dede_ja00

Ce que je remarque c'est que tout les fichiers infectés sont dans C:\WINDOWS\FONTS mais je ne les vois pas même en montrant les fichiers cachés. En ce qui concerne le formatage, cela peut se faire en mettant mon disque dur en escalve ?

C'était en cours, cela a duré plus de 3h30 ! mais le rapporte est très très long long, je le post tout de même ? 22 virus et environ 40000 fichiers infecters

En ce qui concerne les bugs la sécurité reste toujours sur "accepter tous les cookies" , et j'ai des petits bugs comme par exemple : la sourie ne répond pas très bien lorsque je clic il faut incister, j'ai du mal à sourligner les textes, à deplacer des icones, mais par contre le curseur et la molette répondent normalement.

combofix: ComboFix 07-11-01.1 - alexis 2007-11-04 13:49:47.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.523 [GMT 1:00] Running from: C:\Documents and Settings\alexis.ATHLON2200\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\alexis.ATHLON2200\Bureau\CFScript.txt * Created a new restore point FILE:: C:\DOCUME~1\ALEXIS~1.ATH\LOCALS~1\Temp\bDMusicb.sys C:\Documents and Settings\alexis.ATHLON2200\iexplorer.exe C:\Documents and Settings\martine.ATHLON2200\iexplorer.exe C:\Documents and Settings\sophie.ATHLON2200\iexplorer.exe C:\n.bat C:\WINDOWS\mrofinu1000106.exe C:\WINDOWS\mrofinu1188.exe C:\WINDOWS\SYSTEM32\akdjaxdw.dll C:\WINDOWS\SYSTEM32\ankcdydp.dll C:\WINDOWS\SYSTEM32\ddcayvt.dll C:\WINDOWS\SYSTEM32\efcayvt.dll C:\WINDOWS\SYSTEM32\hggfgfg.dll C:\WINDOWS\SYSTEM32\tuvwxxw.dll C:\WINDOWS\SYSTEM32\urqqqom.dll C:\WINDOWS\SYSTEM32\vmarbfpq.dll C:\z.dat . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\alexis.ATHLON2200\iexplorer.exe C:\Documents and Settings\martine.ATHLON2200\iexplorer.exe C:\Documents and Settings\sophie.ATHLON2200\iexplorer.exe C:\n.bat C:\temp\mZOr C:\temp\mZOr\tOasF.log C:\WINDOWS\mrofinu1000106.exe C:\WINDOWS\mrofinu1188.exe C:\WINDOWS\SYSTEM32\akdjaxdw.dll C:\WINDOWS\SYSTEM32\ankcdydp.dll C:\WINDOWS\SYSTEM32\ddcayvt.dll C:\WINDOWS\SYSTEM32\efcayvt.dll C:\WINDOWS\SYSTEM32\hggfgfg.dll C:\WINDOWS\SYSTEM32\tuvwxxw.dll C:\WINDOWS\SYSTEM32\urqqqom.dll C:\WINDOWS\SYSTEM32\vmarbfpq.dll C:\z.dat . ((((((((((((((((((((((((((((( Fichiers créés 2007-10-04 to 2007-11-04 )))))))))))))))))))))))))))))))))))) . 2007-11-04 12:32 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-02 22:28 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft 2007-11-02 22:28 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\Grisoft 2007-11-02 13:41 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2007-11-02 13:40 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-11-02 07:27 <REP> d-------- C:\WINDOWS\SYSTEM32\Mz18r 2007-10-31 14:17 <REP> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP 2007-10-31 13:03 <REP> d-------- C:\Program Files\Incomplete 2007-10-31 12:58 147,456 --a------ C:\WINDOWS\SYSTEM32\vbzip10.dll 2007-10-31 12:54 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\BWMeterPro 2007-10-31 12:54 32,256 --------- C:\WINDOWS\SYSTEM32\khfdbxu.dll 2007-10-30 09:05 462,848 --a------ C:\WINDOWS\SYSTEM32\ltkrn13n.dll 2007-10-30 09:05 450,560 --a------ C:\WINDOWS\SYSTEM32\ltimg13n.dll 2007-10-30 09:05 401,408 --a------ C:\WINDOWS\SYSTEM32\lfcmp13n.dll 2007-10-30 09:05 299,008 --a------ C:\WINDOWS\SYSTEM32\ltdis13n.dll 2007-10-30 09:05 206,336 --a------ C:\WINDOWS\SYSTEM32\ltefx13n.dll 2007-10-30 09:05 163,840 --a------ C:\WINDOWS\SYSTEM32\ltfil13n.dll 2007-10-30 09:05 159,744 --a------ C:\WINDOWS\SYSTEM32\lfpng13n.dll 2007-10-30 