobs found* -------------------------------------------------- Enumerating Download Program Files: [DirectAnimation Java Classes] CODEBASE = file://C:\WINNT\Java\classes\dajava.cab OSD = C:\WINNT\Downloaded Program Files\DirectAnimation Java Classes.osd [Microsoft XML Parser for Java] CODEBASE = file://C:\WINNT\Java\classes\xmldso.cab OSD = C:\WINNT\Downloaded Program Files\Microsoft XML Parser for Java.osd [CKAVWebScan Object] InProcServer32 = C:\WINNT\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll CODEBASE = http://webscanner.kaspersky.fr/kavwebscan_unicode.cab [YInstStarter Class] InProcServer32 = C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll [WUWebControl Class] InProcServer32 = C:\WINNT\System32\wuweb.dll CODEBASE = http://update.microsoft.com/windowsupdate/...b?1167944222356 [shockwave Flash Object] InProcServer32 = C:\WINNT\System32\Macromed\Flash\Flash9b.ocx CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab -------------------------------------------------- Enumerating Winsock LSP files: NameSpace #1: C:\WINNT\System32\rnr20.dll NameSpace #2: C:\WINNT\System32\winrnr.dll Protocol #1: C:\WINNT\system32\msafd.dll Protocol #2: C:\WINNT\system32\msafd.dll Protocol #3: C:\WINNT\system32\msafd.dll Protocol #4: C:\WINNT\system32\rsvpsp.dll Protocol #5: C:\WINNT\system32\rsvpsp.dll Protocol #6: C:\WINNT\system32\msafd.dll Protocol #7: C:\WINNT\system32\msafd.dll Protocol #8: C:\WINNT\system32\msafd.dll Protocol #9: C:\WINNT\system32\msafd.dll Protocol #10: C:\WINNT\system32\msafd.dll Protocol #11: C:\WINNT\system32\msafd.dll Protocol #12: C:\WINNT\system32\msafd.dll Protocol #13: C:\WINNT\system32\msafd.dll Protocol #14: C:\WINNT\system32\msafd.dll Protocol #15: C:\WINNT\system32\msafd.dll Protocol #16: C:\WINNT\system32\msafd.dll Protocol #17: C:\WINNT\system32\msafd.dll Protocol #18: C:\WINNT\system32\msafd.dll Protocol #19: C:\WINNT\system32\msafd.dll Protocol #20: C:\WINNT\system32\msafd.dll Protocol #21: C:\WINNT\system32\msafd.dll Protocol #22: C:\WINNT\system32\msafd.dll Protocol #23: C:\WINNT\system32\msafd.dll Protocol #24: C:\WINNT\system32\msafd.dll -------------------------------------------------- Enumerating Windows NT/2000/XP services Pilote ACPI Microsoft: System32\DRIVERS\ACPI.sys (system) Environnement de prise en charge de réseau AFD: \SystemRoot\System32\drivers\afd.sys (autostart) Filtre de bus AGP Intel: System32\DRIVERS\agp440.sys (system) Avertissement: %SystemRoot%\System32\services.exe (manual start) ANIO Service: \??\C:\WINNT\system32\ANIO.SYS (autostart) ANIWZCSd Service: C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (autostart) AntiVir PersonalEdition Classic Scheduler: C:\Program Files\AntiVir PersonalEdition Classic\sched.exe (autostart) Alps Touch Pad Filter Driver for Windows 2000/XP: System32\DRIVERS\Apfiltr.sys (manual start) Gestion d'applications: %SystemRoot%\system32\services.exe (manual start) Pilote de média asynchrone RAS: System32\DRIVERS\asyncmac.sys (manual start) Contrôleur de disque dur IDE/ESDI standard: System32\DRIVERS\atapi.sys (system) ati: System32\DRIVERS\ati.sys (manual start) Ati HotKey Poller: %SystemRoot%\System32\Ati2evxx.exe (autostart) ati2mtag: System32\DRIVERS\ati2mtag.sys (manual start) Protocole client ATM ARP: System32\DRIVERS\atmarpc.sys (manual start) Pilote audio Stub: System32\DRIVERS\audstub.sys (manual start) AVG Anti-Spyware Driver: \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys (system) AVG Anti-Spyware Guard: C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (autostart) AVG Anti-Spyware Clean Driver: System32\DRIVERS\AvgAsCln.sys (system) avgntdd: SYSTEM32\DRIVERS\avgntdd.sys (system) avgntmgr: SYSTEM32\drivers\avgntmgr.sys (system) Broadcom 570x Gigabit Integrated Controller: System32\DRIVERS\b57w2k.sys (manual start) Service de transfert intelligent en arrière-plan: %SystemRoot%\system32\svchost.exe -k BITSgroup (autostart) Explorateur d'ordinateur: %SystemRoot%\System32\services.exe (autostart) Closed Caption Decoder: System32\DRIVERS\CCDECODE.sys (manual start) Pilote de CD-ROM: System32\DRIVERS\cdrom.sys (system) Service d'indexation: %SystemRoot%\system32\cisvc.exe (manual start) Gestionnaire de l'Album: %SystemRoot%\system32\clipsrv.exe (manual start) Pilote pour Batterie à méthode de contrôle ACPI Microsoft: System32\DRIVERS\CmBatt.sys (manual start) Pilote de batterie composite Microsoft: System32\DRIVERS\compbatt.sys (system) Client DHCP: %SystemRoot%\System32\services.exe (autostart) Pilote de disque: System32\DRIVERS\disk.sys (system) Service d'administration du Gestionnaire de disque logique: %SystemRoot%\System32\dmadmin.exe /com (manual start) dmboot: System32\drivers\dmboot.sys (disabled) Pilote de Gestionnaire de disque logique: System32\DRIVERS\dmio.sys (system) Gestionnaire de disque logique: %SystemRoot%\System32\services.exe (autostart) Synthé logiciel Microsoft DirectMusic (WDM): system32\drivers\DMusic.sys (manual start) Client DNS: %SystemRoot%\System32\services.exe (autostart) UNTLW device: System32\Drivers\DuntlwNT.sys (manual start) ElbyCDFL: System32\Drivers\ElbyCDFL.sys (manual start) ElbyCDIO Driver: System32\Drivers\ElbyCDIO.sys (autostart) Journal des événements: %SystemRoot%\system32\services.exe (autostart) Système d'événements de COM+: C:\WINNT\System32\svchost.exe -k netsvcs (manual start) EXAMPLE: \??