shell

et bien mon ordinateur fonctionne mieux merci... et pour la question precedente, pour te repondre, je ne sais pas pourquoi Kaspesky n'est pas actif... enfin c'est une version d'evaluation, que je venais de mettre, il faudra que je regarde sa. voici le drenier rapport HIghJackThis et merci pour tout c'est sympa ^^ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:24:02, on 07/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\arservice.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\CAPRPCSK.EXE C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Vidalia Bundle\Tor\tor.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe c:\windows\system\hpsysdrv.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Vidalia] "C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe -- End of file - 11169 bytes

donc voila j'ai suivi les instructions et voici... ComboFix 09-01-05.02 - HP_Administrateur 2009-01-06 7:17:19.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.959.424 [GMT 1:00] Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\HP_Administrateur\Bureau\CFScript.txt * Un nouveau point de restauration a été créé FILE :: c:\autorun.inf c:\docume~1\JOYETM~1\LOCALS~1\Temp\ddcYpnol.dll c:\docume~1\JOYETM~1\LOCALS~1\Temp\hgGyVNDS.dll c:\documents and settings\HP_Administrateur\Application Data\Microsoft\cfgmgr.vbs c:\documents and settings\HP_Administrateur\Application Data\Microsoft\spoolsv.exe C:\info.exe c:\windows\system32\BIT6.tmp c:\windows\system32\BIT8.tmp c:\windows\system32\cdfcli.dll c:\windows\system32\devoresi.dll c:\windows\system32\efahiweb.ini c:\windows\system32\efelagiv.ini c:\windows\system32\kegovahe.dll c:\windows\system32\ojeninal.ini c:\windows\system32\owharagk.dll c:\windows\system32\pamepusu.dll c:\windows\system32\uvikutas.ini D:\autorun.inf D:\Info.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\third lies itch ford c:\documents and settings\HP_Administrateur\Application Data\Microsoft\cfgmgr.vbs c:\documents and settings\HP_Administrateur\Application Data\WAYMULTITYPE c:\documents and settings\HP_Administrateur\Application Data\WAYMULTITYPE\Anti bold does long.exe c:\documents and settings\HP_Administrateur\Application Data\WAYMULTITYPE\krgpzgyu.exe c:\documents and settings\HP_Administrateur\Application Data\WAYMULTITYPE\oxixuval.exe c:\program files\Circle Developement c:\windows\system32\BIT6.tmp c:\windows\system32\BIT8.tmp c:\windows\system32\devoresi.dll c:\windows\system32\efahiweb.ini c:\windows\system32\efelagiv.ini c:\windows\system32\gprsvqeq.ini c:\windows\system32\kegovahe.dll c:\windows\system32\kgarahwo.ini c:\windows\system32\kvtkgdva.ini c:\windows\system32\kwcvlexw.ini c:\windows\system32\ojeninal.ini c:\windows\system32\pgbhxpnu.ini c:\windows\system32\uvikutas.ini D:\Info.exe . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-06 au 2009-01-06 )))))))))))))))))))))))))))))))))))) . 2009-01-04 19:33 . 2009-01-04 19:33 96,976 --a------ c:\windows\system32\drivers\klin.dat 2009-01-04 19:33 . 2009-01-04 19:33 87,855 --a------ c:\windows\system32\drivers\klick.dat 2009-01-04 19:32 . 2009-01-04 19:32 <REP> d-------- c:\program files\Kaspersky Lab 2009-01-04 19:32 . 2009-01-06 07:27 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-01-04 19:32 . 2009-01-06 07:24 8,580,128 --ahs---- c:\windows\system32\drivers\fidbox.dat 2009-01-04 19:32 . 2009-01-06 07:24 925,728 --ahs---- c:\windows\system32\drivers\fidbox2.dat 2009-01-04 19:32 . 2009-01-06 07:24 68,112 --ahs---- c:\windows\system32\drivers\fidbox.idx 2009-01-04 19:32 . 2009-01-06 07:24 4,244 --ahs---- c:\windows\system32\drivers\fidbox2.idx 2009-01-04 19:18 . 2009-01-04 19:18 <REP> d-------- c:\documents and settings\Joy et Mam\Application Data\QUAD Backups 2009-01-04 19:17 . 2009-01-04 19:17 <REP> d-------- c:\program files\QUAD Utilities 2008-12-31 00:07 . 2008-12-31 00:07 <REP> d-------- c:\documents and settings\All Users\Application Data\Skype 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\system32\fr 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\system32\bits 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\l2schemas 2008-12-30 23:27 . 2008-12-30 23:31 <REP> d-------- c:\windows\ServicePackFiles 2008-12-30 23:04 . 2008-12-30 23:03 410,984 --a------ c:\windows\system32\deploytk.dll 2008-12-29 10:52 . 2008-12-29 10:52 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\dvdcss 2008-12-21 11:23 . 2008-12-21 13:45 <REP> d-------- c:\documents and settings\Joy et Mam\Application Data\Zylom 2008-12-20 20:46 . 2008-12-20 22:59 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\Zylom 2008-12-09 07:26 . 2008-12-30 23:57 <REP> d-------- c:\program files\WowCartographe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-06 06:28 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Vidalia 2009-01-06 06:28 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\tor 2009-01-06 06:26 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-05 19:20 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater 2009-01-05 07:03 --------- d-----w c:\documents and settings\Joy et Mam\Application Data\OpenOffice.org2 2009-01-04 18:31 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-01-03 15:09 --------- d-----w c:\program files\Windows Live Safety Center 2009-01-02 16:15 --------- d-----w c:\program files\Dofus 2008-12-30 22:03 --------- d-----w c:\program files\Java 2008-12-21 12:45 --------- d-----w c:\program files\Zylom Games 2008-12-17 19:51 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\LimeWire 2008-12-12 21:33 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-12-04 17:57 --------- d-----w c:\program files\Fichiers communs\Blizzard Entertainment 2008-11-18 19:06 --------- d-----w c:\documents and settings\Joy et Mam\Application Data\Sierra 2008-11-18 11:57 --------- d-----w c:\program files\GameSpy Arcade 2008-11-18 11:54 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Sierra 2008-11-18 11:27 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-11 18:58 25,601 ----a-w c:\windows\system32\drivers\klopp.dat 2007-06-04 14:37 0 ----a-w c:\documents and settings\HP_Administrateur\Application Data\wklnhst.dat 2007-06-04 10:11 0 ----a-w c:\documents and settings\Joy et Mam\Application Data\wklnhst.dat 2007-05-18 11:10 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe 2007-05-14 11:08 4,090 ----a-w c:\documents and settings\Veronique\Application Data\wklnhst.dat 2007-03-31 17:30 22 --sha-w c:\windows\SMINST\HPCD.sys . ((((((((((((((((((((((((((((( snapshot@2009-01-05_18.29.29.54 ))))))))))))))))))))))))))))))))))))))))) . - 2009-01-05 17:25:30 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2009-01-06 06:26:05 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2009-01-05 17:25:30 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2009-01-06 06:26:05 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat - 2009-01-05 17:25:30 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-06 06:26:05 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-06 06:27:34 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_2e0.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "Vidalia"="c:\program files\Vidalia Bundle\Vidalia\vidalia.exe" [2007-11-22 12889088] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-30 136600] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048] "CAPON"="c:\windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE" [2001-02-14 22528] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-11-11 206088] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ hp psc 2000 Series.lnk - c:\program files\HP\Digital Imaging\bin\hpobnz08.exe [2003-04-09 323646] hpoddt01.exe.lnk - c:\program files\HP\Digital Imaging\bin\hpotdd01.exe [2003-04-09 28672] Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-01-20 65588] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "MaxRecentDocs"= 0 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"=hex(2):58,50,69,7a,65,5f,4c,6f,67,6f,6e,2e,65,78,65,00 [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AOL 9.0 Icône AOL.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\AOL 9.0 Icône AOL.lnk backup=c:\windows\pss\AOL 9.0 Icône AOL.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Canon LBP-810 Status Window.LNK] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Canon LBP-810 Status Window.LNK backup=c:\windows\pss\Canon LBP-810 Status Window.LNKCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Fenêtre d'état Canon LBP-810.LNK] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Fenêtre d'état Canon LBP-810.LNK backup=c:\windows\pss\Fenêtre d'état Canon LBP-810.LNKCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^KODAK Software Updater.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\KODAK Software Updater.lnk backup=c:\windows\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logiciel Kodak EasyShare.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logiciel Kodak EasyShare.lnk backup=c:\windows\pss\Logiciel Kodak EasyShare.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Outil de mise à jour Google.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk backup=c:\windows\pss\Outil de mise à jour Google.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Privoxy.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Privoxy.lnk backup=c:\windows\pss\Privoxy.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^HP_Administrateur^Menu Démarrer^Programmes^Démarrage^hamachi.lnk] path=c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\Démarrage\hamachi.lnk backup=c:\windows\pss\hamachi.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^HP_Administrateur^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.0.lnk] path=c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.0.lnk backup=c:\windows\pss\OpenOffice.org 2.0.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet] --a------ 2007-11-07 16:06 1881400 c:\program files\BitComet\BitComet.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2007-06-18 15:10 271360 c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray] --a------ 2007-11-19 20:37 26112 c:\program files\Real\RealPlayer\realplay.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-04-04 15:40 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "Apple Mobile Device"=2 (0x2) "AOL ACS"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\AOL 9.0\\waol.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\StubInstaller.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Sierra\\Empire Earth\\Empire Earth.exe"= "c:\\Sierra\\Empire Earth - The Art of Conquest\\EE-AOC.exe"= "c:\\Program Files\\AOL 9.0e\\waol.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\1179916063\\ee\\aolsoftware.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"= "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Vidalia Bundle\\Tor\\tor.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\SEGA\\Iron Man\\IronMan.exe"= "c:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"= "c:\\UT2004\\System\\UT2004.exe"= "c:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\fpupdate.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\GameSpy Arcade\\Aphex.exe"= "c:\\Documents and Settings\\HP_Administrateur\\Bureau\\Empire Earth II\\EE2.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 "13432:TCP"= 13432:TCP:BitComet 13432 TCP "13432:UDP"= 13432:UDP:BitComet 13432 UDP R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-04-30 24592] R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [2008-01-14 21632] R4 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\Fichiers communs\BinarySense\hldasvc.exe [2007-08-09 816376] R4 RapidPort;RapidPort;c:\windows\system32\drivers\CAPLPTN.SYS [2007-06-14 22912] . Contenu du dossier 'Tâches planifiées' 2008-12-20 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57] 2009-01-03 c:\windows\Tasks\EasyShare Registration Task.job - c:\windows\system32\rundll32.exe [2008-04-14 03:34] 2008-12-20 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1222252533.