09:05 69,632 --a------ C:\WINDOWS\SYSTEM32\lfgif13n.dll 2007-10-30 09:05 57,344 --a------ C:\WINDOWS\SYSTEM32\lfbmp13n.dll 2007-10-28 14:47 <REP> d-------- C:\UnrealTournament 2007-10-27 16:11 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\Media Center Programs 2007-10-27 15:55 <REP> d-------- C:\Program Files\THQ 2007-10-27 15:53 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\InstallShield 2007-10-26 21:44 <REP> d-------- C:\Program Files\Switch Off 2007-10-13 12:28 <REP> d-------- C:\Program Files\HomePlayer1.5.2 2007-10-13 12:16 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\.homeplayer 2007-10-12 17:48 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\U3 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-03 11:55 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2007-11-02 15:28 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\LimeWire 2007-11-02 15:16 --------- d-----w C:\Program Files\Lavasoft 2007-11-02 12:42 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\Lavasoft 2007-11-02 06:29 --------- d-----w C:\Documents and Settings\sophie.ATHLON2200\Application Data\LimeWire 2007-11-01 17:28 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\Free Download Manager 2007-11-01 10:15 --------- d-----w C:\Program Files\Soldier of Fortune II - Double Helix 2007-11-01 10:15 --------- d-----w C:\Program Files\PowerStrip 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\stéphane\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\sophie.ATHLON2200\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\amélie.ATHLON2200\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\ReGet Junior 2007-10-31 12:02 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-10-31 12:02 --------- d-----w C:\Program Files\Ubisoft 2007-10-30 17:29 --------- d-----w C:\Program Files\Worms world party 2007-10-27 14:54 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\InstallShield Installation Information 2007-10-23 17:41 --------- d-----w C:\Documents and Settings\martine.ATHLON2200\Application Data\AdobeUM 2007-10-07 14:24 --------- d-----w C:\Program Files\DivX 2007-10-06 14:51 --------- d-----w C:\Program Files\Java 2007-09-29 08:02 --------- d-----w C:\Program Files\Counter-Strike 1.6 2007-09-29 07:58 --------- d-----w C:\Program Files\Cheating-Death 2007-09-28 20:00 367 ----a-w C:\Program Files\INSTALL.LOG 2007-09-28 20:00 --------- d-----w C:\Program Files\SteamApps 2007-09-25 19:08 --------- d-----w C:\Program Files\DAEMON Tools 2007-09-25 19:05 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-09-25 18:00 --------- d-----w C:\Program Files\IsoBuster 2007-09-22 20:41 --------- d-----w C:\Program Files\Atari 2007-09-22 20:21 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Test Drive Unlimited 2007-09-16 08:32 --------- d-----w C:\Program Files\Microsoft Games 2007-09-06 10:05 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 10:05 92,848 -c--a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 10:03 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 10:02 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 10:00 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-07-04 19:33 30,530 -c--a-w C:\Program Files\AppUpdateStats.blob 2007-07-04 19:24 338,936 -c--a-w C:\Program Files\vstdlib_s.dll 2007-07-04 19:24 232,696 -c--a-w C:\Program Files\tier0_s.dll 2007-07-04 19:24 117,752 -c--a-w C:\Program Files\CSERHelper.dll 2003-09-12 13:28 42,376 ----a-w C:\Program Files\ClientRegistry.blob 2003-02-22 11:33 266 --sh--w C:\Program