\C:\WINNT\system32\main.sys (system) Service de télécopie: %systemroot%\system32\faxsvc.exe (manual start) Pilote du Gestionnaire de volume: System32\DRIVERS\ftdisk.sys (system) GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start) Classificateur de paquets générique: System32\DRIVERS\msgpc.sys (manual start) HID Input Service: %SystemRoot%\system32\hidserv.exe (autostart) Pilote de classe HID Microsoft: System32\DRIVERS\hidusb.sys (autostart) HSFHWICH: System32\DRIVERS\HSFHWICH.sys (manual start) HSF_DP: System32\DRIVERS\HSF_DP.sys (manual start) Pilote pour clavier i8042 et souris sur port PS/2: System32\DRIVERS\i8042prt.sys (system) Iap: C:\Program Files\Dell\OpenManage\Client\Iap.exe (autostart) InstallDriver Table Manager: C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (manual start) Adapter Switching: C:\Program Files\Intel\Switching\User\RoamSvc.exe (autostart) Pilote de filtre de trafic IP: System32\DRIVERS\ipfltdrv.sys (manual start) Pilote de tunnelage IP dans IP: System32\DRIVERS\ipinip.sys (manual start) Traducteur d'adresses réseau IP: System32\DRIVERS\ipnat.sys (manual start) iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start) Pilote IPSEC: System32\DRIVERS\ipsec.sys (manual start) Protocole IrDA: System32\DRIVERS\irda.sys (autostart) IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start) Moniteur infrarouge: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de bus Plug-and-Play ISA/EISA: System32\DRIVERS\isapnp.sys (system) Sony Ericsson 600i driver (WDM): System32\DRIVERS\k600bus.sys (manual start) Sony Ericsson 600i USB WMC Modem Filter: System32\DRIVERS\k600mdfl.sys (manual start) Sony Ericsson 600i USB WMC Modem Drivers: System32\DRIVERS\k600mdm.sys (manual start) Sony Ericsson 600i USB WMC Device Management Drivers: System32\DRIVERS\k600mgmt.sys (manual start) Sony Ericsson 600i USB WMC OBEX Interface Drivers: System32\DRIVERS\k600obex.sys (manual start) Pilote de la classe Clavier: System32\DRIVERS\kbdclass.sys (system) Mélangeur audio Wave de noyau Microsoft: system32\drivers\kmixer.sys (manual start) Serveur: %SystemRoot%\System32\services.exe (autostart) Station de travail: %SystemRoot%\System32\services.exe (autostart) Logitech SetPoint HID Mouse Filter Driver: System32\DRIVERS\LHidKE.Sys (manual start) Logitech SetPoint USB Receiver device driver: System32\Drivers\LHidUsbK.Sys (manual start) Service d'application d'assistance TCP/IP NetBIOS: %SystemRoot%\System32\services.exe (autostart) Logitech SetPoint Mouse Filter Driver: System32\DRIVERS\LMouKE.Sys (manual start) Machine Debug Manager: "C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe" (autostart) mdmxsdk: System32\DRIVERS\mdmxsdk.sys (autostart) Affichage des messages: %SystemRoot%\System32\services.exe (disabled) Pilote de commutation de carte Intel: System32\DRIVERS\mipmn2k.sys (manual start) Partage de Bureau à distance NetMeeting: C:\WINNT\System32\mnmsrvc.exe (manual start) Pilote de la classe Souris: System32\DRIVERS\mouclass.sys (system) Pilote HID de souris: System32\DRIVERS\mouhid.sys (manual start) BDA MPE Filter: System32\DRIVERS\MPE.sys (manual start) MRXSMB: System32\DRIVERS\mrxsmb.sys (system) Distributed Transaction Coordinator: C:\WINNT\System32\msdtc.exe (manual start) Microsoft IR Communications Driver: System32\DRIVERS\MSIRCOMM.sys (manual start) Windows Installer: C:\WINNT\System32\msiexec.exe /V (manual start) Proxy de service de répartition Microsoft: system32\drivers\MSKSSRV.sys (manual start) Proxy d'horloge de répartition Microsoft: system32\drivers\MSPCLOCK.sys (manual start) Proxy de gestion de qualité de répartition Microsoft: system32\drivers\MSPQM.sys (manual start) Microsoft Streaming Tee/Sink-to-Sink Converter: system32\drivers\MSTEE.sys (manual start) Mup: system32\drivers\mup.sys (system) NABTS/FEC VBI Codec: System32\DRIVERS\NABTSFEC.sys (manual start) NetAccess Service: C:\WINNT\system32\NA_Service.exe (autostart) Pilote TAPI NDIS d'accès à distance: System32\DRIVERS\ndistapi.sys (manual start) NDIS Protocole mode utilisateur E/S: System32\DRIVERS\ndisuio.sys (manual start) Pilote réseau étendu NDIS d'accès à distance: System32\DRIVERS\ndiswan.sys (manual start) Interface NetBIOS: System32\DRIVERS\netbios.sys (system) NetBT: System32\DRIVERS\netbt.sys (system) DDE réseau: %SystemRoot%\system32\netdde.exe (manual start) DSDM DDE réseau: %SystemRoot%\system32\netdde.exe (manual start) NetDetect: \SystemRoot\system32\drivers\netdtect.sys (manual start) Ouverture de session réseau: %SystemRoot%\System32\lsass.exe (manual start) Connexions réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Intel NCS NetService: C:\Program Files\Intel\NCS\Sync\NetSvc.exe (manual start) Fournisseur de la prise en charge de sécurité LM NT: %SystemRoot%\System32\lsass.exe (manual start) Médias amovibles: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de filtre de trafic IPX: System32\DRIVERS\nwlnkflt.sys (manual start) Pilote de transfert de trafic IPX: System32\DRIVERS\nwlnkfwd.sys (manual start) O2Micro SmartCardBus Reader: System32\DRIVERS\ozscr.sys (manual start) OMCI WDM Device Driver: System32\DRIVERS\omci.sys (system) Pilote de classe parallèle: System32\DRIVERS\parallel.sys (manual start) Pilote de port parallèle: System32\DRIVERS\parport.sys (system) PCAMPR5 NDIS Protocol Driver: \??\C:\WINNT\system32\PCAMPR5.SYS (manual start) PCANDIS5 NDIS Protocol Driver: \??\C:\WINNT\system32\PCANDIS5.SYS (manual start) Pilote de bus PCI: System32\DRIVERS\pci.sys (system) PCIIde: System32\DRIVERS\pciide.sys (system) Pcmcia: System32\DRIVERS\pcmcia.sys (system) Plug-and-Play: %SystemRoot%\system32\services.exe (autostart) Agent de stratégie IPSEC: %SystemRoot%\System32\lsass.exe (autostart) Miniport réseau étendu (PPTP): System32\DRIVERS\raspptp.sys (manual start) Emplacement protégé: %SystemRoot%\system32\services.exe (autostart) Pilote de liaison parallèle directe: System32\DRIVERS\ptilink.sys (manual start) Pilote de connexion automatique d'accès distant: System32\DRIVERS\rasacd.sys (system) Gestionnaire de connexion automatique d'accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Miniport réseau étendu (modem IrDA): System32\DRIVERS\rasirda.sys (manual start) Miniport réseau étendu (L2TP): System32\DRIVERS\rasl2tp.sys (manual start) Gestionnaire de connexions d'accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Parallèle direct: System32\DRIVERS\raspti.sys (manual start) Microsoft Streaming Network Raw Channel Access: system32\drivers\RCA.sys (manual start) Rdbss: System32\DRIVERS\rdbss.sys (system) Pilote de filtre de lecture digitale de CD audio: System32\DRIVERS\redbook.sys (system) RegSrvc: C:\WINNT\System32\RegSrvc.exe (autostart) Routage et accès distant: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled) Service d'accès à distance au Registre: %SystemRoot%\system32\regsvc.exe (autostart) RoamMgr: C:\WINNT\System32\RoamMgr.exe (autostart) Microsoft Legacy Modem Driver: System32\Drivers\RootMdm.sys (manual start) Localisateur d'appels de procédure distante (RPC): %SystemRoot%\System32\locator.exe (manual start) Appel de procédure distante (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart) QoS RSVP: %SystemRoot%\System32\rsvp.exe -s (manual start) D-Link USB Wireless LAN Card Driver: System32\DRIVERS\Dr71WU.sys (manual start) Runtime: \??