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 16:56] 2008-12-29 c:\windows\Tasks\FRU Task $ContextID$.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 16:56] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.iesearch.com/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=PAVILION&pf=desktop uInternet Settings,ProxyOverride = *.local IE: &D&ownload &with BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm IE: &D&ownload all video with BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm IE: &D&ownload all with BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx IE: Ajouter à Kaspersky Anti-Bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\gopqn62o.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1460988&SearchSource=3&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/ FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&tbid=66005&qkw= FF - component: c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\gopqn62o.default\extensions\{34ea1c70-42cc-42c5-aa29-ec58b95a343e}\components\FFAlert.dll FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.1.0.30716.0.dll FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll FF - plugin: c:\program files\Yahoo!\Common\npyaxmpb.dll ATTENTION: FIREFOX POLICES IS IN FORCE FF - user.js: yahoo.homepage.dontask - true. ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-06 07:26:42 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(1108) c:\windows\system32\Ati2evxx.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Fichiers communs\AOL\ACS\AOLacsd.exe c:\windows\arservice.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\ehome\ehrecvr.exe c:\windows\ehome\ehSched.exe c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Fichiers communs\LightScribe\LSSrvc.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\CAPRPCSK.EXE c:\program files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe c:\windows\wanmpsvc.exe c:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE c:\program files\RealVNC\VNC4\winvnc4.exe c:\windows\system32\ati2evxx.exe c:\windows\ehome\mcrdsvc.exe c:\windows\system32\dllhost.exe c:\program files\BinarySense\HDDlife 3\HDDlifePro.exe c:\program files\BinarySense\HDDlife 3\HDDlifePro.exe c:\program files\iPod\bin\iPodService.exe c:\program files\Vidalia Bundle\Tor\tor.exe . ************************************************************************** . Heure de fin: 2009-01-06 7:31:03 - La machine a redémarré ComboFix-quarantined-files.txt 2009-01-06 06:30:54 ComboFix2.txt 2009-01-05 17:30:28 Avant-CF: 228 314 611 712 octets libres Après-CF: 228,217,856,000 octets libres 314 --- E O F --- 2008-12-31 16:09:59 PUIS Malwarebytes' Anti-Malware 1.32 Version de la base de données: 1623 Windows 5.1.2600 Service Pack 3 06/01/2009 20:45:58 mbam-log-2009-01-06 (20-45-58).txt Type de recherche: Examen complet (C:\|D:\|E:\|) Eléments examinés: 316489 Temps écoulé: 2 hour(s), 7 minute(s), 39 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Program Files\eoRezo (Rogue.Eorezo) -> Delete on reboot.

donc voila, j'ai fait ce qu'il y avait a faire et voici le rapport ComboFix 09-01-05.02 - HP_Administrateur 2009-01-05 18:06:18.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.959.316 [GMT 1:00] Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . Les fichiers ci-dessous ont été désactivés pendant l'exécution: c:\windows\system32\pamepusu.dll ADS - system32: deleted 1117148 bytes in 1 streams. (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat c:\documents and settings\Joy\Application Data\HbTools c:\documents and settings\Joy\Application Data\HbTools\HbTools.log c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\1.sdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\1383771.sdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\3783087.sdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\domains.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\1000052701 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\1000081378 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\162760 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\20570 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\25469 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\26664 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\30854 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\34237 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\403305 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\41499 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\44228 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\56815 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\64737 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\66836 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\745086 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\82292 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\TooltipXML\9974 c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\dynamic\ustat\350a.dat c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\ads.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\btntrans.idx c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\btntrans1.dat c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\business_promo.htm c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\buttondir.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\components.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_1000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_2000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_3000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bar.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_logos.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_buttons_other.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\d_icons_weather.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\default.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_511745-514279.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz1.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz10.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz11.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz12.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz13.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz14.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz15.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz16.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz17.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz18.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz19.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz2.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz20.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz3.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz4.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz5.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz6.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz7.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz8.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_bidz9.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_categorize.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_comparison.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_explorer-Mails.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_explorer-people.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_favorites.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_Games.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_Hide.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_hotbarcom.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_Hotmail.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_hsskin.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_jemster.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_jemsterie.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_jemsteruk.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_jobsearch.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_Mails.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_new.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_premium.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_reun.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_ringtones.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_SearchBoxTrapper.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_searchfor.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_searchgo.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_weather.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Default_yellowpages.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\email-def-511724-548964.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\email-def-511724-9595.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\email-t1-bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\hotbar-premium.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\hotbar_promo.htm c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\icons2.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\keywords.idx c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\keywords1.dat c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\layout.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\linkpathlegal.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\progress.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\s_icons_buttons.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\sales_buttons.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\t2_bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\theweb.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\top7.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\Top7_theweb.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\1\tsd_bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\ads.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\btntrans.idx c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\btntrans1.dat c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\business_promo.htm c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\buttondir.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\components.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\d_icons_weather.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\default.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_511745-514279.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz1.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz10.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz11.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz12.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz13.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz14.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz15.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz16.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz17.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz18.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz19.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz2.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz20.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz3.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz4.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz5.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz6.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz7.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz8.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_bidz9.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_categorize.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_comparison.