Files\desktop.ini 2003-02-22 11:33 11,208 -c-ha-w C:\Program Files\folder.htt 2002-08-05 11:55 4,045 -c--a-w C:\Program Files\irstusb.inf 2001-11-05 07:30 165,376 -c----w C:\Program Files\UNWISE.EXE 2001-09-26 10:10 53,248 -c--a-w C:\Program Files\regdll.dll 2001-09-26 10:10 49,152 -c--a-w C:\Program Files\reinst.dll 2001-09-24 09:08 30,088 ----a-w C:\Program Files\irstusb.sys 2001-07-12 09:00 58 -c--a-w C:\Program Files\setup.ini 2004-08-03 22:55:02 73,728 -csha-w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe 2005-01-16 16:19:06 4,608 -csha-r C:\WINDOWS\SYSTEM\driver\cygcrypt-0.dll 2005-01-16 16:19:06 1,140,617 -csha-r C:\WINDOWS\SYSTEM\driver\cygwin1.dll 2005-06-15 20:37:03 688 -csha-r C:\WINDOWS\SYSTEM\driver\ntauth.dll 2005-01-28 10:30:22 1,478 -csha-r C:\WINDOWS\SYSTEM\driver\servicelogon.dll 2005-06-15 20:37:03 1,849 -csha-r C:\WINDOWS\SYSTEM\driver\servicesmgr.dll 2005-01-28 10:30:22 1,477 -csha-r C:\WINDOWS\SYSTEM\driver\svchostlogon.dll 2005-06-15 20:37:03 1,571 -csha-r C:\WINDOWS\SYSTEM\driver\winlogon.dll 2005-05-14 12:35:19 56 --sha-r C:\WINDOWS\SYSTEM32\ADC2F425D9.sys 2006-05-03 10:06:54 163,328 --sh--r C:\WINDOWS\SYSTEM32\flvDX.dll 2005-05-14 12:35:19 10,856 --sha-w C:\WINDOWS\SYSTEM32\KGyGaAvL.sys 2007-02-21 11:47:16 31,744 --sh--r C:\WINDOWS\SYSTEM32\msfDX.dll 2005-06-16 18:03:09 205 --sha-r C:\WINDOWS\SYSTEM32\nulware.exe . ((((((((((((((((((((((((((((( snapshot@2007-11-04_12.53.04.90 ))))))))))))))))))))))))))))))))))))))))) . + 2007-11-04 12:54:44 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_654.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8BDBF2C3-7023-4CE2-AFDE-81C5DFE08E51}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 11:06] "Logitech Utility"="Logi_MwX.Exe" [2003-03-04 10:50 C:\WINDOWS\LOGI_MWX.EXE] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-22 20:05] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="LogonUI.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\c_8ter] c_8ter.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\kbdind] kbdind.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk.disabled] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk.disabled backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnk.disabledCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\008687d1] rundll32.exe "C:\WINDOWS\system32\ankcdydp.dll",b [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Host Process] C:\WINDOWS\Fonts\svchost.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\runner1] C:\WINDOWS\mrofinu1188.exe 61A847B5BBF72813339330466188719AB689201522886B092CBD44BD8689220221DD3257 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] "C:\Documents and Settings\alexis.ATHLON2200\Bureau\Steam.exe" -silent [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "iTunesHelper"=C:\Documents and Settings\amélie.ATHLON2200\Mes documents\Ipod\iTunesHelper.exe "<NO NAME>"= "NeroCheck"=C:\WINDOWS\system32\NeroCheck.exe "vSkype"=C:\Program Files\Santa Cruz Networks\vSkype\vSkype.exe no "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "SoundMan"=SOUNDMAN.EXE "SSBkgdUpdate"=C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot "DNS7reminder"="C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.exe" -r "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.ini" "a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices-] "IE Runtimes"=winis.exe R1 ATITool;ATITool;\??