\C:\WINNT\System32\runtime.sys (manual start) Spectrum24 Event Monitor: C:\WINNT\System32\S24EvMon.exe (autostart) WLAN Transport: System32\DRIVERS\s24trans.sys (autostart) Gestionnaire de comptes de sécurité: %SystemRoot%\system32\lsass.exe (autostart) Prise en charge des cartes à puces: %SystemRoot%\System32\SCardSvr.exe (manual start) Carte à puce: %SystemRoot%\System32\SCardSvr.exe (autostart) Planificateur de tâches: %SystemRoot%\system32\MSTask.exe (autostart) Service d'exécution par délégation: %SystemRoot%\system32\services.exe (autostart) Notification d'événement système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Prolific2 Serial port driver: System32\DRIVERS\ser2pl.sys (manual start) Pilote de filtre Serenum: System32\DRIVERS\serenum.sys (manual start) Pilote de port série: System32\DRIVERS\serial.sys (system) Partage de connexion Internet: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) BDA Slip De-Framer: System32\DRIVERS\SLIP.sys (manual start) Pilote de périphérique SMC IrCC Miniport: System32\DRIVERS\smcirda.sys (manual start) Spouleur d'impression: %SystemRoot%\system32\spoolsv.exe (autostart) Srv: System32\DRIVERS\srv.sys (manual start) Audio Driver (WDM) - SigmaTel CODEC: system32\drivers\STAC97.sys (manual start) Still Image Service: %systemroot%\system32\stisvc.exe (autostart) BDA IPSink: System32\DRIVERS\StreamIP.sys (manual start) Pilote de bus logiciel: System32\DRIVERS\swenum.sys (manual start) Synthétiseur de table de sons GC noyau Microsoft: system32\drivers\swmidi.sys (manual start) Périphérique audio système Microsoft: system32\drivers\sysaudio.sys (manual start) Journaux et alertes de performance: %SystemRoot%\system32\smlogsvc.exe (manual start) Téléphonie: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Pilote du protocole TCP/IP: System32\DRIVERS\tcpip.sys (system) Telnet: %SystemRoot%\system32\tlntsvr.exe (manual start) Client de suivi de lien distribué: %SystemRoot%\system32\services.exe (autostart) Pilote de contrôleur hôte universel USB Microsoft: System32\DRIVERS\uhcd.sys (manual start) Conexant Setup API: system32\drivers\UIUSys.sys (manual start) Pilote de mise à jour du microcode: System32\DRIVERS\update.sys (manual start) Onduleur: %SystemRoot%\System32\ups.exe (manual start) Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: System32\DRIVERS\usbehci.sys (manual start) WayTechUSBFilterDriver: System32\DRIVERS\UsbFltr.sys (autostart) Pilote de concentrateur standard USB Microsoft: System32\DRIVERS\usbhub.sys (manual start) USB Hub Support: System32\DRIVERS\usbhub20.sys (manual start) Classe d'imprimantes USB Microsoft: System32\DRIVERS\usbprint.sys (manual start) Pilote de scanneur USB: System32\DRIVERS\usbscan.sys (manual start) Pilote de stockage de masse USB: System32\DRIVERS\USBSTOR.SYS (manual start) Gestionnaire d'utilitaires: %SystemRoot%\System32\UtilMan.exe (manual start) VgaSave: \SystemRoot\System32\drivers\vga.sys (system) Horloge Windows: %SystemRoot%\System32\services.exe (manual start) Pilote Intel® PRO/Wireless 7100 Adapter: System32\DRIVERS\w70n5.sys (manual start) Pilote ARP IP d'accès à distance: System32\DRIVERS\wanarp.sys (manual start) Windows CE USB Serial Host Driver: System32\DRIVERS\wceusbsh.sys (manual start) Pilote WINMM de compatibilité audio WDM Microsoft: system32\drivers\wdmaud.sys (manual start) winachsf: System32\DRIVERS\HSF_CNXT.sys (manual start) Infrastructure de gestion Windows: %SystemRoot%\System32\WBEM\WinMgmt.exe (autostart) Service de numéro de série du lecteur multimédia portable: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Extensions du pilote WMI: %SystemRoot%\system32\Services.exe (manual start) World Standard Teletext Codec: System32\DRIVERS\WSTCODEC.SYS (manual start) Mises à jour automatiques: %systemroot%\system32\svchost.exe -k wugroup (autostart) Configuration sans fil: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: *Registry value not found* -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: Network.ConnectionTray: C:\WINNT\system32\NETSHELL.dll WebCheck: C:\WINNT\System32\webcheck.dll SysTray: stobject.dll -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- End of report, 34 470 bytes Report generated in 0.530 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

Bonsoir à tous, Je relance ma demande. Je n'arrive pas a m'en sortir seul. Merci d'avance.

Bonsoir, Je crois que je suis infecté. Sous W2000 et dans le gestionnaire des taches, un processus nommé wuauclt.exe me prend tt la ressource CPU et incremente son occupation mémoire constament jusqu'au débordement RAM détecté par W2000. En mode sans echec, le probleme reste identique. Je n'ai plus de connection internet sur ce poste. Help !!! Je ne sais pas quoi faire. Merci d'avance. Mon rapport: Logfile of HijackThis v1.99.1 Scan saved at 23:56:08, on 20/03/2007 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\system32\regsvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\TEMP\wuauclt.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\PRPCUI.exe C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\D-Link\AirPlus G\AirGCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINNT\system32\ctfmon.exe C:\Documents and Settings\yannick\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINNT\system32\BhoECart.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [REGSHAVE] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Gainward] C:\WINNT\TBPanel.exe /A O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1167944222356 O20 - Winlogon Notify: Sebring - C:\WINNT\System32\LgNotify.dll O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Iap - Dell Computer Corporation - C:\Program Files\Dell\OpenManage\Client\Iap.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Adapter Switching (IntelRoam) - Intel Corporation - C:\Program Files\Intel\Switching\User\RoamSvc.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINNT\system32\NA_Service.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: RoamMgr - Intel Corporation - C:\WINNT\System32\RoamMgr.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe

Charles tu es encore là ? A bientot.