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_explorer-Mails.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_explorer-people.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_favorites.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_Games.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_Hide.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_Hotmail.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_hsskin.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemster.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemsterie.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_jemsteruk.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_jobsearch.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_new.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_premium.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_reun.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_ringtones.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_SearchBoxTrapper.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_searchfor.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_searchgo.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_weather.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Default_yellowpages.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\email-t1-bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\icons2.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\keywords.idx c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\keywords1.dat c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\layout.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\progress.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\sales_buttons.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\t2_bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\theweb.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\top7.cdf c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\Top7_theweb.mnu c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\2\tsd_bg.res c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\ads.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans1.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\business_promo.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\buttondir.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\d_icons_weather.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\default.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\email-t1-bg.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\hotbar-premium.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\hotbar_promo.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\icons2.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\keywords.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\keywords1.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\layout.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\linkpathlegal.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\progress.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\sales_buttons.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\samplegroups2.txt c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\samplegroups2.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\t2_bg.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\top7.xip c:\documents and settings\Joy\Application Data\HbTools\v3.0\HbTools\static\DownLoad\tsd_bg.xip c:\documents and settings\Joy\Application Data\HbTools_Icons c:\documents and settings\Joy\Application Data\HbTools_Icons\games2.ico c:\documents and settings\Joy\Application Data\HbTools_Icons\wallpapere1.ico c:\documents and settings\Joy\Bureau\Free PC Wallpapers.lnk c:\documents and settings\Veronique\Application Data\MessengerSkinner c:\documents and settings\Veronique\Menu D‚marrer\Programmes\MessengerSkinner c:\documents and settings\Veronique\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk c:\documents and settings\Veronique\Menu Démarrer\Programmes\MessengerSkinner\Website.lnk c:\windows\system32\jogopamo.dll c:\windows\system32\lelutayo.dll c:\windows\system32\Microsoft\backup.ftp c:\windows\system32\Microsoft\backup.tftp c:\windows\system32\pamepusu.dll.vir c:\windows\system32\satukivu.dll c:\windows\system32\tawagifi.dll c:\windows\system32\wotologa.dll c:\windows\system32\yigejiyu.dll D:\Autorun.inf ----- BITS: Il y a peut-être des sites infectés ----- hxxp://77.74.48.105 . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-05 au 2009-01-05 )))))))))))))))))))))))))))))))))))) . 2009-01-05 07:52 . 2009-01-05 07:52 2,652 --ahs---- c:\windows\system32\devoresi.dll 2009-01-05 07:52 . 2009-01-05 07:52 2,649 --ahs---- c:\windows\system32\kegovahe.dll 2009-01-05 07:52 . 2009-01-05 07:52 0 --ah----- c:\windows\system32\BIT8.tmp 2009-01-05 07:52 . 2009-01-05 07:52 0 --ah----- c:\windows\system32\BIT6.tmp 2009-01-04 19:33 . 2009-01-04 19:33 96,976 --a------ c:\windows\system32\drivers\klin.dat 2009-01-04 19:33 . 2009-01-04 19:33 87,855 --a------ c:\windows\system32\drivers\klick.dat 2009-01-04 19:32 . 2009-01-04 19:32 <REP> d-------- c:\program files\Kaspersky Lab 2009-01-04 19:32 . 2009-01-05 18:26 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-01-04 19:32 . 2009-01-05 18:24 8,580,128 --ahs---- c:\windows\system32\drivers\fidbox.dat 2009-01-04 19:32 . 2009-01-05 18:24 860,192 --ahs---- c:\windows\system32\drivers\fidbox2.dat 2009-01-04 19:32 . 2009-01-05 18:24 68,112 --ahs---- c:\windows\system32\drivers\fidbox.idx 2009-01-04 19:32 . 2009-01-05 18:24 4,020 --ahs---- c:\windows\system32\drivers\fidbox2.idx 2009-01-04 19:18 . 2009-01-04 19:18 <REP> d-------- c:\documents and settings\Joy et Mam\Application Data\QUAD Backups 2009-01-04 19:17 . 2009-01-04 19:17 <REP> d-------- c:\program files\QUAD Utilities 2009-01-04 11:05 . 2009-01-04 11:05 1,294,028 --ahs---- c:\windows\system32\uvikutas.ini 2009-01-03 22:28 . 2009-01-03 22:28 1,294,028 --ahs---- c:\windows\system32\ojeninal.ini 2009-01-03 10:28 . 2009-01-03 13:22 1,294,046 --ahs---- c:\windows\system32\efahiweb.ini 2009-01-02 18:30 . 2009-01-03 02:32 1,294,109 --ahs---- c:\windows\system32\efelagiv.ini 2008-12-31 00:07 . 2008-12-31 00:07 <REP> d-------- c:\documents and settings\All Users\Application Data\Skype 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\system32\fr 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\system32\bits 2008-12-30 23:31 . 2008-12-30 23:31 <REP> d-------- c:\windows\l2schemas 2008-12-30 23:27 . 2008-12-30 23:31 <REP> d-------- c:\windows\ServicePackFiles 2008-12-30 23:04 . 2008-12-30 23:03 410,984 --a------ c:\windows\system32\deploytk.dll 2008-12-29 10:52 . 2008-12-29 10:52 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\dvdcss 2008-12-21 11:23 . 2008-12-21 13:45 <REP> d-------- c:\documents and settings\Joy et Mam\Application Data\Zylom 2008-12-20 20:46 . 2008-12-20 22:59 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\Zylom 2008-12-09 07:26 . 2008-12-30 23:57 <REP> d-------- c:\program files\WowCartographe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-05 17:27 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Vidalia 2009-01-05 17:27 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\tor 2009-01-05 17:25 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-01-05 07:03 --------- d-----w c:\documents and settings\Joy et Mam\Application Data\OpenOffice.org2 2009-01-04 22:23 --------- d-----w c:\program files\Circle Developement 2009-01-04 19:14 --------- d-----w c:\documents and settings\All Users\Application Data\third lies itch ford 2009-01-04 18:31 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-01-04 18:20 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater 2009-01-03 15:09 --------- d-----w c:\program files\Windows Live Safety Center 2009-01-02 16:15 --------- d-----w c:\program files\Dofus 2008-12-31 12:57 1,835,008 ---ha-w c:\documents and settings\Invité\NTUSER.DAT 2008-12-30 22:03 --------- d-----w c:\program files\Java 2008-12-21 12:45 --------- d-----w c:\program files\Zylom Games 2008-12-17 19:51 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\LimeWire 2008-12-12 21:33 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-12-04 17:57 --------- d-----w c:\program files\Fichiers communs\Blizzard Entertainment 2008-11-18 19:06 --------- d-----w c:\documents and settings\Joy et Mam\Application Data\Sierra 2008-11-18 11:57 --------- d-----w c:\program files\GameSpy Arcade 2008-11-18 11:54 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\Sierra 2008-11-18 11:27 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-11 18:58 25,601 ----a-w c:\windows\system32\drivers\klopp.dat 2007-06-04 14:37 0 ----a-w c:\documents and settings\HP_Administrateur\Application Data\wklnhst.dat 2007-06-04 10:11 0 ----a-w c:\documents and settings\Joy et Mam\Application Data\wklnhst.dat 2007-05-18 11:10 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe 2007-05-14 11:08 4,090 ----a-w c:\documents and settings\Veronique\Application Data\wklnhst.dat 2007-03-31 17:30 22 --sha-w c:\windows\SMINST\HPCD.sys . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "Vidalia"="c:\program files\Vidalia Bundle\Vidalia\vidalia.exe" [2007-11-22 12889088] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-30 136600] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048] "CAPON"="c:\windows\system32\Spool\Drivers\w32x86\3\CAPONN.EXE" [2001-02-14 22528] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-11-11 206088] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] c:\documents and settings\Yumiii\Menu D‚marrer\Programmes\D‚marrage\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-10-26 27136] PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-10-26 27136] c:\documents and settings\Invit‚\Menu D‚marrer\Programmes\D‚marrage\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-10-26 27136] PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-10-26 27136] c:\documents and settings\Joy\Menu D‚marrer\Programmes\D‚marrage\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-10-26 27136] PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-10-26 27136] c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\ HDDlife.lnk - c:\program files\BinarySense\HDDlife 3\HDDlifePro.exe [2007-08-09 2422008] c:\documents and settings\Joy et Mam\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.0.lnk - c:\program files\OpenOffice.org 2.0\program\quickstart.exe [2006-01-25 61440] Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-10-26 27136] PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-10-26 27136] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "MaxRecentDocs"= 0 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"=hex(2):58,50,69,7a,65,5f,4c,6f,67,6f,6e,2e,65,78,65,00 [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AOL 9.0 Icône AOL.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\AOL 9.0 Icône AOL.lnk backup=c:\windows\pss\AOL 9.0 Icône AOL.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Canon LBP-810 Status Window.LNK] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Canon LBP-810 Status Window.LNK backup=c:\windows\pss\Canon LBP-810 Status Window.LNKCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Fenêtre d'état Canon LBP-810.LNK] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Fenêtre d'état Canon LBP-810.LNK backup=c:\windows\pss\Fenêtre d'état Canon LBP-810.LNKCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^KODAK Software Updater.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\KODAK Software Updater.lnk backup=c:\windows\pss\KODAK Software Updater.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logiciel Kodak EasyShare.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logiciel Kodak EasyShare.lnk backup=c:\windows\pss\Logiciel Kodak EasyShare.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Outil de mise à jour Google.