\C:\Program Files\ATITool\ATITool.sys R2 litsgt;litsgt;C:\WINDOWS\system32\DRIVERS\litsgt.sys R2 tansgt;tansgt;C:\WINDOWS\system32\DRIVERS\tansgt.sys R3 PPJoyBus;Parallel Port Joystick Bus device driver;C:\WINDOWS\system32\drivers\PPJoyBus.sys R3 PPortJoystick;Parallel Port Joystick device driver;C:\WINDOWS\system32\drivers\PPortJoy.sys R3 Tetris;Tetris driver;C:\WINDOWS\system32\Drivers\Tetris.sys R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D.sys R3 WFsys;WinFox Control I/O Driver;C:\WINDOWS\system32\DRIVERS\wfsys.sys S0 ElbyVCD;ElbyVCD;C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys S3 bDMusicb;bDMusicb;\??\C:\DOCUME~1\ALEXIS~1.ATH\LOCALS~1\Temp\bDMusicb.sys S3 BS_DEF;BS_DEF;\??\C:\WINDOWS\system32\drivers\BS_DEF.sys S3 LMImirr;LMImirr;C:\WINDOWS\system32\DRIVERS\LMImirr.sys S3 PCAlertDriver;PCAlertDriver;\??\C:\Program Files\MSI\Core Center\NTGLM7X.sys S3 RadProbe;Radeon Probe Driver;C:\WINDOWS\system32\DRIVERS\RadProbe.sys S3 RushTopDevice;RushTopDevice;\??\C:\Program Files\MSI\Core Center\RushTop.sys S3 SetupNTGLM7X;SetupNTGLM7X;\??\D:\NTGLM7X.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{39506027-c5db-11d9-9e28-0011098f6bf2}] \Shell\AutoRun\command - H:\Setup\rsrc\Autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6eef0301-0ec7-11db-a180-0011098f6bf2}] \Shell\AutoRun\command - F:\CdAutoRun.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-10-19 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-04 13:55:23 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-04 13:58:47 - machine was rebooted C:\ComboFix2.txt ... 2007-11-04 12:53 . --- E O F --- hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:01:17, on 04/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\tlntsvr.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {8BDBF2C3-7023-4CE2-AFDE-81C5DFE08E51} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1172328819906 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: vskype - (no CLSID) - (no file) O20 - Winlogon Notify: c_8ter - c_8ter.dll (file missing) O20 - Winlogon Notify: kbdind - kbdind.dll (file missing) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Documents and Settings\amélie.ATHLON2200\Mes documents\Ipod\bin\iPodService.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing) -- End of file - 6952 bytes j'ai fait le upload, mais j'ai :"Le fichier choisi est invalide !" Par contre je ne souhaite pas changer d'anti-virus pour l'instant mais j'y réflechis

Merci pour votre aide, voila : ComboFix 07-11-01.1 - alexis 2007-11-04 12:34:22.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.568 [GMT 1:00] Running from: C:\Documents and Settings\alexis.ATHLON2200\Bureau\ComboFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\alexis.ATHLON2200\Application Data\tmp72.tmp.exe C:\Documents and Settings\alexis.ATHLON2200\Application Data\tmp91.tmp.exe C:\Documents and Settings\alexis.ATHLON2200\Application Data\tmp92.tmp.exe C:\Documents and Settings\martine.ATHLON2200\Application Data\tmp24.tmp.exe C:\Documents and Settings\martine.ATHLON2200\Application Data\tmp2C.tmp.exe C:\Program Files\WinAble C:\Temp\1cb C:\Temp\1cb\syscheck.log C:\WINDOWS\b122.exe C:\WINDOWS\system32\__c0036466.dat C:\WINDOWS\system32\__c00462D6.dat C:\WINDOWS\system32\__c0059864.dat C:\WINDOWS\system32\__c0087DA8.dat C:\WINDOWS\system32\__c00C1458.dat C:\WINDOWS\system32\b3 C:\WINDOWS\system32\e1 C:\WINDOWS\system32\e1\caws83122.exe C:\WINDOWS\system32\eiccqcfx.dll C:\WINDOWS\system32\evxibsgy.dll C:\WINDOWS\system32\hgimjrop.dll C:\WINDOWS\SYSTEM32\hmcffkpi.ini C:\WINDOWS\system32\ipkffcmh.dll C:\WINDOWS\system32\irkgoxws.dll C:\WINDOWS\system32\kcnfsxar.dll