jojemael

Re Gof. voici le rapport que tu m'as demandé de t'envoyer : JavaRa 1.10 Removal Log. Report follows after line. ------------------------------------ The JavaRa removal process was started on Sat Jul 26 12:02:57 2008 Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0 Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01 Found and removed: Software\JavaSoft\Java2D\1.5.0_04 Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_04 Found and removed: SOFTWARE\Classes\JavaPlugin.150_04 Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_04 Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150040} Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510004 Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510004 ------------------------------------ Finished reporting. JavaRa 1.10 Removal Log. Report follows after line. ------------------------------------ The JavaRa removal process was started on Sat Jul 26 12:36:31 2008 Could not delete: C:\Program Files\Java\jre1.5.0_04 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23B06123E6D18D74FA6711404FCAC1B8 ------------------------------------ Finished reporting. Voila le rapport, je fini le reste de la procédure.

Quand je selectionne Updap Using jucheck.exe et que je clic sur Search rien ne se passe.

re gof premier rapport . le service na pas utu dumarru deuxieme rapport. sc delete service success c ok pour symantec je né plus rien quand je fait une recherche

desolé il y a des mots qui sont reste dans le clavier

salut gof impossible de suprimer symantec mes document symantec c/program files/ fichiers communs je me rend sur executer et je tape cmd a suivre je fait un copier coller de sc stop................................ sa me die que windows ne trouve pas cmdsc.verifier que vous avez le non correctement et quand je tape a nouveaux sc delecte.......................... sa me mais la meme chose il fallait faire comme sa? cmdsc stop............................. Adobe Flash Player ActiveX Adobe Reader 7.0 - Français Assistant de connexion Windows Live avast! Antivirus Canon MP Navigator EX 1.0 Canon MP210 series Canon My Printer Canon Utilities Easy-PhotoPrint EX Canon Utilities Solution Menu Codec Pack - All In 1 6.0.3.0 Correctif pour Lecteur Windows Media 11 (KB939683) Correctif pour Windows Internet Explorer 7 (KB947864) Correctif pour Windows XP (KB896256) Correctif pour Windows XP (KB914440) Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Disc2Phone eMule Enregistrement utilisateur de Canon MP210 series Extension de Windows Live Toolbar (Windows Live Toolbar) Faire-part et remerciements - Solutions CréaFuté Free Download Manager 2.5 Galerie de photos Windows Live getPlus®_ocx GTK+ Runtime 2.10.13 rev a (remove only) HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) iMesh MediaBar J2SE Runtime Environment 5.0 Update 4 Lecteur Windows Media 11 livebox Macromedia Shockwave Player Malwarebytes' Anti-Malware Maxi Puzzles Menus intelligents (Windows Live Toolbar) Micro Application - Invitations et Fêtes Edition Classic Micro Application - Studio d'Impression Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft User-Mode Driver Framework Feature Pack 1.0 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782) Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) Mise à jour de sécurité pour Step by Step Interactive Training (KB923723) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899589) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901190) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913446) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918118) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB919007) Mise à jour de sécurité pour Windows XP (KB920213) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB920685) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921503) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour de sécurité pour Windows XP (KB922819) Mise à jour de sécurité pour Windows XP (KB923191) Mise à jour de sécurité pour Windows XP (KB923414) Mise à jour de sécurité pour Windows XP (KB923689) Mise à jour de sécurité pour Windows XP (KB923694) Mise à jour de sécurité pour