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk backup=c:\windows\pss\Outil de mise à jour Google.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Privoxy.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Privoxy.lnk backup=c:\windows\pss\Privoxy.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^HP_Administrateur^Menu Démarrer^Programmes^Démarrage^hamachi.lnk] path=c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\Démarrage\hamachi.lnk backup=c:\windows\pss\hamachi.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^HP_Administrateur^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.0.lnk] path=c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.0.lnk backup=c:\windows\pss\OpenOffice.org 2.0.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet] --a------ 2007-11-07 16:06 1881400 c:\program files\BitComet\BitComet.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2007-06-18 15:10 271360 c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray] --a------ 2007-11-19 20:37 26112 c:\program files\Real\RealPlayer\realplay.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-04-04 15:40 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "Apple Mobile Device"=2 (0x2) "AOL ACS"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\AOL 9.0\\waol.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\StubInstaller.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Sierra\\Empire Earth\\Empire Earth.exe"= "c:\\Sierra\\Empire Earth - The Art of Conquest\\EE-AOC.exe"= "c:\\Program Files\\AOL 9.0e\\waol.exe"= "c:\\Program Files\\Fichiers communs\\AOL\\1179916063\\ee\\aolsoftware.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"= "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"= "c:\\Program Files\\BitComet\\BitComet.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\Program Files\\Vidalia Bundle\\Tor\\tor.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\SEGA\\Iron Man\\IronMan.exe"= "c:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"= "c:\\UT2004\\System\\UT2004.exe"= "c:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\fpupdate.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\GameSpy Arcade\\Aphex.exe"= "c:\\Documents and Settings\\HP_Administrateur\\Bureau\\Empire Earth II\\EE2.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 "13432:TCP"= 13432:TCP:BitComet 13432 TCP "13432:UDP"= 13432:UDP:BitComet 13432 UDP R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-04-30 24592] R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [2008-01-14 21632] R4 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\Fichiers communs\BinarySense\hldasvc.exe [2007-08-09 816376] R4 RapidPort;RapidPort;c:\windows\system32\drivers\CAPLPTN.SYS [2007-06-14 22912] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D] \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480 [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{21DB17A7-9EB9-0768-D9C5-22A71AD280F1}] c:\windows\system32:svchost.exe [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6778F1EE-80BB-4F27-BC69-F91B843782CD}] c:\documents and settings\HP_Administrateur\Application Data\Microsoft\cfgmgr.vbs . Contenu du dossier 'Tâches planifiées' 2008-12-20 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57] 2009-01-03 c:\windows\Tasks\EasyShare Registration Task.job - c:\windows\system32\rundll32.exe [2008-04-14 03:34] 2008-12-20 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1222252533.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 16:56] 2008-12-29 c:\windows\Tasks\FRU Task $ContextID$.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 16:56] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{7e235d19-c2bf-404f-9448-036719e47191} - c:\windows\system32\wotologa.dll HKCU-Run-Soap Title - c:\docume~1\HP_ADM~1\APPLIC~1\WAYMULTITYPE\ByteThe4.exe HKLM-Run-CPM53600f2e - c:\windows\system32\pamepusu.dll MSConfigStartUp-ManyCam - c:\program files\ManyCam 2.1\ManyCam.exe . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.iesearch.com/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=64&bd=PAVILION&pf=desktop uInternet Settings,ProxyOverride = *.local IE: &D&ownload &with BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm IE: &D&ownload all video with BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm IE: &D&ownload all with BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx IE: Ajouter à Kaspersky Anti-Bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\gopqn62o.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1460988&SearchSource=3&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/ FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&tbid=66005&qkw= FF - component: c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\gopqn62o.default\extensions\{34ea1c70-42cc-42c5-aa29-ec58b95a343e}\components\FFAlert.dll FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.1.0.30716.0.dll FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll FF - plugin: c:\program files\Yahoo!\Common\npyaxmpb.dll ATTENTION: FIREFOX POLICES IS IN FORCE FF - user.js: yahoo.homepage.dontask - true. ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-05 18:26:09 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(1100) c:\windows\system32\Ati2evxx.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Fichiers communs\AOL\ACS\AOLacsd.exe c:\windows\arservice.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\ehome\ehrecvr.exe c:\windows\ehome\ehSched.exe c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Fichiers communs\LightScribe\LSSrvc.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\CAPRPCSK.EXE c:\program files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe c:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE c:\windows\wanmpsvc.exe c:\windows\system32\ati2evxx.exe c:\program files\RealVNC\VNC4\winvnc4.exe c:\windows\ehome\mcrdsvc.exe c:\windows\system32\dllhost.exe c:\program files\HP\Digital Imaging\bin\hpobnz08.exe c:\program files\HP\Digital Imaging\bin\hpotdd01.exe c:\program files\iPod\bin\iPodService.exe . ************************************************************************** . Heure de fin: 2009-01-05 18:30:25 - La machine a redémarré ComboFix-quarantined-files.txt 2009-01-05 17:30:20 Avant-CF: 226ÿ015ÿ895ÿ552 octets libres AprÞs-CF: 228,160,110,592 octets libres 538 --- E O F --- 2008-12-31 16:09:59

bonjour a tous... bonne année aussi ^^... je voulais vous demander de depanner mon PC (deja dans le passé vous l'avez fait, et c'etais du boulot de pro...magnifique merci encore) grace au rapport HighJackThis ci-dessous. Je vous remercie par avance et je vous souhaite bon courage et bonne continuation. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:05:30, on 05/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\arservice.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\CAPRPCSK.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\Vidalia Bundle\Tor\tor.exe C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.a...&tbid=66005 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.iesearch.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66005 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66005 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7e235d19-c2bf-404f-9448-036719e47191} - C:\WINDOWS\system32\wotologa.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [CPM53600f2e] Rundll32.exe "c:\windows\system32\pamepusu.dll",a O4 - HKLM\..\Run: [revihonole] Rundll32.exe "C:\WINDOWS\system32\tawagifi.dll",s O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Vidalia] "C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe" O4 - HKCU\..\Run: [soap Title] C:\DOCUME~1\HP_ADM~1\APPLIC~1\WAYMULTITYPE\ByteThe4.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [ManyCam] "C:\Program Files\ManyCam 2.2\ManyCam.exe" (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [MSServer] rundll32.exe C:\DOCUME~1\JOYETM~1\LOCALS~1\Temp\ddcYpnol.dll,#1 (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [cmds] rundll32.exe C:\DOCUME~1\JOYETM~1\LOCALS~1\Temp\hgGyVNDS.dll,c (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [50533cb2] rundll32.exe "C:\WINDOWS\system32\owharagk.dll",b (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [MS Juan] rundll32 "C:\WINDOWS\system32\cdfcli.dll",run (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [QUAD Scheduler] C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe (User 'Joy et Mam') O4 - HKUS\S-1-5-21-427002223-2362907279-2251899480-1008\..\Run: [QUAD Windows service] C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h (User 'Joy et Mam') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'Joy et Mam') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Joy et Mam') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Joy et Mam') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 User Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'Joy et Mam') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Joy et Mam') O4 - S-1-5-21-427002223-2362907279-2251899480-1008 User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Joy et Mam') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\HP\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O20 - AppInit_DLLs: c:\windows\system32\lelutayo.dll c:\progra~1\kaspersky lab\kaspersky internet security 2009\mzvkbd.dll,c:\progra~1\kaspersky lab\kaspersky internet security 2009\mzvkbd3.dll,c:\progra~1\kaspersky lab\kaspersky internet security 2009\adialhk.dll,c:\progra~1\kaspersky lab\kaspersky internet security 2009\kloehk.dll c:\windows\system32\pamepusu.dll O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\pamepusu.dll (file missing) O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\pamepusu.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe -- End of file - 15366 bytes

franchement... bien joué, j'ai plus de probs mon PC a augmenté de vitesses, les jeux ne bugs plus, il y a moins de memoire utilisé au demarrage enon la total quoi quoi demande mieu le peuple? merci C vraiment sympa de votre pars

Salut Styx j'ai bien effectué le nettoyage et voici le rapport: Clean Navipromo version 3.4.5 commencé le 15/02/2008 à 16:31:17,07 Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 11.02.2008 à 20h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Mode suppression automatique avec prise en charge résultats Catchme et GNS *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans C:\WINDOWS\System32 * * Suppression dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" * *** Suppression dossiers dans C:\WINDOWS *** *** Suppression dossiers dans C:\Program Files *** *** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 *** *** Suppression dossiers dans "C:\Documents and Settings\HP_Administrateur\applic~1" *** *** Suppression dossiers dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" *** *** Suppression dossiers dans "C:\Documents and Settings\HP_Administrateur\MENUDM~1\PROGRA~1" *** *** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 *** *** Suppression fichiers *** C:\WINDOWS\Downloaded Program Files\IaLdr32.inf supprimé ! C:\WINDOWS\pack.epk supprimé ! C:\WINDOWS\tmlpcert2007 supprimé ! *** Suppression fichiers temporaires *** Nettoyage contenu C:\WINDOWS\Temp effectué ! Nettoyage contenu C:\Documents and Settings\HP_Administrateur\locals~1\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans C:\WINDOWS\system32 * * Dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" * *** Sauvegarde du Registre vers dossier Backupnavi *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup absent ! *** Nettoyage terminé le 15/02/2008 à 16:35:17,62 *** cependant j'ai trouvé aucun fichier que tu m'a dit de supprimer dans tout les onglet de "option internet" encore merci

je te remercie pour ta réponse aussi rapide ^^ je me met au travail tout de suite!