C:\WINDOWS\system32\mawjgsld.dll C:\WINDOWS\system32\mwraxaaq.dll C:\WINDOWS\system32\nepdadys.dll C:\WINDOWS\system32\njlhaenl.dll C:\WINDOWS\system32\oejxcwrk.dll C:\WINDOWS\system32\pac.txt C:\WINDOWS\SYSTEM32\raxsfnck.ini C:\WINDOWS\system32\sstts.dll C:\WINDOWS\SYSTEM32\sttss.bak1 C:\WINDOWS\SYSTEM32\sttss.bak2 C:\WINDOWS\SYSTEM32\sttss.ini C:\WINDOWS\SYSTEM32\sttss.ini2 C:\WINDOWS\SYSTEM32\swxogkri.ini C:\WINDOWS\system32\ttnfwrmd.dll C:\WINDOWS\system32\u4 C:\WINDOWS\system32\u4\wr31drs.exe C:\WINDOWS\system32\ygosurgp.dll C:\z.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_DOMAINSERVICE ((((((((((((((((((((((((((((( Fichiers créés 2007-10-04 to 2007-11-04 )))))))))))))))))))))))))))))))))))) . 2007-11-04 12:34 78,912 --a------ C:\WINDOWS\SYSTEM32\akdjaxdw.dll 2007-11-04 12:32 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-03 23:39 87,616 --a------ C:\WINDOWS\SYSTEM32\vmarbfpq.dll 2007-11-02 22:28 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft 2007-11-02 22:28 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\Grisoft 2007-11-02 22:20 86,080 --a------ C:\WINDOWS\SYSTEM32\ankcdydp.dll 2007-11-02 13:41 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2007-11-02 13:40 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-11-02 12:17 28,672 --a------ C:\Documents and Settings\martine.ATHLON2200\iexplorer.exe 2007-11-02 11:05 32,256 --a------ C:\WINDOWS\SYSTEM32\urqqqom.dll 2007-11-02 07:27 <REP> d-------- C:\WINDOWS\SYSTEM32\Mz18r 2007-11-02 07:27 <REP> d----c--- C:\temp\mZOr 2007-11-02 07:27 35,840 --a------ C:\WINDOWS\mrofinu1000106.exe 2007-11-02 07:27 32,256 --a------ C:\WINDOWS\SYSTEM32\tuvwxxw.dll 2007-11-02 00:00 32,256 --a------ C:\WINDOWS\SYSTEM32\ddcayvt.dll 2007-11-01 19:33 32,256 --a------ C:\WINDOWS\SYSTEM32\efcayvt.dll 2007-11-01 19:33 28,672 --a------ C:\Documents and Settings\sophie.ATHLON2200\iexplorer.exe 2007-11-01 09:26 32,256 --a------ C:\WINDOWS\SYSTEM32\hggfgfg.dll 2007-11-01 09:25 28,672 --a------ C:\Documents and Settings\alexis.ATHLON2200\iexplorer.exe 2007-10-31 14:17 <REP> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP 2007-10-31 13:03 <REP> d-------- C:\Program Files\Incomplete 2007-10-31 12:58 147,456 --a------ C:\WINDOWS\SYSTEM32\vbzip10.dll 2007-10-31 12:55 82 --a------ C:\n.bat 2007-10-31 12:55 0 --a------ C:\z.dat 2007-10-31 12:54 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\BWMeterPro 2007-10-31 12:54 35,840 --a------ C:\WINDOWS\mrofinu1188.exe 2007-10-31 12:54 32,256 --------- C:\WINDOWS\SYSTEM32\khfdbxu.dll 2007-10-30 09:05 462,848 --a------ C:\WINDOWS\SYSTEM32\ltkrn13n.dll 2007-10-30 09:05 450,560 --a------ C:\WINDOWS\SYSTEM32\ltimg13n.dll 2007-10-30 09:05 401,408 --a------ C:\WINDOWS\SYSTEM32\lfcmp13n.dll 2007-10-30 09:05 299,008 --a------ C:\WINDOWS\SYSTEM32\ltdis13n.dll 2007-10-30 09:05 206,336 --a------ C:\WINDOWS\SYSTEM32\ltefx13n.dll 2007-10-30 09:05 163,840 --a------ C:\WINDOWS\SYSTEM32\ltfil13n.dll 2007-10-30 09:05 159,744 --a------ C:\WINDOWS\SYSTEM32\lfpng13n.dll 2007-10-30 09:05 69,632 --a------ C:\WINDOWS\SYSTEM32\lfgif13n.dll 2007-10-30 09:05 57,344 --a------ C:\WINDOWS\SYSTEM32\lfbmp13n.dll 2007-10-28 14:47 <REP> d-------- C:\UnrealTournament 2007-10-27 16:11 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\Media Center Programs 2007-10-27 15:55 <REP> d-------- C:\Program Files\THQ 2007-10-27 15:53 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\InstallShield 2007-10-26 21:44 <REP> d-------- C:\Program Files\Switch Off 2007-10-13 12:28 <REP> d-------- C:\Program