Windows XP (KB923980) Mise à jour de sécurité pour Windows XP (KB924191) Mise à jour de sécurité pour Windows XP (KB924270) Mise à jour de sécurité pour Windows XP (KB924496) Mise à jour de sécurité pour Windows XP (KB924667) Mise à jour de sécurité pour Windows XP (KB925454) Mise à jour de sécurité pour Windows XP (KB925486) Mise à jour de sécurité pour Windows XP (KB925902) Mise à jour de sécurité pour Windows XP (KB926255) Mise à jour de sécurité pour Windows XP (KB926436) Mise à jour de sécurité pour Windows XP (KB927779) Mise à jour de sécurité pour Windows XP (KB927802) Mise à jour de sécurité pour Windows XP (KB928255) Mise à jour de sécurité pour Windows XP (KB928843) Mise à jour de sécurité pour Windows XP (KB929123) Mise à jour de sécurité pour Windows XP (KB930178) Mise à jour de sécurité pour Windows XP (KB931261) Mise à jour de sécurité pour Windows XP (KB931784) Mise à jour de sécurité pour Windows XP (KB932168) Mise à jour de sécurité pour Windows XP (KB933729) Mise à jour de sécurité pour Windows XP (KB935839) Mise à jour de sécurité pour Windows XP (KB935840) Mise à jour de sécurité pour Windows XP (KB936021) Mise à jour de sécurité pour Windows XP (KB938829) Mise à jour de sécurité pour Windows XP (KB941202) Mise à jour de sécurité pour Windows XP (KB941568) Mise à jour de sécurité pour Windows XP (KB941569) Mise à jour de sécurité pour Windows XP (KB941644) Mise à jour de sécurité pour Windows XP (KB941693) Mise à jour de sécurité pour Windows XP (KB943055) Mise à jour de sécurité pour Windows XP (KB943460) Mise à jour de sécurité pour Windows XP (KB943485) Mise à jour de sécurité pour Windows XP (KB944653) Mise à jour de sécurité pour Windows XP (KB945553) Mise à jour de sécurité pour Windows XP (KB946026) Mise à jour de sécurité pour Windows XP (KB948590) Mise à jour de sécurité pour Windows XP (KB948881) Mise à jour de sécurité pour Windows XP (KB950749) Mise à jour de sécurité pour Windows XP (KB950760) Mise à jour de sécurité pour Windows XP (KB950762) Mise à jour de sécurité pour Windows XP (KB951376) Mise à jour de sécurité pour Windows XP (KB951376-v2) Mise à jour de sécurité pour Windows XP (KB951698) Mise à jour de sécurité pour Windows XP (KB951748) Mise à jour pour Windows XP (KB894391) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB904942) Mise à jour pour Windows XP (KB908531) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB911280) Mise à jour pour Windows XP (KB912945) Mise à jour pour Windows XP (KB916595) Mise à jour pour Windows XP (KB920872) Mise à jour pour Windows XP (KB922582) Mise à jour pour Windows XP (KB927891) Mise à jour pour Windows XP (KB929338) Mise à jour pour Windows XP (KB930916) Mise à jour pour Windows XP (KB931836) Mise à jour pour Windows XP (KB932823-v3) Mise à jour pour Windows XP (KB933360) Mise à jour pour Windows XP (KB938828) Mise à jour pour Windows XP (KB942763) MP3 Player Utilities 4.15 MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) Navigateur Orange Navilog1 3.6.1 OpenOffice.org 2.1 Orange - Logiciels Internet PIXMA Extended Survey Program Realtek AC'97 Audio ScanSoft OmniPage SE 4 Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Sonic MyDVD Sonic RecordNow! Surligneur (Windows Live Toolbar) UnderCoverXP 1.19 USB Flash Disk VIA/S3G Display Driver VideoLAN VLC media player 0.8.6d Wanadoo Messager Windows Imaging Component Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Live installer Windows Live Mail Windows Live Messenger Windows Live Toolbar Windows Live Toolbar Windows Live Writer Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 en esperant avoire bien je tout seul pour l'instant a plus je reste connecter

Re Gof. Pour info j'ai un icône sur mon bureau c'est : Norton_Removal_Tool.exe. Je voudrais savoir si tout se que tu m'as fait telecharger va rester sur le PC icône y compris sur mon bureau. J'ai un ancien PC qui a plein de virus c'est pour cela qu'on a racheté celui-ci. Serait-il possible que tu m'aide à le reparer, bien sûr ce n'est pas urgent, cela serait pour mettre à l'étage pour mes enfants, comme j'ai la livebox on m'as dit que je pouvait brancher deux PC sur internet. Nous te remercions d'avance.