bonsoir, j'ai remarqué que ce forum et ce site sont très très bien et sont géré par des personnes competante toujours a notre écoute donc je profite de ce que vous êtes a l'écoute pour vous demander commet peut ont créer des logiciel ??? je connais un peut l'algorithme (faudrait que je m'y remette) c tout bien sur ceci est un objectif que je veut atteindre mais je pense que il faut commencer par le début ^^ donc la programmation est ce que vous pouvez m'informer sur la programmation et sur la création de logiciel je vous remercie

bonsoir voici l'analyse que tu m'a demander de faire ^^ Search Navipromo version 3.4.5 commencé le 13/02/2008 à 20:46:32,28 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 11.02.2008 à 20h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Executé en mode normal *** Recherche Programmes installés *** *** Recherche dossiers dans C:\WINDOWS *** *** Recherche dossiers dans C:\Program Files *** *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 *** *** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\HP_Administrateur\MENUDM~1\PROGRA~1" *** *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net Aucun Fichier trouvé *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans C:\WINDOWS\system32 * * Recherche dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" * *** Recherche fichiers *** C:\WINDOWS\Downloaded Program Files\IaLdr32.inf trouvé ! C:\WINDOWS\pack.epk trouvé ! C:\WINDOWS\tmlpcert2007 trouvé ! *** Recherche clés spécifiques dans le Registre *** *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans C:\WINDOWS\system32 : * Dans "C:\Documents and Settings\HP_Administrateur\locals~1\applic~1" : 3)Recherche Certificats : Certificat Egroup absent ! 4)Recherche fichiers connus : *** Analyse terminée le 13/02/2008 à 20:55:51,92 ***

bonjour! j'ai bien fait les modification en mode sans echec j'ai fait un rapport de ce qui s'est passé voici: désinstalation de programme Advert introuvable dans ajout/suppression de prog. Dossier present et vide dans Programme Files BitDownload introuvable dans ajout/suppression de programme.Dossier present mais Ficher "Uninstall" introuvable dans le dossier dans Programme Files eoRezo introuvable dans ajout/suppression de programme. Dossier present mais Fichier "Uninstall" introuvable dans le dossier eoRezo dans Programme Files MessengerSkiner introuvable dans ajout/suppression de programmes. Dossier present mais Fichier "Uninstall" introuvable dans le dossier Messenger Skinner dans Programme Files supression de dossier Dossier Averts dans Programmes Files: supprimé Dossier BitDownload dans Programme Files: supprimé Dossier eoRezo dans Programme Files: "impossible de supprimer eoRezo: Accès refusé Vérifez que le disque n'est pas plein ou protégé en ecriture et que le fichier n'est pas utilisé actuelement" Dossier MessengerSkinner dans Programme Files: supprimé Dossier bold bias license aim dans C:\Documents and Settings\All Users\Application Data: supprimé Dossier third lies itch ford dans C:\Documents and Settings\All Users\Application Data: supprimé Dossier MessengerSkinner dans C:\Documents and Settings\Vero\Application Data: impossible de le supprimer, aucune reaction Dossier eoRezo dans C:\Documents and Settings\shell and john\Application Data: supprimé Dossier Zango dans C:\Documents and Settings\shell and john\Application Data: supprimé Dossier eoRezo dans C:\Documents and Settings\HP_Administrateur\Application Data: supprimé Dossier WAYMULTITYPE dans C:\Documents and Settings\HP_Administrateur\Application Data: supprimé Puis voici le rapport HighJackThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 01:19:08, on 12/02/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\arservice.exe C:\WINDOWS\eHome\ehRecvr.exe C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\AOL 9.0e\aoltray.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\WINDOWS\system32\CAPRPCSK.EXE C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINDOWS\System32\svchost.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe c:\windows\system\hpsysdrv.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" /tray O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0e\aoltray.exe O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\FXSAPI.DLL O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe -- End of file - 8390 bytes en vous remerciant encore une fois parce que pfiouu

bonsoir voici le rapport de lopxpMH2 Rapport lopxpMH2 version 2.0 fait à 20:42:17,96 le 11/02/2008 C:\Documents and Settings\HP_Administrateur\Bureau\lopxpMH2 ****************************************** ## Répertoires Application Data Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Administrateur\Application Data 26/10/2006 18:42 <REP> . 26/10/2006 18:42 <REP> .. 15/11/2005 03:22 <REP> Identities 15/11/2005 03:22 <REP> Microsoft 26/10/2006 15:13 <REP> Real 10/10/2005 14:24 62 desktop.ini 1 fichier(s) 62 octets 5 Rép(s) 293 135 577 088 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data 15/11/2005 03:22 <REP> . 15/11/2005 03:22 <REP> .. 26/10/2006 14:49 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 26/10/2006 14:41 <REP> ApplicationHistory 15/11/2005 03:22 <REP> Microsoft 26/10/2006 14:41 137 fusioncache.dat 1 fichier(s) 137 octets 5 Rép(s) 293 135 572 992 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\All Users\Application Data 26/10/2006 18:42 <REP> . 26/10/2006 18:42 <REP> .. 26/10/2006 15:21 <REP> Adobe 10/05/2007 07:31 <REP> Age of Empires 3 08/01/2007 10:18 <REP> AOL 24/02/2007 18:15 <REP> AOL Downloads 19/04/2007 17:42 <REP> Apple Computer 10/02/2008 22:07 <REP> Avira 23/02/2007 13:52 <REP> bold bias license aim 06/02/2007 13:41 <REP> Google 10/02/2008 21:06 <REP> Google Updater 26/10/2006 15:49 <REP> Hewlett-Packard 26/10/2006 15:14 <REP> InstallShield 14/01/2008 11:28 <REP> Kaspersky Lab Setup Files 09/11/2007 12:07 <REP> Kodak 08/01/2008 18:07 <REP> MailFrontier 16/06/2007 19:30 <REP> Messenger Plus! 15/11/2005 03:23 <REP> Microsoft 18/09/2007 19:51 <REP> NCH Swift Sound 01/03/2007 17:56 <REP> Otto 06/02/2007 13:22 <REP> QuickTime 26/10/2006 14:47 <REP> SBSI 26/10/2006 15:09 <REP> Sonic 01/03/2007 18:56 <REP> Spybot - Search & Destroy 26/10/2006 15:40 <REP> Symantec 06/11/2007 19:14 <REP> TEMP 16/12/2007 19:59 <REP> third lies itch ford 05/03/2007 19:56 <REP> VadeRetro 06/02/2007 13:22 <REP> Viewpoint 08/02/2007 16:17 <REP> Windows Genuine Advantage 21/05/2007 11:18 <REP> Windows Live Toolbar 04/02/2008 17:46 <REP> Zylom 10/02/2008 22:08 305 addr_file.html 10/10/2005 14:24 62 desktop.ini 26/10/2006 15:08 368 hpzinstall.log 07/05/2007 07:33 1 751 QTSBandwidthCache 4 fichier(s) 2 486 octets 32 Rép(s) 293 135 572 992 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Default User\Application Data 26/10/2006 18:43 <REP> . 