Files\HomePlayer1.5.2 2007-10-13 12:16 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\.homeplayer 2007-10-12 17:48 <REP> d-------- C:\Documents and Settings\alexis.ATHLON2200\Application Data\U3 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-03 11:55 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2007-11-02 15:28 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\LimeWire 2007-11-02 15:16 --------- d-----w C:\Program Files\Lavasoft 2007-11-02 12:42 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\Lavasoft 2007-11-02 06:29 --------- d-----w C:\Documents and Settings\sophie.ATHLON2200\Application Data\LimeWire 2007-11-01 17:28 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\Free Download Manager 2007-11-01 10:15 --------- d-----w C:\Program Files\Soldier of Fortune II - Double Helix 2007-11-01 10:15 --------- d-----w C:\Program Files\PowerStrip 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\stéphane\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\sophie.ATHLON2200\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\amélie.ATHLON2200\Application Data\ReGet Junior 2007-11-01 10:15 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\ReGet Junior 2007-10-31 12:02 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-10-31 12:02 --------- d-----w C:\Program Files\Ubisoft 2007-10-30 17:29 --------- d-----w C:\Program Files\Worms world party 2007-10-27 14:54 --------- d-----w C:\Documents and Settings\alexis.ATHLON2200\Application Data\InstallShield Installation Information 2007-10-23 17:41 --------- d-----w C:\Documents and Settings\martine.ATHLON2200\Application Data\AdobeUM 2007-10-07 14:24 --------- d-----w C:\Program Files\DivX 2007-10-06 14:51 --------- d-----w C:\Program Files\Java 2007-09-29 08:02 --------- d-----w C:\Program Files\Counter-Strike 1.6 2007-09-29 07:58 --------- d-----w C:\Program Files\Cheating-Death 2007-09-28 20:00 367 ----a-w C:\Program Files\INSTALL.LOG 2007-09-28 20:00 --------- d-----w C:\Program Files\SteamApps 2007-09-25 19:08 --------- d-----w C:\Program Files\DAEMON Tools 2007-09-25 19:05 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-09-25 18:00 --------- d-----w C:\Program Files\IsoBuster 2007-09-22 20:41 --------- d-----w C:\Program Files\Atari 2007-09-22 20:21 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Test Drive Unlimited 2007-09-16 08:32 --------- d-----w C:\Program Files\Microsoft Games 2007-09-06 10:05 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 10:05 92,848 -c--a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 10:03 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 10:02 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 10:00 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-07-04 19:33 30,530 -c--a-w C:\Program Files\AppUpdateStats.blob 2007-07-04 19:24 338,936 -c--a-w C:\Program Files\vstdlib_s.dll 2007-07-04 19:24 232,696 -c--a-w C:\Program Files\tier0_s.dll 2007-07-04 19:24 117,752 -c--a-w C:\Program Files\CSERHelper.dll 2003-09-12 13:28 42,376 ----a-w C:\Program Files\ClientRegistry.blob 2003-02-22 11:33 266 --sh--w C:\Program Files\desktop.ini 2003-02-22 11:33 11,208 -c-ha-w C:\Program Files\folder.htt 2002-08-05 11:55 4,045 -c--a-w C:\Program Files\irstusb.inf 2001-11-05 07:30 165,376 -c----w C:\Program Files\UNWISE.EXE 2001-09-26 10:10 53,248 -c--a-w C:\Program Files\regdll.dll 2001-09-26 10:10 49,152 -c--a-w C:\Program Files\reinst.dll 2001-09-24 09:08 30,088 ----a-w C:\Program Files\irstusb.sys 2001-07-12 09:00 58 -c--a-w C:\Program