Bonsoir Gof. J'ai fait comme tu m'as dit, pour désinstaller Norton pas de soucie apparent sauf que c'était en anglais, il m'as fallut un coup de main de ma fille. Pour ce qui de suprimer : D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL j'ai fais une recherche dans : démarrer->rechercher. Et je l'ai suprimé. La ligne : O4 - HKCU\..\Run: [s9201] "D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect\wspwprtct.exe" /autorun. N'est plus presente. Par contre quand je fais une recherche dans rechercher il m'apparaît quatre symantec. -Symantec mes document -Symantec Shared C:\Progam Files\Fichiers communs -Symantec Antivirus scanner C:\WINDOWS\Downloaded Progam Files -Symantec RuFSI utility Class C:\WINDOWS\Downloaded Program Files voici le noueaux rapport. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:28:19, on 25/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\WINDOWS\system32\svchost.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\VTtrayp.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe C:\APPS\Powercinema\PCMService.exe C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Orange\Systray\SystrayApp.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\Program Files\Orange\Launcher\Launcher.exe C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe C:\APPS\SMP\SmpSys.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Free Download Manager\fdm.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Orange\Deskboard\deskboard.exe C:\Program Files\Orange\connectivity\connectivitymanager.exe C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\Orange\browser\browser.exe D:\Documents and Settings\franck\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://format.packardbell.com/cgi-bin/redi...=6&key=OEM4 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKCU\..\Run: [smpcSys] C:\APPS\SMP\SmpSys.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Orange Desktop Search] "C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" /tray O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O15 - Trusted Zone: http://www.orange.fr O16 - DPF: {011F473E-0880-43D4-99F3-F490A84128AE} (GenimoWebGames Control) - http://jeuxenligne.orange.fr/orange2.0/gam...amesControl.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {49E67060-2C0D-415E-94C7-52A49F73B2F1} (CPlayFirstPiratePoppersControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/PiratePoppers.1.0.0.39.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119fd.bay119.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/GameShell/onl...mjolauncher.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/Gam...ronGameHost.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {FC4CAF5F-91BD-4DD9-ADC1-F3C737E37BC4} (CPlayFirstSweetopiaControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/Sweetopia.1.0.0.46.cab O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) -- End of file - 12902 bytes je reste connecter ci tu a besoin d'autre chose . merci a plus tard

Bonjour Gof. Le PC est un peut lent, et je n'ai plus d'apparition de virus. Je n'est pas eu le message Type 1 to continue, or 2 to abort, donc je n'est pas pus taper 1 et je n'est pas pus valider. J'ai directement eu un rapport que je te poste (ci-dessus). ComboFix 08-07-20.2 - franck 2008-07-25 15:20:51.4 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.597 [GMT 2:00] Endroit: D:\Documents and Settings\franck\Bureau\ComboFix.exe Command switches used :: D:\Documents and Settings\franck\Bureau\CFScript.txt * Création d'un nouveau point de restauration . ((((((((((((((((((((((((((((( Fichiers créés 2008-06-25 to 2008-07-25 )))))))))))))))))))))))))))))))))))) . 2008-07-21 23:23 . 2008-07-21 23:23 <REP> d-------- D:\Documents and Settings\franck\Application Data\Malwarebytes 2008-07-21 23:23 . 2008-07-21 23:23 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-07-21 23:23 . 2008-07-21 23:23 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-07-21 23:23 . 2008-07-20 20:21 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-07-21 23:23 . 2008-07-20 20:21 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-07-21 22:23 . 2008-07-21 22:51 <REP> d-------- C:\Program Files\Navilog1 2008-07-21 19:03 . 