26/10/2006 18:43 <REP> .. 15/11/2005 03:23 <REP> Identities 15/11/2005 03:23 <REP> Microsoft 02/01/2007 11:39 <REP> Real 10/10/2005 14:24 62 desktop.ini 1 fichier(s) 62 octets 5 Rép(s) 293 135 572 992 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 15/11/2005 03:23 <REP> . 15/11/2005 03:23 <REP> .. 02/01/2007 11:39 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 02/01/2007 11:39 <REP> ApplicationHistory 15/11/2005 03:23 <REP> Microsoft 02/01/2007 11:39 137 fusioncache.dat 1 fichier(s) 137 octets 5 Rép(s) 293 135 568 896 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\HP_Administrateur\Application Data 17/05/2007 18:36 <REP> . 17/05/2007 18:36 <REP> .. 21/05/2007 06:36 <REP> Adobe 05/06/2007 12:16 <REP> AdobeUM 20/05/2007 18:57 <REP> AOL 21/05/2007 11:43 <REP> Apple Computer 06/11/2007 19:14 <REP> BinarySense 08/06/2007 17:47 <REP> CyberLink 15/01/2008 00:46 <REP> Dev-Cpp 01/06/2007 17:07 <REP> EoRezo 10/06/2007 11:52 <REP> FlashGet 18/05/2007 10:37 <REP> Google 04/06/2007 15:58 <REP> Help 21/11/2007 18:51 <REP> HPQ 17/05/2007 18:36 <REP> Identities 01/06/2007 17:13 <REP> ItsLabel 14/06/2007 18:29 <REP> Lavasoft 21/05/2007 15:31 <REP> LimeWire 18/05/2007 10:23 <REP> Macromedia 17/11/2007 20:07 <REP> Media Player Classic 17/05/2007 18:36 <REP> Microsoft 18/05/2007 18:26 <REP> Mozilla 23/05/2007 13:55 <REP> MusicIP 18/09/2007 19:51 <REP> NCH Swift Sound 25/05/2007 16:11 <REP> OpenOffice.org2 17/05/2007 18:36 <REP> Real 16/06/2007 13:25 <REP> Screenshot Sender 04/02/2008 00:19 <REP> SopCast 21/05/2007 09:20 <REP> Sun 18/05/2007 18:27 <REP> Talkback 18/01/2008 21:28 <REP> teamspeak2 04/06/2007 15:37 <REP> Template 16/12/2007 19:58 <REP> WAYMULTITYPE 28/06/2007 11:04 <REP> XnView 20/05/2007 19:40 <REP> You've Got Pictures Screensaver 17/05/2007 18:36 62 desktop.ini 04/06/2007 15:37 0 wklnhst.dat 2 fichier(s) 62 octets 35 Rép(s) 293 135 568 896 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data 17/05/2007 18:36 <REP> . 17/05/2007 18:36 <REP> .. 17/05/2007 18:36 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 21/05/2007 06:36 <REP> Adobe 23/05/2007 11:29 <REP> AOL 21/05/2007 11:43 <REP> Apple Computer 17/05/2007 18:36 <REP> ApplicationHistory 08/06/2007 17:47 <REP> DVDPlay 07/12/2007 23:22 <REP> GameSpy 18/05/2007 10:37 <REP> Google 04/06/2007 15:58 <REP> Help 17/01/2008 23:29 <REP> HP 21/05/2007 08:51 <REP> Identities 17/11/2007 19:05 <REP> IM 10/11/2007 12:38 <REP> KodakGallery 17/05/2007 18:36 <REP> Microsoft 18/05/2007 18:26 <REP> Mozilla 23/05/2007 12:12 <REP> Stardock 23/05/2007 14:06 28 672 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 17/05/2007 18:36 140 fusioncache.dat 01/06/2007 17:38 63 200 GDIPFONTCACHEV1.DAT 18/11/2007 18:44 2 643 674 IconCache.db 4 fichier(s) 2 735 686 octets 18 Rép(s) 293 135 568 896 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Invité\Application Data 04/01/2007 20:16 <REP> . 04/01/2007 20:16 <REP> .. 08/01/2007 17:11 <REP> AOL 03/05/2007 19:03 <REP> FlashGet 25/03/2007 23:25 <REP> Google 06/03/2007 10:46 <REP> HbTools 04/01/2007 20:16 <REP> Identities 13/02/2007 15:50 <REP> Macromedia 04/01/2007 20:16 <REP> Microsoft 13/02/2007 15:52 <REP> Mozilla 08/01/2007 17:47 <REP> OpenOffice.org2 04/01/2007 20:16 <REP> Real 25/04/2007 15:58 <REP> SecuROM 26/03/2007 00:37 <REP> Sun 13/02/2007 15:53 <REP> Talkback 04/01/2007 20:16 62 desktop.ini 1 fichier(s) 62 octets 15 Rép(s) 293 135 564 800 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Invité\Local Settings\Application Data 04/01/2007 20:16 <REP> . 04/01/2007 20:16 <REP> .. 04/01/2007 20:16 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 13/02/2007 15:46 <REP> AOL 04/01/2007 20:16 <REP> ApplicationHistory 13/02/2007 15:46 <REP> Google 04/01/2007 20:16 <REP> Microsoft 13/02/2007 15:52 <REP> Mozilla 17/04/2007 11:24 <REP> Musicmatch 04/01/2007 20:16 137 fusioncache.dat 1 fichier(s) 137 octets 9 Rép(s) 293 135 564 800 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\shell\Application Data 22/02/2007 07:59 <REP> . 22/02/2007 07:59 <REP> .. 11/05/2007 14:54 <REP> Adobe 22/02/2007 07:59 <REP> AOL 03/05/2007 17:29 <REP> FlashGet 06/03/2007 16:48 <REP> Google 22/02/2007 07:59 <REP> HbTools 22/02/2007 08:01 <REP> HbTools_Icons 22/02/2007 07:59 <REP> Identities 13/04/2007 09:38 <REP> InstallShield 13/04/2007 09:39 <REP> InstallShield Installation Information 23/02/2007 10:28 <REP> Macromedia 22/02/2007 07:59 <REP> Microsoft 22/02/2007 10:43 <REP> Mozilla 22/02/2007 07:59 <REP> Real 17/04/2007 15:19 <REP> SecuROM 21/03/2007 18:57 <REP> Sun 22/02/2007 10:43 <REP> Talkback 22/02/2007 07:59 62 desktop.ini 1 fichier(s) 62 octets 18 Rép(s) 293 135 564 800 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\shell\Local Settings\Application Data 22/02/2007 07:59 <REP> . 22/02/2007 07:59 <REP> .. 22/02/2007 07:59 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 11/05/2007 14:54 <REP> Adobe 22/02/2007 07:59 <REP> AOL 22/02/2007 07:59 <REP> ApplicationHistory 22/02/2007 07:59 <REP> Google 22/02/2007 07:59 <REP> Microsoft 22/02/2007 10:43 <REP> Mozilla 13/04/2007 11:25 <REP> Musicmatch 22/02/2007 07:59 126 fusioncache.dat 1 fichier(s) 126 octets 10 Rép(s) 293 135 564 800 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\shell and john\Application Data 21/05/2007 11:51 <REP> . 21/05/2007 11:51 <REP> .. 22/05/2007 20:03 <REP> Adobe 28/11/2007 19:47 <REP> AdobeUM 21/05/2007 11:52 <REP> AOL 21/05/2007 16:49 <REP> Apple Computer 02/06/2007 10:17 <REP> EoRezo 15/06/2007 07:23 <REP> FlashGet 22/05/2007 16:52 <REP> Google 16/08/2007 19:48 <REP> Help 31/05/2007 16:18 <REP> HPQ 21/05/2007 11:51 <REP> Identities 02/06/2007 10:18 <REP> ItsLabel 21/05/2007 11:53 <REP> Macromedia 08/01/2008 18:37 <REP> MailFrontier 20/11/2007 15:08 <REP> Media Player Classic 21/05/2007 11:51 <REP> Microsoft 21/05/2007 12:04 <REP> Mozilla 19/09/2007 08:33 <REP> NCH Swift Sound 26/05/2007 15:42 <REP> OpenOffice.org2 21/05/2007 11:51 <REP> Real 30/06/2007 19:37 <REP> Sun 21/05/2007 12:04 <REP> Talkback 15/06/2007 07:29 <REP> Template 17/07/2007 09:40 <REP> Zango 21/05/2007 11:51 62 desktop.ini 04/06/2007 11:11 0 wklnhst.dat 2 fichier(s) 62 octets 25 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\shell and john\Local Settings\Application Data 21/05/2007 11:51 <REP> . 21/05/2007 11:51 <REP> .. 21/05/2007 11:51 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 22/05/2007 20:03 <REP> Adobe 23/05/2007 14:12 <REP> AOL 21/05/2007 16:47 <REP> Apple Computer 21/05/2007 11:51 <REP> ApplicationHistory 26/05/2007 15:49 <REP> DVDPlay 22/05/2007 16:52 <REP> Google 16/08/2007 19:48 <REP> Help 30/05/2007 08:47 <REP> Identities 17/07/2007 10:02 <REP> IM 11/11/2007 15:13 <REP> KodakGallery 21/05/2007 11:51 <REP> Microsoft 21/05/2007 12:04 <REP> Mozilla 20/10/2007 07:31 6 144 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 21/05/2007 11:51 133 fusioncache.dat 26/05/2007 15:49 63 200 GDIPFONTCACHEV1.DAT 18/11/2007 15:30 1 577 794 IconCache.db 4 fichier(s) 1 647 271 octets 15 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\LocalService\Application Data 26/10/2006 14:35 <REP> . 