Files\setup.ini 2004-08-03 22:55:02 73,728 -csha-w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe 2005-01-16 16:19:06 4,608 -csha-r C:\WINDOWS\SYSTEM\driver\cygcrypt-0.dll 2005-01-16 16:19:06 1,140,617 -csha-r C:\WINDOWS\SYSTEM\driver\cygwin1.dll 2005-06-15 20:37:03 688 -csha-r C:\WINDOWS\SYSTEM\driver\ntauth.dll 2005-01-28 10:30:22 1,478 -csha-r C:\WINDOWS\SYSTEM\driver\servicelogon.dll 2005-06-15 20:37:03 1,849 -csha-r C:\WINDOWS\SYSTEM\driver\servicesmgr.dll 2005-01-28 10:30:22 1,477 -csha-r C:\WINDOWS\SYSTEM\driver\svchostlogon.dll 2005-06-15 20:37:03 1,571 -csha-r C:\WINDOWS\SYSTEM\driver\winlogon.dll 2005-05-14 12:35:19 56 --sha-r C:\WINDOWS\SYSTEM32\ADC2F425D9.sys 2006-05-03 10:06:54 163,328 --sh--r C:\WINDOWS\SYSTEM32\flvDX.dll 2005-05-14 12:35:19 10,856 --sha-w C:\WINDOWS\SYSTEM32\KGyGaAvL.sys 2007-02-21 11:47:16 31,744 --sh--r C:\WINDOWS\SYSTEM32\msfDX.dll 2005-06-16 18:03:09 205 --sha-r C:\WINDOWS\SYSTEM32\nulware.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6128c39e-7ed4-4ba6-8302-19bda27a9e9a}] 2007-11-04 12:34 78912 --a------ C:\WINDOWS\system32\akdjaxdw.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8BDBF2C3-7023-4CE2-AFDE-81C5DFE08E51}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 11:06] "Logitech Utility"="Logi_MwX.Exe" [2003-03-04 10:50 C:\WINDOWS\LOGI_MWX.EXE] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-22 20:05] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="LogonUI.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\c_8ter] c_8ter.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\kbdind] kbdind.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] "Authentication Packages"= msv1_0 C:\WINDOWS\system32\sstts.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk.disabled] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk.disabled backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnk.disabledCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\008687d1] rundll32.exe "C:\WINDOWS\system32\ankcdydp.dll",b [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Host Process] C:\WINDOWS\Fonts\svchost.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\runner1] C:\WINDOWS\mrofinu1188.exe 61A847B5BBF72813339330466188719AB689201522886B092CBD44BD8689220221DD3257 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] "C:\Documents and Settings\alexis.ATHLON2200\Bureau\Steam.exe" -silent [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "iTunesHelper"=C:\Documents and Settings\amélie.ATHLON2200\Mes documents\Ipod\iTunesHelper.exe "<NO NAME>"= "NeroCheck"=C:\WINDOWS\system32\NeroCheck.exe "vSkype"=C:\Program Files\Santa Cruz Networks\vSkype\vSkype.exe no "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "SoundMan"=SOUNDMAN.EXE "SSBkgdUpdate"=C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot "DNS7reminder"="C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.exe" -r "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.ini" "a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices-] "IE Runtimes"=winis.exe R1 ATITool;ATITool;\??\C:\Program Files\ATITool\ATITool.sys R2 litsgt;litsgt;C:\WINDOWS\system32\DRIVERS\litsgt.sys R2 tansgt;tansgt;C:\WINDOWS\system32\DRIVERS\tansgt.sys R3 PPJoyBus;Parallel Port Joystick Bus device driver;C:\WINDOWS\system32\drivers\PPJoyBus.sys R3 PPortJoystick;Parallel Port Joystick device driver;C:\WINDOWS\system32\drivers\PPortJoy.sys R3 Tetris;Tetris driver;C:\WINDOWS\system32\Drivers\Tetris.sys R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D.sys R3 WFsys;WinFox Control I/O Driver;C:\WINDOWS\system32\DRIVERS\wfsys.sys S0 ElbyVCD;ElbyVCD;C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys S3 bDMusicb;bDMusicb;\??