2008-07-21 19:03 <REP> d-------- D:\Documents and Settings\All Users\Application Data\CanonIJPLM 2008-07-21 18:59 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\franck\Application Data\ScanSoft 2008-07-21 18:59 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\InstallShield 2008-07-21 18:59 . 2008-07-21 18:59 412 --a------ C:\WINDOWS\MAXLINK.INI 2008-07-21 18:58 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\ScanSoft 2008-07-21 18:58 . 2008-07-21 18:58 <REP> d-------- C:\Program Files\ScanSoft 2008-07-21 18:58 . 2008-07-21 18:58 <REP> d-------- C:\Program Files\Fichiers communs\ScanSoft Shared 2008-07-21 18:55 . 2008-07-21 18:55 <REP> d-------- C:\Program Files\Fichiers communs\CANON 2008-07-21 18:53 . 2008-07-21 18:53 <REP> d--h----- D:\Documents and Settings\All Users\Application Data\CanonBJ 2008-07-21 18:53 . 2007-03-18 22:00 215,040 --a------ C:\WINDOWS\system32\CNMLM8S.DLL 2008-07-21 18:52 . 2008-07-21 18:52 <REP> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information 2008-07-21 18:52 . 2008-07-21 18:52 <REP> d--h----- C:\Program Files\CanonBJ 2008-07-21 18:52 . 2008-07-21 19:03 <REP> d-------- C:\Program Files\Canon 2008-07-20 16:20 . 2008-07-20 20:27 <REP> d-------- D:\Documents and Settings\franck\.housecall6.6 2008-07-20 16:10 . 2008-07-20 16:15 40 --a------ C:\WINDOWS\TSC.INI 2008-07-20 16:09 . 2008-07-20 16:09 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL 2008-07-20 16:09 . 2008-07-20 16:09 286,720 --a------ C:\WINDOWS\PATCH.EXE 2008-07-20 16:09 . 2008-07-20 16:09 69,689 --a------ C:\WINDOWS\UNZIP.DLL 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-25 13:20 --------- d-----w D:\Documents and Settings\franck\Application Data\Free Download Manager 2008-07-25 12:32 --------- d-----w D:\Documents and Settings\franck\Application Data\OpenOffice.org2 2008-07-21 16:58 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-07-09 10:30 --------- d-----w C:\Program Files\eMule 2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 17:41 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys 2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys 2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-11 07:44 --------- d-----w C:\Program Files\Orange 2008-06-11 07:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-11 07:34 --------- d-----w D:\Documents and Settings\franck\Application Data\InstallShield 2008-06-11 07:34 --------- d-----w C:\Program Files\Securitoo 2008-06-11 07:34 --------- d-----w C:\Program Files\SAGEM 2008-05-08 12:28 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:15 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll . (((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) . ---- Directory of D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL ---- D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\ ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 09:51 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360] "Orange Desktop Search"="C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" [2007-01-17 16:10 4938016] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe" [2008-01-01 00:05 2449455] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe" [2005-06-03 03:52 36975] "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272] "PCMService"="c:\APPS\Powercinema\PCMService.exe" [2006-02-23 12:08 147456] "DXM6Patch_981116"="C:\WINDOWS\p_981116.exe" [1998-11-30 19:04 497376] "RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-05-26 13:35 26112] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-26 13:35 98304] "ORAHSSSessionManager"="C:\Program Files\Orange\SessionManager\SessionManager.exe" [2007-09-25 19:10 102400] "SystrayORAHSS"="C:\Program Files\Orange\Systray\SystrayApp.exe" [2007-09-25 20:08 94208] "CanonSolutionMenu"="C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 18:01 644696] "CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 18:50 1603152] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 09:03 210472] "OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 12:02 79400] "VTTimer"="VTTimer.exe" [2005-03-08 04:33 53248 C:\WINDOWS\system32\VTTimer.exe] "VTTrayp"="VTtrayp.exe" [2005-11-01 05:15 163840 C:\WINDOWS\system32\VTTrayp.exe] "SoundMan"="SOUNDMAN.EXE" [2005-01-20 21:04 77824 C:\WINDOWS\SOUNDMAN.