26/10/2006 14:35 <REP> .. 26/10/2006 14:35 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 26/10/2006 14:35 <REP> . 26/10/2006 14:35 <REP> .. 26/10/2006 14:35 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\NetworkService\Application Data 26/10/2006 14:35 <REP> . 26/10/2006 14:35 <REP> .. 26/10/2006 14:35 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 26/10/2006 14:35 <REP> . 26/10/2006 14:35 <REP> .. 26/10/2006 14:35 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 293 135 560 704 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Samuel Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Vero\Application Data 04/01/2007 19:18 <REP> . 04/01/2007 19:18 <REP> .. 06/02/2007 15:18 <REP> Adobe 13/03/2007 14:06 <REP> AdobeUM 08/01/2007 11:16 <REP> AOL 19/04/2007 17:45 <REP> Apple Computer 20/03/2007 14:53 <REP> CyberLink 04/05/2007 06:34 <REP> FlashGet 07/02/2007 16:01 <REP> Google 17/02/2007 10:33 <REP> Help 05/01/2007 10:03 <REP> HPQ 04/01/2007 19:18 <REP> Identities 02/03/2007 12:08 <REP> Lavasoft 05/01/2007 10:16 <REP> Leadertech 05/01/2007 10:17 <REP> Macromedia 22/02/2007 19:29 <REP> MessengerSkinner 04/01/2007 19:18 <REP> Microsoft 27/03/2007 12:41 <REP> Microsoft Web Folders 13/02/2007 08:15 <REP> Mozilla 06/02/2007 12:05 <REP> MSNInstaller 05/01/2007 19:16 <REP> OpenOffice.org2 04/01/2007 19:18 <REP> Real 18/04/2007 10:16 <REP> SecuROM 05/01/2007 10:16 <REP> Sonic 19/03/2007 20:07 <REP> Sun 13/02/2007 08:15 <REP> Talkback 10/02/2007 11:34 <REP> Template 06/02/2007 13:22 <REP> You've Got Pictures Screensaver 04/01/2007 19:18 62 desktop.ini 10/02/2007 11:34 4 090 wklnhst.dat 2 fichier(s) 4 152 octets 28 Rép(s) 293 135 556 608 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Documents and Settings\Vero\Local Settings\Application Data 04/01/2007 19:18 <REP> . 04/01/2007 19:18 <REP> .. 04/01/2007 19:18 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 06/02/2007 15:18 <REP> Adobe 06/02/2007 10:46 <REP> AOL 19/04/2007 17:45 <REP> Apple Computer 04/01/2007 19:18 <REP> ApplicationHistory 20/03/2007 14:53 <REP> DVDPlay 07/02/2007 16:01 <REP> Google 17/02/2007 10:33 <REP> Help 02/03/2007 15:46 <REP> HP 10/02/2007 11:36 <REP> Identities 22/02/2007 19:21 <REP> IM 04/01/2007 19:18 <REP> Microsoft 13/02/2007 08:15 <REP> Mozilla 15/04/2007 18:41 <REP> Musicmatch 03/03/2007 16:30 <REP> WMTools Downloaded Files 13/02/2007 08:28 15 360 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 04/01/2007 19:18 132 fusioncache.dat 08/01/2007 11:12 56 376 GDIPFONTCACHEV1.DAT 04/01/2007 19:18 3 195 528 IconCache.db 4 fichier(s) 3 267 396 octets 17 Rép(s) 293 135 556 608 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 18/05/2007 03:06 <REP> . 18/05/2007 03:06 <REP> .. 15/11/2005 03:59 <REP> Identities 15/11/2005 03:59 <REP> Microsoft 17/05/2007 18:32 <REP> Real 17/05/2007 18:32 <REP> Symantec 10/10/2005 14:24 62 desktop.ini 1 fichier(s) 62 octets 6 Rép(s) 293 135 556 608 octets libres Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 15/11/2005 03:59 <REP> . 15/11/2005 03:59 <REP> .. 17/05/2007 18:32 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150060} 17/05/2007 18:32 <REP> ApplicationHistory 15/11/2005 03:59 <REP> Microsoft 17/05/2007 18:32 137 fusioncache.dat 17/05/2007 18:32 3 770 190 IconCache.db 2 fichier(s) 3 770 327 octets 5 Rép(s) 293 135 552 512 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS\tasks C:\WINDOWS\Tasks\AppleSoftwareUpdate.job s €!Ø , : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - T a s k S Y S T E M 0 × , C:\WINDOWS\Tasks\EasyShare EasyShare inexploitable ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C s'appelle HP_PAVILION Le numéro de série du volume est 5053-3C1D Répertoire de C:\Program Files 10/02/2008 22:07 <REP> . 10/02/2008 22:07 <REP> .. 06/06/2007 18:39 <REP> Actual Drawing 26/10/2006 15:21 <REP> Adobe 11/09/2007 09:18 <REP> Adverts 28/11/2007 06:52 <REP> AGEIA Technologies 16/06/2007 19:32 <REP> Alcohol Soft 21/02/2007 16:29 <REP> AlienGUIse 05/02/2007 20:21 <REP> Alwil Software 24/02/2007 18:18 <REP> AOL 06/06/2007 18:39 <REP> AOL 9.0 05/02/2007 18:52 <REP> AOL 9.0a 06/06/2007 18:39 <REP> AOL 9.0b 06/06/2007 18:39 <REP> AOL 9.0c 06/06/2007 18:39 <REP> AOL 9.0d 16/08/2007 19:48 <REP> AOL 9.0e 20/05/2007 19:41 <REP> AOL Compagnon 10/08/2007 18:43 <REP> AOL Toolbar 12/06/2007 15:07 <REP> Apple Software Update 15/01/2008 00:37 <REP> Astase 26/10/2006 15:04 <REP> ATI Technologies 06/11/2007 19:42 <REP> AusLogics Disk Defrag 10/02/2008 22:07 <REP> Avira 26/02/2007 16:08 <REP> Barbie® Aventures Équestres 06/11/2007 19:13 <REP> BinarySense 09/01/2008 19:33 <REP> BitComet 13/01/2008 20:14 <REP> BitDefender KeyGen + Updates Patch 10/05/2007 16:13 <REP> BitDownload 28/11/2007 07:18 <REP> Camtech 17/11/2007 19:08 <REP> CCleaner 12/02/2007 20:19 <REP> Celestia 16/12/2007 19:57 <REP> Circle Developement 09/01/2008 19:17 <REP> Desktop Maestro 01/10/2007 14:59 <REP> Dofus 21/09/2007 18:54 <REP> EA GAMES 26/10/2006 15:35 <REP> EasyBits 19/12/2007 13:19 <REP> Electronic Arts 06/06/2007 18:47 <REP> eoRezo 13/01/2008 21:22 <REP> Fichiers communs 14/12/2007 20:20 <REP> Finale NotePad 2005a 26/12/2007 11:54 <REP> FlashGet 24/01/2008 23:12 <REP> Game Cam v1.4 18/11/2007 15:33 <REP> GameSpy Arcade 26/10/2006 14:42 <REP> GemMasterFrench 10/02/2008 21:06 <REP> Google 05/03/2007 19:56 <REP> Goto Software 26/10/2006 15:34 <REP> Hewlett-Packard 17/11/2007 19:39 <REP> HP 26/10/2006 15:13 <REP> HP DigitalMedia Archive 22/02/2007 19:21 <REP> IncrediMail 17/11/2007 19:55 <REP> inKline Global 08/01/2008 17:59 <REP> Internet Explorer 12/06/2007 15:21 <REP> iPod 17/11/2007 19:05 <REP> IrfanView 12/06/2007 15:22 <REP> iTunes 19/12/2007 13:13 <REP> Java 11/12/2007 22:58 <REP> JeffProd 10/01/2007 12:50 <REP> JoWood 10/11/2007 12:36 <REP> Kodak 06/03/2007 13:39 <REP> Learn2.com 08/02/2008 13:15 <REP> LimeWire 22/12/2007 16:14 <REP> Maxis 17/11/2007 20:07 <REP> Media Player Classic 26/10/2006 14:54 <REP> Messenger 16/12/2007 19:57 <REP> Messenger Plus! Live 15/12/2007 10:45 <REP> MessengerSkinner 22/05/2007 11:26 <REP> Microsoft CAPICOM 2.1.0.2 15/11/2005 03:24 <REP> microsoft frontpage 09/05/2007 15:31 <REP> Microsoft Games 26/10/2006 15:17 <REP> Microsoft Office 27/03/2007 12:43 <REP> Microsoft Visual Studio 26/10/2006 15:18 <REP> Microsoft Works 08/01/2007 11:21 <REP> Monte Cristo 17/11/2007 19:20 <REP> Movie Maker 11/02/2008 20:05 <REP> Mozilla Firefox 15/11/2005 03:24 <REP> MSN 15/11/2005 03:25 <REP> MSN Gaming Zone 16/12/2007 19:57 <REP> MSN