Bonsoir Charles, Déjà un grand merci de me prendre en charge. J'ai déinstallé Avast et exécuté DiagHelp option 1: C:\WINNT\System32/drivers\ElbyCDFL.sys -->26/12/2006 13:54:35 C:\WINNT\System32/drivers\ElbyCDIO.sys -->26/12/2006 13:54:34 C:\WINNT\System32/drivers\avgntmgr.sys -->22/11/2006 13:30:31 C:\WINNT\System32/drivers\avgntdd.sys -->22/11/2006 13:30:31 C:\WINNT\System32/drivers\AvgAsCln.sys -->05/09/2006 17:03:16 C:\WINNT\System32/drivers\rt73.bin -->16/11/2005 18:21:34 C:\WINNT\System32/drivers\Dr71WU.sys -->03/11/2005 20:39:02 C:\WINNT\System32\NetAccessLog.txt -->22/03/2007 18:36:46 C:\WINNT\System32\wsys.dll -->22/03/2007 18:36:07 C:\WINNT\System32\CONFIG.NT -->22/03/2007 18:32:02 C:\WINNT\System32\Perflib_Perfdata_2cc.dat -->20/03/2007 20:56:42 C:\WINNT\System32\Perflib_Perfdata_2a4.dat -->18/03/2007 14:25:25 C:\WINNT\System32\Perflib_Perfdata_288.dat -->05/03/2007 19:37:24 C:\WINNT\System32\ANIWZCS{C0B569CC-2844-4CA3-95E3-06CEF966BDAE} -->05/03/2007 13:06:04 C:\WINNT\System32\Perflib_Perfdata_294.dat -->04/03/2007 18:24:32 C:\WINNT\System32\main.sys -->03/03/2007 01:02:27 C:\WINNT\System32\1_exception.nls -->03/03/2007 01:02:23 C:\WINNT\System32\Perflib_Perfdata_29c.dat -->02/03/2007 23:53:01 C:\WINNT\System32\ANIWZCS{BB531029-8A14-4484-BFB6-11359DD38430} -->01/03/2007 21:04:56 C:\WINNT\System32\UNITELWAYW2KDriverUninst.isu -->22/02/2007 19:26:56 C:\WINNT\System32\XWAYMgrUninst.isu -->22/02/2007 19:26:49 C:\WINNT\System32\Perflib_Perfdata_298.dat -->22/02/2007 19:17:10 C:\WINNT\System32\Perflib_Perfdata_2a8.dat -->16/02/2007 19:09:13 C:\WINNT\System32\Perflib_Perfdata_2f0.dat -->15/02/2007 22:24:25 C:\WINNT\System32\WINLOGON.EXE -->14/02/2007 21:13:46 C:\WINNT\System32\Perflib_Perfdata_2d0.dat -->14/02/2007 20:55:47 C:\WINNT\System32\tmp.txt -->10/02/2007 09:21:08 C:\WINNT\System32\tmp.reg -->10/02/2007 09:21:08 C:\WINNT\System32\Perflib_Perfdata_1578.dat -->10/02/2007 08:43:10 C:\WINNT\System32\Perflib_Perfdata_13d8.dat -->10/02/2007 08:43:09 C:\WINNT\System32\Perflib_Perfdata_2084.dat -->08/02/2007 20:55:24 C:\WINNT\System32\Perflib_Perfdata_2048.dat -->08/02/2007 20:55:23 C:\WINNT\mmdet.log -->22/03/2007 18:39:29 C:\WINNT\Windows Update.log -->22/03/2007 18:39:15 C:\WINNT\WindowsUpdate.log -->22/03/2007 18:36:58 C:\WINNT\SchedLgU.Txt -->22/03/2007 18:35:09 C:\WINNT\ShellIconCache -->22/03/2007 18:34:39 C:\WINNT\Sti_Trace.log -->20/03/2007 23:49:46 C:\WINNT\ntbtlog.txt -->20/03/2007 23:46:07 C:\WINNT\PL7SYS.INI -->10/03/2007 09:33:41 C:\WINNT\55014 -->27/02/2007 13:39:55 C:\WINNT\115138.ocx -->22/02/2007 19:32:30 C:\WINNT\113090.ocx -->22/02/2007 19:27:20 C:\WINNT\system.ini -->22/02/2007 19:26:27 C:\WINNT\PRFSERV.INI -->22/02/2007 19:10:05 C:\WINNT\win.ini -->19/02/2007 22:11:33 C:\WINNT\$_hpcst$.hpc -->11/02/2007 17:47:57 C:\WINNT\FraUinst.exe |03/01/2006 17:52:00 C:\WINNT\IsUn040c.exe |05/08/2004 14:37:24 C:\WINNT\IsUninst.exe |05/08/2004 14:47:58 C:\WINNT\KHALMNPR.Exe |18/06/2005 14:12:00 C:\WINNT\OptChecker.exe |02/01/2007 20:12:11 C:\WINNT\OptRemove.exe |02/01/2007 20:12:11 C:\WINNT\QTINSTAL.EXE |24/09/2005 20:23:01 C:\WINNT\QTW16DEL.EXE |24/09/2005 20:23:17 C:\WINNT\TBPanel.exe |17/12/2004 10:08:43 C:\WINNT\TBZoom.exe |17/12/2004 10:08:43 C:\WINNT\twunk_16.exe |21/08/2002 21:51:54 C:\WINNT\twunk_32.exe |21/08/2002 21:51:54 C:\WINNT\UN16040C.EXE |24/09/2005 19:30:29 C:\WINNT\uneng.exe |15/09/2004 09:54:34 C:\WINNT\unin040c.exe |24/02/2006 19:09:50 C:\WINNT\UnSetup.exe |03/01/2006 17:52:00 C:\WINNT\pcdlib32.dll |04/11/2005 17:57:52 C:\WINNT\POCE98.DLL |23/09/1998 21:10:16 C:\WINNT\POCELANG.DLL |23/02/1999 14:12:18 C:\WINNT\TBManage.dll |17/12/2004 10:08:43 C:\WINNT\twain.dll |21/08/2002 21:51:53 C:\WINNT\twain_32.dll |21/08/2002 21:51:53 C:\WINNT\WCDTGR.DLL |22/02/2007 19:10:27 C:\WINNT\WCDTGR2.DLL |22/02/2007 19:10:27 C:\WINNT\WDTGR.DLL |22/02/2007 19:10:27 C:\WINNT\WDTGR2.DLL |22/02/2007 19:10:27 C:\WINNT\WNETWAY.DLL |22/02/2007 19:10:27 C:\WINNT\WNETWAY2.DLL |22/02/2007 19:10:27 C:\WINNT\WNETWT16.DLL |22/02/2007 19:10:27 C:\WINNT\WNETWT32.DLL |22/02/2007 19:10:27 C:\WINNT\system32\AdHocWiz.exe |03/02/2003 11:03:18 C:\WINNT\system32\append.exe |21/08/2002 21:41:55 C:\WINNT\system32\ati2evxx.exe |15/06/2005 21:10:17 C:\WINNT\system32\Ati2mdxx.exe |15/06/2005 21:10:17 C:\WINNT\system32\CnfUTW3.exe |22/02/2007 19:26:44 C:\WINNT\system32\CNMCP3W.EXE |30/11/2005 21:09:55 C:\WINNT\system32\debug.exe |21/08/2002 21:42:49 C:\WINNT\system32\Deutz Engine.exe |07/06/2006 21:28:24 C:\WINNT\system32\dfrgfat.exe |04/01/2007 22:22:15 C:\WINNT\system32\dfrgntfs.exe |04/01/2007 22:22:15 C:\WINNT\system32\dmadmin.exe |04/01/2007 22:22:18 C:\WINNT\system32\dmremote.exe |04/01/2007 22:22:19 C:\WINNT\system32\dosx.exe |21/08/2002 21:42:59 C:\WINNT\system32\dumphive.exe |10/02/2007 09:20:11 C:\WINNT\system32\duninstall.exe |25/11/2004 11:22:38 C:\WINNT\system32\dvdplay.exe |15/12/1999 00:30:38 C:\WINNT\system32\edlin.exe |21/08/2002 21:43:27 C:\WINNT\system32\exe2bin.exe |21/08/2002 21:43:32 C:\WINNT\system32\fastopen.exe |21/08/2002 21:43:33 C:\WINNT\system32\installW2k.exe |22/02/2007 19:26:44 C:\WINNT\system32\instuntlw98.exe |22/02/2007 19:26:44 C:\WINNT\system32\java.exe |25/11/2004 11:22:01 C:\WINNT\system32\javaw.exe |25/11/2004 11:22:01 C:\WINNT\system32\mem.exe |21/08/2002 21:46:07 C:\WINNT\system32\mscdexnt.exe |21/08/2002 21:46:41 C:\WINNT\system32\msswchx.exe |04/01/2007 22:28:06 C:\WINNT\system32\NA_Config.exe |22/02/2007 19:26:47 C:\WINNT\system32\NA_MBP.exe |22/02/2007 19:26:47 C:\WINNT\system32\NA_Service.exe |22/02/2007 19:26:47 C:\WINNT\system32\NA_XWAY.exe |22/02/2007 19:26:47 C:\WINNT\system32\nlsfunc.exe |21/08/2002 21:48:00 C:\WINNT\system32\nw16.exe |21/08/2002 21:48:24 C:\WINNT\system32\PfWizard.exe |03/02/2003 10:59:00 C:\WINNT\system32\prpcui.exe |05/08/2004 14:48:01 C:\WINNT\system32\redir.exe |21/08/2002 21:49:30 C:\WINNT\system32\RegSrvc.exe |12/01/2003 16:08:26 C:\WINNT\system32\RoamMgr.exe |03/02/2003 10:58:08 C:\WINNT\system32\S24EvMon.exe |12/01/2003 16:09:46 C:\WINNT\system32\SbrngSvc.exe |03/02/2003 10:53:40 C:\WINNT\system32\setver.exe |21/08/2002 21:50:08 C:\WINNT\system32\share.exe |21/08/2002 21:50:11 C:\WINNT\system32\SrchSTS.exe |10/02/2007 09:20:11 C:\WINNT\system32\swreg.exe |10/02/2007 09:20:09 C:\WINNT\system32\swsc.exe |10/02/2007 09:20:10 C:\WINNT\system32\swxcacls.exe |10/02/2007 09:20:11 C:\WINNT\system32\TPIDITST.exe |01/03/2002 11:20:22 C:\WINNT\system32\UnCutePP.exe |16/06/2005 20:39:15 C:\WINNT\system32\vwipxspx.exe |21/08/2002 21:52:31 C:\WINNT\system32\ZCfgSvc.exe |03/02/2003 10:57:16 C:\WINNT\system32\aIPH.dll |22/01/2007 19:51:03 