\C:\DOCUME~1\ALEXIS~1.ATH\LOCALS~1\Temp\bDMusicb.sys S3 BS_DEF;BS_DEF;\??\C:\WINDOWS\system32\drivers\BS_DEF.sys S3 LMImirr;LMImirr;C:\WINDOWS\system32\DRIVERS\LMImirr.sys S3 PCAlertDriver;PCAlertDriver;\??\C:\Program Files\MSI\Core Center\NTGLM7X.sys S3 RadProbe;Radeon Probe Driver;C:\WINDOWS\system32\DRIVERS\RadProbe.sys S3 RushTopDevice;RushTopDevice;\??\C:\Program Files\MSI\Core Center\RushTop.sys S3 SetupNTGLM7X;SetupNTGLM7X;\??\D:\NTGLM7X.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{39506027-c5db-11d9-9e28-0011098f6bf2}] \Shell\AutoRun\command - H:\Setup\rsrc\Autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6eef0301-0ec7-11db-a180-0011098f6bf2}] \Shell\AutoRun\command - F:\CdAutoRun.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-10-19 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-04 12:50:25 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-04 12:53:27 - machine was rebooted . --- E O F --- Hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:06:54, on 04/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\tlntsvr.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: {a9e9a72a-db91-2038-6ab4-4de7e93c8216} - {6128c39e-7ed4-4ba6-8302-19bda27a9e9a} - C:\WINDOWS\system32\akdjaxdw.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {8BDBF2C3-7023-4CE2-AFDE-81C5DFE08E51} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1172328819906 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: vskype - (no CLSID) - (no file) O20 - Winlogon Notify: c_8ter - c_8ter.dll (file missing) O20 - Winlogon Notify: kbdind - kbdind.dll (file missing) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Documents and Settings\amélie.ATHLON2200\Mes documents\Ipod\bin\iPodService.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing) -- End of file - 7045 bytes

Merci pour les conseils, mais j'ai toujours internet avec "accepter tous les cookies" avec des petits bugs par-ci par-là, je vois pas ce qu'il faudrait faire dans mon cas, dois-je reposter un rapport afin de voir ce qui a changé ?

ok merci l'analyse est en cours, mais je reste assez septique sur antivir j'ai regardé sur google quelles étaient les commentaires à ce sujet là et il y a du pour et du contre, et j'ai remarqué que pas mal de personnes en font la pub

Bonsoir, j'ai remarqué quelques ralentissements en ce qui concerne Internet, de plus le niveau de confidencialité reste toujours sur "Accepter tous les cookies" à chaque nouvelle fenêre d'Internet. Comme je n'y comprend rien à hijackthis, je vous laisse admirer ce rapport. Merci Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:25:16, on 01/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\tlntsvr.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\Fonts\svchost.exe C:\WINDOWS\Fonts\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\PROGRA~1\FREEDO~1\fdm.exe C:\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Host Process] C:\WINDOWS\Fonts\svchost.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1172328819906 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: vskype - (no CLSID) - (no file) O20 - AppInit_DLLs: C:\WINDOWS\system32\__c0087DA8.dat O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Documents and Settings\amélie.ATHLON2200\Mes documents\Ipod\bin\iPodService.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing) -- End of file - 6343 bytes