Messenger 15/08/2007 19:53 <REP> MSXML 4.0 13/04/2007 11:17 <REP> Musicmatch 26/10/2006 15:20 <REP> muvee Technologies 31/10/2007 12:57 <REP> NCH Software 18/09/2007 19:51 <REP> NCH Swift Sound 15/11/2005 03:25 <REP> NetMeeting 21/05/2007 16:03 <REP> Nvu 15/11/2005 03:25 <REP> Online Services 25/05/2007 16:07 <REP> OpenOffice.org 2.0 17/11/2007 19:20 <REP> Outlook Express 15/03/2007 16:46 <REP> Picasa2 12/06/2007 15:20 <REP> QuickTime 26/10/2006 15:13 <REP> Real 17/11/2007 19:41 <REP> Registry Easy 26/10/2006 15:36 <REP> Services en ligne 26/10/2006 15:15 <REP> Sonic 04/02/2008 00:37 <REP> SopCast 17/11/2007 21:10 <REP> Spybot - Search & Destroy 24/01/2008 18:40 <REP> StuffPlug3 18/01/2008 21:28 <REP> Teamspeak2_RC2 16/04/2007 19:49 <REP> TechCity Solutions 30/01/2007 12:54 <REP> TLC-Edusoft 12/06/2007 17:20 <REP> TopDesk Trial 15/02/2007 12:00 <REP> ubi.com 04/10/2007 19:14 <REP> Ubisoft 06/02/2007 13:22 <REP> Viewpoint 13/02/2007 16:06 <REP> Virtools 11/09/2007 21:52 <REP> Warcraft III 17/11/2007 19:02 <REP> Winamp 05/09/2007 21:39 <REP> Windows Journal Viewer 04/08/2007 18:30 <REP> Windows Live 22/10/2007 20:14 <REP> Windows Live Safety Center 06/06/2007 18:46 <REP> Windows Live Toolbar 08/02/2007 16:20 <REP> Windows Media Connect 2 17/11/2007 19:29 <REP> Windows Media Player 15/11/2005 03:25 <REP> Windows NT 15/11/2005 03:25 <REP> Windows Plus 04/05/2007 11:53 <REP> WinRAR 16/06/2007 14:04 <REP> WowCartographe 15/11/2005 03:26 <REP> xerox 17/11/2007 19:41 <REP> Yahoo! 15/01/2008 21:04 <REP> Zone Labs 05/02/2008 10:55 <REP> Zylom Games 0 fichier(s) 0 octets 121 Rép(s) 293 135 536 128 octets libres ****************************************** ## Popups autorisées * Internet Explorer ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow host-domain-lookup.com REG_SZ www.host-domain-lookup.com REG_SZ * Mozilla Firefox (1 autorisé 2 interdit) ---------- C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATEUR\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\GOPQN62O.DEFAULT\HOSTPERM.1 host popup 1 www.infos-du-net.com ****************************************** ## Registre * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main] Search Bar REG_SZ http://search.msn.com/spbasic.htm ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport ****************

je vous remercie beaucoup pour vos reponses et vos aides donc si vous voulez avoire deja l'entete du rapport la voici: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:46:49, on 10/02/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2900.2180) Boot mode: Normal (j'ai refait le scan recemment) et a propos des deux anti-virus j'avais installé bitdeffender puis je voulais le desinstaller pour mettre avast! cependant Bitedeffender ne pouvais pas etre desinstallé car il y avais une erreur ceci etant dis j'ai reussi malgré tout a le desinstaller correctement recemment a propos de highjackthis j'ai refait un scan et voici le rapport (avec l'entete qui est au dessus mais que je remet ^^) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:46:49, on 10/02/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\arservice.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\AOL 9.0e\aoltray.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\CAPRPCSK.EXE C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\livecall.exe C:\Program Files\AOL 9.0e\waol.exe C:\Program Files\AOL 9.0e\shellmon.exe C:\Program Files\Fichiers communs\Aol\aoltpspd.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\HP\KBD\KBD.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe c:\windows\system\hpsysdrv.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" /tray O4 - HKCU\..\Run: [soap Title] C:\DOCUME~1\HP_ADM~1\APPLIC~1\WAYMULTITYPE\ByteThe4.exe O4 - S-1-5-18 Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe (User 'SYSTEM') O4 - .DEFAULT Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0e\aoltray.exe O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\FXSAPI.DLL O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E347505E-BC96-45D6-A3FD-53A4490457C7}: NameServer = 205.188.146.145 O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe -- End of file - 8251 bytes si vous voulez encore des information sur mon pc merci de preciser les quelle je vous remerci encore de votre attention et de vos reponse cordialement

il est en dessous de la demande ta du ne pas le voir parce que je l'ai edité mais c bon maintenant

bonsoir j'ai de nombreux probleme sur mon PC donc, est ce que vous pourrez me donnez la liste de ce qu'il faut supprimer d'après la liste de l'analyse je vous remercie infiniment de prolonger la vie de mon PC voici la liste de l'analyse C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\arservice.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Fichiers communs\AOL\1179916063\ee\AOLSoftware.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe C:\WINDOWS\system32\CAPRPCSK.EXE C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\AOL 9.0e\aoltray.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\HP\KBD\KBD.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe c:\windows\system\hpsysdrv.exe C:\Program Files\MSN Messenger\livecall.exe C:\Documents and Settings\HP_Administrateur\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bitcomet.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {07AA283A-43D7-4CBE-A064-32A21112D94D} - (no file) O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file) O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: (no name) - {07AA283A-43D7-4CBE-A064-32A21112D94D} - (no file) O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1179916063\ee\AOLSoftware.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\Vga Web.exe O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe" O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [bitComet] "C:\Program Files\BitComet\BitComet.exe" /tray O4 - HKCU\..\Run: [soap Title] C:\DOCUME~1\HP_ADM~1\APPLIC~1\WAYMULTITYPE\ByteThe4.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - S-1-5-18 Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe (User 'SYSTEM') O4 - S-1-5-18 Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'SYSTEM') O4 - .DEFAULT Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe (User 'Default user') O4 - .DEFAULT Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0e\aoltray.exe O4 - Global Startup: Canon LBP-810 Status Window.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\FXSAPI.DLL O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O18 - Protocol: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - "C:\Program Files\BinarySense\HDDlife 3\hlAPP.dll" (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Fichiers communs\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe et encore merci d'avance