C:\WINNT\system32\amstream.dll |05/08/2004 15:38:08 C:\WINNT\system32\ANICtl.dll |22/01/2007 19:51:03 C:\WINNT\system32\ANIOApi.dll |22/01/2007 19:50:50 C:\WINNT\system32\ANIWZCS2.dll |22/01/2007 19:51:03 C:\WINNT\system32\AQCKGen.dll |22/01/2007 19:51:03 C:\WINNT\system32\ati2cqag.dll |15/06/2005 21:10:17 C:\WINNT\system32\ati2dvag.dll |15/06/2005 21:10:17 C:\WINNT\system32\ati2edxx.dll |15/06/2005 21:10:17 C:\WINNT\system32\ati2evxx.dll |15/06/2005 21:10:17 C:\WINNT\system32\ati3d1ag.dll |05/08/2004 10:38:15 C:\WINNT\system32\ati3d2ag.dll |05/08/2004 10:38:15 C:\WINNT\system32\ati3duag.dll |15/06/2005 21:10:17 C:\WINNT\system32\ATIDDC.DLL |15/06/2005 21:10:17 C:\WINNT\system32\ATIDEMGR.dll |15/06/2005 21:10:17 C:\WINNT\system32\Atiidtxx.dll |05/08/2004 10:38:17 C:\WINNT\system32\atiiiexx.dll |15/06/2005 21:10:18 C:\WINNT\system32\atikvmag.dll |15/06/2005 21:10:18 C:\WINNT\system32\atimcd.dll |05/08/2004 14:22:12 C:\WINNT\system32\atimcdr3.dll |05/08/2004 14:22:13 C:\WINNT\system32\atioglxx.dll |15/06/2005 21:10:18 C:\WINNT\system32\atipdlxx.dll |15/06/2005 21:10:19 C:\WINNT\system32\atitvo32.dll |15/06/2005 21:10:19 C:\WINNT\system32\ativcoxx.dll |15/06/2005 21:10:19 C:\WINNT\system32\ativvaxx.dll |15/06/2005 21:10:19 C:\WINNT\system32\atmfd.dll |04/01/2007 22:21:38 C:\WINNT\system32\atmlib.dll |04/01/2007 22:21:39 C:\WINNT\system32\cdral.dll |17/12/2002 11:32:40 C:\WINNT\system32\cdrtc.dll |17/12/2002 11:32:54 C:\WINNT\system32\CNDPTPC.dll |08/06/2005 20:52:53 C:\WINNT\system32\CNDPTPU.dll |08/06/2005 20:52:53 C:\WINNT\system32\CNMLM3w.DLL |30/11/2005 21:10:03 C:\WINNT\system32\CNMVS3w.DLL |30/11/2005 21:10:03 C:\WINNT\system32\cutemon2k.dll |16/06/2005 20:39:15 C:\WINNT\system32\DellSys.dll |04/04/2002 11:55:24 C:\WINNT\system32\dfrgres.dll |21/08/2002 21:42:51 C:\WINNT\system32\dfrgsnap.dll |04/01/2007 22:22:15 C:\WINNT\system32\dfrgui.dll |21/08/2002 21:42:51 C:\WINNT\system32\dgrpsetu.dll |30/07/2004 10:46:33 C:\WINNT\system32\dgsetup.dll |21/08/2002 21:42:52 C:\WINNT\system32\dmconfig.dll |04/01/2007 22:22:18 C:\WINNT\system32\dmintf.dll |04/01/2007 22:22:18 C:\WINNT\system32\dmserver.dll |04/01/2007 22:22:19 C:\WINNT\system32\dmutil.dll |04/01/2007 22:22:19 C:\WINNT\system32\DrvCnfRg.dll |22/02/2007 19:26:44 C:\WINNT\system32\DUNTLWU.dll |22/02/2007 19:26:44 C:\WINNT\system32\efsadu.dll |21/08/2002 21:43:27 C:\WINNT\system32\ElbyCDIO.dll |13/12/2006 21:24:42 C:\WINNT\system32\EqnClass.Dll |30/07/2004 10:46:33 C:\WINNT\system32\eraser.dll |25/07/2003 11:14:34 C:\WINNT\system32\FFCore.dll |22/03/2004 13:46:22 C:\WINNT\system32\FFECart.dll |22/03/2004 13:46:24 C:\WINNT\system32\FFRAFLIB.DLL |11/08/2004 09:21:31 C:\WINNT\system32\FFTIFF16.dll |11/08/2004 09:21:31 C:\WINNT\system32\FINFCHECK.dll |11/08/2004 09:20:11 C:\WINNT\system32\FINFCOPY.dll |11/08/2004 09:20:10 C:\WINNT\system32\FREGSHEX.DLL |11/08/2004 09:20:09 C:\WINNT\system32\GEARAspi.dll |31/05/2005 09:20:36 C:\WINNT\system32\hhactivex.dll |14/06/2005 13:01:30 C:\WINNT\system32\HPDCMON.DLL |08/12/1998 12:24:40 C:\WINNT\system32\HSFCI010.dll |14/06/2005 09:17:27 C:\WINNT\system32\HTICONS.DLL |04/01/2007 22:23:06 C:\WINNT\system32\hypertrm.dll |30/07/2004 11:03:57 C:\WINNT\system32\iccvid.dll |21/08/2002 21:44:03 C:\WINNT\system32\imgcmn.dll |30/07/2004 11:03:47 C:\WINNT\system32\imgshl.dll |30/07/2004 11:03:47 C:\WINNT\system32\INETWH32.dll |17/12/2002 12:04:54 C:\WINNT\system32\ir32_32.dll |07/11/1995 13:46:00 C:\WINNT\system32\ir41_qc.dll |22/03/1998 14:34:14 C:\WINNT\system32\ir41_qcx.dll |22/03/1998 14:34:14 C:\WINNT\system32\ir50_32.dll |17/05/1999 14:12:56 C:\WINNT\system32\ir50_lcs.dll |06/11/1997 13:53:30 C:\WINNT\system32\ir50_qc.dll |07/10/1998 16:46:18 C:\WINNT\system32\ir50_qcx.dll |07/10/1998 16:50:22 C:\WINNT\system32\JJAKEn.dll |22/01/2007 19:51:04 C:\WINNT\system32\jpeg1x32.dll |30/07/2004 11:03:47 C:\WINNT\system32\jpeg2x32.dll |30/07/2004 11:03:47 C:\WINNT\system32\LgNotify.dll |03/02/2003 10:59:06 C:\WINNT\system32\malslib.dll |09/02/2005 11:08:47 C:\WINNT\system32\mciqtz32.dll |05/08/2004 15:38:08 C:\WINNT\system32\mdmxsdk.dll |14/06/2005 09:17:27 C:\WINNT\system32\MipCfg.dll |24/10/2002 11:32:00 C:\WINNT\system32\mipmnlog.dll |24/10/2002 11:32:00 C:\WINNT\system32\MMSwitch.dll |15/11/2002 13:11:26 C:\WINNT\system32\msdmo.dll |05/08/2004 15:38:11 C:\WINNT\system32\msencode.dll |30/08/2002 18:24:06 C:\WINNT\system32\MSRTEDIT.DLL |22/01/1999 19:46:58 C:\WINNT\system32\msswch.dll |04/01/2007 22:28:06 C:\WINNT\system32\NA_Util.dll |22/02/2007 19:26:47 C:\WINNT\system32\odSupp_M.dll |22/01/2007 19:51:03 C:\WINNT\system32\Oemdspif.dll |15/06/2005 21:10:19 C:\WINNT\system32\ogg.dll |14/12/2002 22:46:02 C:\WINNT\system32\oggDS.dll |14/12/2002 22:46:02 C:\WINNT\system32\oieng400.dll |04/01/2007 22:29:01 C:\WINNT\system32\oiprt400.dll |30/07/2004 11:03:47 C:\WINNT\system32\oislb400.dll |30/07/2004 11:03:48 C:\WINNT\system32\oissq400.dll |30/07/2004 11:03:48 C:\WINNT\system32\oitwa400.dll |30/07/2004 11:03:48 C:\WINNT\system32\oiui400.dll |30/07/2004 11:03:47 C:\WINNT\system32\PCDLIB32.DLL |09/12/1998 01:53:58 C:\WINNT\system32\pdf995mon.dll |16/06/2005 20:27:33 C:\WINNT\system32\pdfmona.dll |16/06/2005 20:27:33 C:\WINNT\system32\PfMgrApi.dll |12/01/2003 16:09:20 C:\WINNT\system32\Pn802_11.dll |03/02/2003 11:03:44 C:\WINNT\system32\PRPCLANG.DLL |05/08/2004 14:48:01 C:\WINNT\system32\PRPCUI.dll |05/08/2004 14:48:01 C:\WINNT\system32\PsGuiMgr.dll |03/02/2003 10:57:02 C:\WINNT\system32\psisdecd.dll |03/06/2005 20:25:40 C:\WINNT\system32\PsRegApi.dll |12/01/2003 16:08:42 C:\WINNT\system32\pvmjpg21.dll |12/12/2002 15:33:20 C:\WINNT\system32\qcut.dll |21/08/2002 21:49:16 C:\WINNT\system32\qedwipes.dll |05/08/2004 15:38:11 C:\WINNT\system32\RcdScan.dll |14/06/2005 13:01:30 C:\WINNT\system32\Roboex32.dll |17/12/2002 12:04:54 C:\WINNT\system32\S24MUDLL.DLL |12/01/2003 16:09:52 C:\WINNT\system32\s24netcfg.dll |01/03/2002 11:20:12 C:\WINNT\system32\SbrngAPI.dll |12/01/2003 16:25:58 C:\WINNT\system32\SMSUninst.dll |01/03/2002 11:20:14 C:\WINNT\system32\spxcoins.dll |15/09/2004 10:12:03 C:\WINNT\system32\tifflt.dll |30/07/2004 11:03:48 C:\WINNT\system32\TPIDI16.DLL |01/03/2002 11:20:16 C:\WINNT\system32\TPIDI32.dll |01/03/2002 11:20:18 C:\WINNT\system32\tsbyuv.dll |15/12/1999 00:30:06 C:\WINNT\system32\tsd32.dll |21/08/2002 21:51:50 C:\WINNT\system32\UNITELW.dll |22/02/2007 19:26:44 C:\WINNT\system32\vidx16.dll |22/03/1998 12:50:02 C:\WINNT\system32\vorbis.dll |14/12/2002 22:46:02 C:\WINNT\system32\vorbisenc.dll |14/12/2002 21:46:04 C:\WINNT\system32\vp6vfw.dll |30/08/2004 13:25:24 C:\WINNT\system32\VPN.dll |03/02/2003 