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360] D:\Documents and Settings\franck\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.1.lnk - C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 17:45:48 393216] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\\AOL 9.0\\aol.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"= "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\eMule\\emule.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "C:\\Program Files\\Free Download Manager\\fdm.exe"= "C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37] R2 IJPLMSVC;PIXMA Extended Survey Program;C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 08:49] S3 CnxEtP;ZTE ZXDSL852 Adapter Filter Driver;C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [] S3 CnxEtU;ZTE ZXDSL852 Interface Device Driver;C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [] S3 CnxTgNW;ZTE ZXDSL852 WAN PPPoA Adapter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [] S3 dump_wmimmc;dump_wmimmc;C:\WINDOWS\system32\drivers\dump_wmimmc.sys [2007-04-23 11:08] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dab0dbf1-38f6-11dc-a7ad-00d0d077e5af}] \Shell\AutoRun\command - F:\LaunchU3.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-25 15:21:54 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-07-25 15:23:24 ComboFix-quarantined-files.txt 2008-07-25 13:23:14 ComboFix2.txt 2008-07-25 12:58:44 ComboFix3.txt 2008-07-21 21:14:56 ComboFix4.txt 2008-07-20 20:56:27 Pre-Run: 19,249,422,336 octets libres Post-Run: 19,238,035,456 octets libres 140 --- E O F --- 2008-07-09 08:44:55 Dis-moi si ce rapport est celui que tu attendait. Je ne saît pas compresser un repertoire. Je te remercie d'avance. A bientôt.

Bonsoir Gof. j'ai executé le programme que vous m'avez envoyé. Tous c'est trés bien passé. Je vous fait suvrire touts les rapports. Premier rapport : Search Navipromo version 3.6.1 commencé le 21/07/2008 à 22:28:46,23 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Session actuelle : "franck" Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Recherche executé en mode normal *** Recherche Programmes installés *** *** Recherche dossiers dans "C:\WINDOWS" *** *** Recherche dossiers dans "C:\Program Files" *** *** Recherche dossiers dans "D:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Recherche dossiers dans "D:\Documents and Settings\All Users\menudm~1" *** *** Recherche dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\franck\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\franck\locals~1\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\franck\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net Aucun Fichier Navipromo trouvé *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\WINDOWS\system32" * * Recherche dans "D:\Documents and Settings\franck\locals~1\applic~1" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\WINDOWS\system32" : * Dans "D:\Documents and Settings\franck\locals~1\applic~1" : 3)Recherche Certificats : Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche fichiers connus : *** Analyse terminée le 21/07/2008 à 22:33:01,93 *** Deuxieme rapport : Clean Navipromo version 3.6.1 commencé le 21/07/2008 à 22:46:24,34 Outil exécuté depuis C:\Program Files\navilog1 Session actuelle : "franck" Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "C:\WINDOWS\System32" * * Suppression dans "D:\Documents and Settings\franck\locals~1\applic~1" * *** Suppression dossiers dans "C:\WINDOWS" *** *** Suppression dossiers dans "C:\Program Files" *** *** Suppression dossiers dans "D:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Suppression dossiers dans "D:\Documents and Settings\All Users\menudm~1" *** *** Suppression dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\franck\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\franck\locals~1\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\franck\menudm~1\progra~1" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu C:\WINDOWS\Temp effectué ! Nettoyage contenu D:\Documents and Settings\franck\locals~1\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "C:\WINDOWS\system32" * * Dans "D:\Documents and Settings\franck\locals~1\applic~1" * *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltdt absent ! *** Nettoyage terminé le 21/07/2008 à 22:51:15,85 *** Troisieme rapport : ComboFix 08-07-20.2 - franck 2008-07-21 23:09:45.