11:03:50 C:\WINNT\system32\VSFilter.dll |12/08/2004 23:11:14 C:\WINNT\system32\Vxdif.dll |14/06/2005 21:57:56 C:\WINNT\system32\W20NCPA.dll |14/06/2005 13:05:45 C:\WINNT\system32\W32n50.dll |04/01/2007 22:51:30 C:\WINNT\system32\w70n5msg.dll |14/06/2005 13:05:45 C:\WINNT\system32\WConfig.dll |12/01/2003 16:10:54 C:\WINNT\system32\WiFiAdap.dll |12/01/2003 16:10:08 C:\WINNT\system32\win87em.dll |21/08/2002 21:53:05 C:\WINNT\system32\wlanapi.dll |22/01/2007 19:51:04 C:\WINNT\system32\WlanApp.dll |22/01/2007 19:51:04 C:\WINNT\system32\WLANDLL.dll |03/02/2003 10:57:48 C:\WINNT\system32\WooDial2000.dll |04/01/2007 22:51:42 C:\WINNT\system32\wsys.dll |03/03/2007 09:00:29 C:\WINNT\system32\xiffr3_0.dll |30/07/2004 11:03:48 C:\WINNT\system32\xvidcore.dll |20/12/2004 11:03:26 C:\WINNT\system32\xvidvfw.dll |20/12/2004 11:08:28 C:\WINNT\system32\XwayMgrU.dll |22/02/2007 19:26:47 Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\WINNT\system32 19/06/2003 20:05 5 392 CSRSS.EXE 1 fichier(s) 5 392 octets 0 Rép(s) 9 943 375 872 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\WINNT\Downloaded Program Files 14/02/2007 22:34 <DIR> . 14/02/2007 22:34 <DIR> .. 30/10/2006 19:51 65 desktop.ini 14/10/1997 17:52 697 DirectAnimation Java Classes.osd 08/08/2006 11:45 576 kavwebscan.inf 20/01/2000 14:25 1 162 Microsoft XML Parser for Java.osd 08/12/2003 12:58 3 759 swflash.inf 26/05/2005 04:19 291 wuweb.inf 6 fichier(s) 6 550 octets Total des fichiers listés : 6 fichier(s) 6 550 octets 2 Rép(s) 9 943 375 872 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006 http://www.gmer.net scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files 11/03/2007 09:11 <DIR> . 11/03/2007 09:11 <DIR> .. 30/07/2004 11:03 <DIR> Accessoires 16/06/2005 19:03 <DIR> Adobe 19/01/2007 21:42 <DIR> Alwil Software 22/01/2007 19:51 <DIR> ANI 06/03/2007 19:35 <DIR> AntiVir PersonalEdition Classic 14/06/2005 21:58 <DIR> Apoint 04/11/2005 18:06 <DIR> ArcSoft 15/02/2007 23:54 <DIR> a-squared Free 05/08/2004 10:38 <DIR> ATI Technologies 14/06/2005 13:10 <DIR> Broadcom 08/06/2005 20:52 <DIR> Canon 18/03/2007 14:28 <DIR> CartoNavPlus 10/02/2007 14:45 <DIR> CCleaner 24/02/2006 19:10 <DIR> Common Files 08/05/2006 11:33 <DIR> CompeGPS 30/07/2004 10:05 <DIR> ComPlus Applications 14/06/2005 09:17 <DIR> CONEXANT 05/08/2004 14:45 <DIR> Dell 14/06/2005 13:22 <DIR> Dell Modem-On-Hold 02/01/2007 21:26 <DIR> D-Link 03/06/2005 20:30 <DIR> EA GAMES 14/06/2005 14:52 <DIR> E-Carte Bleu 14/06/2005 14:52 <DIR> e-Carte Bleue 27/11/2005 12:57 <DIR> Eraser 30/10/2006 20:22 <DIR> Fichiers communs 01/06/2005 19:56 <DIR> FinePixViewer 31/05/2006 18:33 <DIR> Free Audio Pack 27/09/2005 19:44 <DIR> Garmin 21/03/2006 21:05 <DIR> Google 04/03/2007 17:48 <DIR> Grisoft 15/02/2007 23:18 <DIR> Hijackthis Version Française 14/06/2005 13:06 <DIR> Intel 30/10/2006 19:48 <DIR> Internet Explorer 15/09/2004 10:33 <DIR> InterVideo 02/01/2007 20:11 <DIR> Inventel 31/05/2006 18:35 <DIR> iPod 31/05/2006 18:35 <DIR> iTunes 25/11/2004 11:21 <DIR> Java 25/11/2004 11:22 <DIR> Java Web Start 03/01/2007 22:15 <DIR> Lavasoft 18/06/2005 14:12 <DIR> Logitech 28/10/2006 11:13 <DIR> Messenger 09/02/2005 11:09 <DIR> Microsoft ActiveSync 01/06/2005 21:50 <DIR> microsoft frontpage 01/06/2005 21:51 <DIR> Microsoft Office 28/02/2006 21:47 <DIR> Modem Helper 28/10/2006 11:41 <DIR> MSN Apps 04/01/2007 23:29 <DIR> MSN Messenger 30/05/2006 19:24 <DIR> MUSICMATCH 04/01/2007 22:35 <DIR> NetMeeting 04/01/2007 22:35 <DIR> Outlook Express 31/05/2006 18:38 <DIR> QuickTime 11/08/2004 09:20 <DIR> REGSHAVE 30/05/2005 22:56 <DIR> Roflex4 26/02/2007 21:47 <DIR> Schneider Electric 05/08/2004 10:41 <DIR> SigmaTel 21/01/2006 00:05 <DIR> SLD Codec Pack 25/02/2030 10:49 <DIR> SlySoft 03/06/2005 18:18 <DIR> Snapshot Viewer 14/05/2006 10:42 <DIR> Sony Ericsson 26/01/2007 18:06 <DIR> Spybot - Search & Destroy 07/01/2007 20:28 <DIR> Wanadoo 20/01/2006 23:32 <DIR> Webteh 04/01/2007 22:35 <DIR> Windows Media Player 04/01/2007 22:37 <DIR> Windows NT 16/06/2005 20:34 <DIR> WinZip 15/02/2007 23:23 <DIR> Yahoo! 0 fichier(s) 0 octets 69 Rép(s) 9 943 146 496 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\fichiers communs 30/10/2006 20:22 <DIR> . 30/10/2006 20:22 <DIR> .. 03/03/2007 16:29 <DIR> Adaptec Shared 16/06/2005 19:05 <DIR> Adobe 01/06/2005 21:52 <DIR> Designer 14/06/2005 21:59 <DIR> InstallShield 18/06/2005 14:12 <DIR> Logitech 30/10/2006 19:47 <DIR> Microsoft Shared 30/07/2004 10:46 <DIR> ODBC 30/10/2006 19:52 <DIR> Services 30/10/2006 20:22 <DIR> System 14/05/2006 10:43 <DIR> Teleca Shared 0 fichier(s) 0 octets 12 Rép(s) 9 943 207 936 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 04/01/2007 22:35 <DIR> . 04/01/2007 22:35 <DIR> .. 11/08/2004 09:00 <DIR> 1033 01/06/2005 20:55 <DIR> 1036 15/02/2001 04:45 1 318 912 MSONSEXT.DLL 03/06/1999 18:09 122 937 MSOWS409.DLL 13/08/1999 09:09 127 032 MSOWS40c.DLL 22/01/2001 02:25 86 016 PKMWS.DLL 18/03/1999 05:37 593 977 RAGENT.DLL 5 fichier(s) 2 248 874 octets 4 Rép(s) 9 943 142 400 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\Program Files\common files 24/02/2006 19:10 <DIR> . 24/02/2006 19:10 <DIR> .. 24/02/2006 19:10 <DIR> Borland Shared 14/05/2006 10:44 <DIR> Microsoft shared 0 fichier(s) 0 octets 4 Rép(s) 9 943 203 840 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est D8BA-BC2C Répertoire de C:\ 11/11/2001 00:00 68 096 diff.exe 27/08/2006 14:10 103 424 grep.exe 28/08/2001 12:00 147 968 msconfig.exe 3 fichier(s) 319 488 octets 0 Rép(s) 9 943 203 840 octets libres c:\Documents and Settings\Administrateur\Local Settings\Temp\First15.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\VP6Install.exe c:\Documents and Settings\anais\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe c:\Documents and Settings\yannick\Bureau\antivir_workstation_win7u_en_h.exe c:\Documents and Settings\yannick\Bureau\ATF-Cleaner.exe c:\Documents and Settings\yannick\Bureau\avg75f_447a967.exe c:\Documents and Settings\yannick\Bureau\avgas-setup-7.5.0.50.exe c:\Documents and Settings\yannick\Bureau\DSLtest20.exe c:\Documents and Settings\yannick\Bureau\HijackThis.exe c:\Documents and Settings\yannick\Bureau\updatecdr4_53_71.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\accwiz.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\admin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\at.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\author.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autochk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autoconv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autofmt.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\autolfn.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cacls.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cfgwiz.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\chkdsk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\chkntfs.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cipher.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cleanjpm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cluster.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cmd.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\cmstp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\conf.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\conime.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\control.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\convert.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\convlog.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\csrss.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dcomcnfg.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dfrgfat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dfrgntfs.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\diskperf.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dllhost.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dllhst3g.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dmadmin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dmremote.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\drwtsn32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\dtcsetup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\encinst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\esentutl.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\eudcedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\evntwin.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\explorer.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\faxsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\find.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\findstr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fortutil.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpadmcgi.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpcount.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\fpremadm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ftp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hh.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hidserv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\htimage.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\hypertrm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\icwconn1.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\iisreset.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\iisrstas.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\imagemap.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\inetinfo.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\inetmgr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\krnl386.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\label.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\locator.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\lodctr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\lsass.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\magnify.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mmc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mobsync.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mofcomp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mplayer2.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mq1sync.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqbkup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqmig.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mqsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\msinfo32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mspaint.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\msswchx.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mstask.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\mtstocom.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\narrator.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nbtstat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nddeapir.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\net1.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\netdde.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\netstat.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\nslookup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntbackup.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntdsutil.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntkrnlpa.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntoskrnl.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\ntvdm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\osk.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\packager.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\pws.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\pwstray.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\recover.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regedt32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\regsvr32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsh.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsnotify.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\rsvp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\runas.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\savedump.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\scardsvr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\scrcons.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\secedit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\services.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\shmgrate.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\shtml.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\skeys.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\smlogsvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\smss.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\sndrec32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\snmp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\snmptrap.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spiisupd.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spoolsv.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\stimon.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\stisvc.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\subst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\taskmgr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tcptest.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\telnet.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tftp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tlntsess.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\tlntsvr.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\unsecapp.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\userinit.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\utilman.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\w32tm.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\wbemtest.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winhlp32.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winhstb.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winlogon.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winmgmt.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winrep.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\winver.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\wpnpinst.exe c:\Documents and Settings\yannick\Bureau\$ntservicepackuninstall$\spuninst\spuninst.exe c:\Documents and Settings\yannick\Bureau\b\Firefox Setup 2.0.0.1.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\AMADA\dpm\DPM.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\AMADA\num pc set link\SPM.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\COURBE32.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\Ecodial.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\ECODLANG.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\hh.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\Hpersfdp.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\EXE\LAUNCH32.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\eco\ecodial3\MODULE\Internet.exe c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\_ISDEL.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\SETUP.EXE c:\Documents and Settings\yannick\Bureau\b\FCA Clef USB\EM14106\Keyence\UNINST.EXE c:\Documents and Settings\yannick\Bureau\b\GPSBABEL\gpsbabel.exe c:\Documents and Settings\yannick\Bureau\b\GPSBABEL\GPSBabelGUI.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\catchme.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\diff.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\dumphive.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\Fport.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\grep.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\streams.exe c:\Documents and Settings\yannick\Bureau\DiagHelp\swreg.exe c:\Documents and Settings\yannick\Mes documents\Downloads\avwinsfx.exe c:\Documents and Settings\yannick\Mes documents\Downloads\GoogleToolbarInstaller.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\b2701frx.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\Disk0\_isdel.exe c:\Documents and Settings\yannick\Mes documents\Downloads\Driver S200x\Disk0\setup.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\_ISDel.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\40Comupd.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\autorun.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\Setup.exe c:\Documents and Settings\yannick\Mes documents\MAPSOURCE\R&R France\UnitCode\Updater.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ITNConv.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\LOGConv.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\LogConv_ppc.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\sendmap20.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\GPSmap\GPSmap0085\cgpsmapper.exe c:\Documents and Settings\yannick\Mes documents\PARAPENTE\GPS\ZONES AERIENNES\GARMIN\Mapedit\mapedit.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\bsplayer137.826.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\pdf995s.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\ps2pdf995.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\Shareaza_2.1.0.0.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\sld.codec.pack.2.2.exe c:\Documents and Settings\yannick\Mes documents\PROGRAMMES\winzip80.exe

up

J'avais oublié le rapport: Logfile of HijackThis v1.99.1 Scan saved at 23:56:08, on 20/03/2007 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Dell\OpenManage\Client\Iap.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\NA_Service.exe C:\WINNT\system32\NA_XWAY.exe C:\WINNT\System32\RegSrvc.exe C:\WINNT\system32\regsvc.exe C:\WINNT\System32\RoamMgr.exe C:\WINNT\TEMP\wuauclt.exe C:\WINNT\System32\SCardSvr.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Intel\Switching\User\RoamSvc.exe C:\WINNT\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINNT\system32\ZCfgSvc.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\PRPCUI.exe C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\D-Link\AirPlus G\AirGCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINNT\system32\ctfmon.exe C:\Documents and Settings\yannick\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINNT\system32\BhoECart.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST1.03.0000.1005\en-xu\stmain.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar1.02.5000.1021\fr\msntb.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [REGSHAVE] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater1.03.0000.1005\fr\msnappau.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Gainward] C:\WINNT\TBPanel.exe /A O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1167944222356 O20 - Winlogon Notify: Sebring - C:\WINNT\System32\LgNotify.dll O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Iap - Dell Computer Corporation - C:\Program Files\Dell\OpenManage\Client\Iap.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Adapter Switching (IntelRoam) - Intel Corporation - C:\Program Files\Intel\Switching\User\RoamSvc.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NetAccess Service (NA_Service) - Schneider Automation - C:\WINNT\system32\NA_Service.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: RoamMgr - Intel Corporation - C:\WINNT\System32\RoamMgr.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe

Bonsoir à tous, Je suis infecté. Sous W2000 et dans le gestionnaire des taches, un processus nommé wuauclt.exe me prend tt la ressource CPU et incremente son occupation mémoire constament jusqu'au débordement RAM détecté par W2000. En mode sans echec, le probleme reste identique. Je n'ai plus de connection internet sur ce poste. Help !!! Je suis mal ! Merci d'avance.