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.653 [GMT 2:00] Endroit: D:\Documents and Settings\franck\Bureau\ComboFix.exe Command switches used :: D:\Documents and Settings\franck\Bureau\CFScript.txt * Création d'un nouveau point de restauration FILE :: D:\DOCUME~1\franck\LOCALS~1\Temp\smchk.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect\LOG\20080720223821203.log D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect\wspwprtct.exe . ((((((((((((((((((((((((((((( Fichiers créés 2008-06-21 to 2008-07-21 )))))))))))))))))))))))))))))))))))) . 2008-07-21 22:23 . 2008-07-21 22:51 <REP> d-------- C:\Program Files\Navilog1 2008-07-21 19:03 . 2008-07-21 19:03 <REP> d-------- D:\Documents and Settings\All Users\Application Data\CanonIJPLM 2008-07-21 18:59 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\franck\Application Data\ScanSoft 2008-07-21 18:59 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\InstallShield 2008-07-21 18:59 . 2008-07-21 18:59 412 --a------ C:\WINDOWS\MAXLINK.INI 2008-07-21 18:58 . 2008-07-21 18:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\ScanSoft 2008-07-21 18:58 . 2008-07-21 18:58 <REP> d-------- C:\Program Files\ScanSoft 2008-07-21 18:58 . 2008-07-21 18:58 <REP> d-------- C:\Program Files\Fichiers communs\ScanSoft Shared 2008-07-21 18:55 . 2008-07-21 18:55 <REP> d-------- C:\Program Files\Fichiers communs\CANON 2008-07-21 18:53 . 2008-07-21 18:53 <REP> d--h----- D:\Documents and Settings\All Users\Application Data\CanonBJ 2008-07-21 18:53 . 2007-03-18 22:00 215,040 --a------ C:\WINDOWS\system32\CNMLM8S.DLL 2008-07-21 18:52 . 2008-07-21 18:52 <REP> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information 2008-07-21 18:52 . 2008-07-21 18:52 <REP> d--h----- C:\Program Files\CanonBJ 2008-07-21 18:52 . 2008-07-21 19:03 <REP> d-------- C:\Program Files\Canon 2008-07-20 16:20 . 2008-07-20 20:27 <REP> d-------- D:\Documents and Settings\franck\.housecall6.6 2008-07-20 16:10 . 2008-07-20 16:15 40 --a------ C:\WINDOWS\TSC.INI 2008-07-20 16:09 . 2008-07-20 16:09 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL 2008-07-20 16:09 . 2008-07-20 16:09 286,720 --a------ C:\WINDOWS\PATCH.EXE 2008-07-20 16:09 . 2008-07-20 16:09 69,689 --a------ C:\WINDOWS\UNZIP.DLL 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-21 21:10 --------- d-----w D:\Documents and Settings\franck\Application Data\Free Download Manager 2008-07-21 20:52 --------- d-----w D:\Documents and Settings\franck\Application Data\OpenOffice.org2 2008-07-21 16:58 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-07-09 10:30 --------- d-----w C:\Program Files\eMule 2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 17:41 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys 2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys 2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-11 07:44 --------- d-----w C:\Program Files\Orange 2008-06-11 07:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-11 07:34 --------- d-----w D:\Documents and Settings\franck\Application Data\InstallShield 2008-06-11 07:34 --------- d-----w C:\Program Files\Securitoo 2008-06-11 07:34 --------- d-----w C:\Program Files\SAGEM 2008-05-08 12:28 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-07 05:15 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll 2008-04-23 20:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2008-04-22 07:41 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2008-04-22 07:41 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe . ((((((((((((((((((((((((((((( snapshot@2008-07-20_22.54.57.28 ))))))))))))))))))))))))))))))))))))))))) . + 2002-07-25 15:13:18 24,576 ----a-w C:\WINDOWS\Downloaded Program Files\dwusplay.dll + 2002-07-25 15:13:12 196,608 ----a-w C:\WINDOWS\Downloaded Program Files\dwusplay.exe + 2005-02-16 14:15:20 401,408 ----a-w C:\WINDOWS\Downloaded Program Files\isusweb.dll + 2008-07-21 16:58:59 7,406 ----a-r C:\WINDOWS\Installer\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}\ARPPRODUCTICON.exe + 2008-07-21 16:58:59 49,152 ----a-r C:\WINDOWS\Installer\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}\NewShortcut14_27BC537B086D42E19CB39D115FA043BF.exe + 2008-07-21 16:58:59 450,560 ----a-r C:\WINDOWS\Installer\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}\NewShortcut15_27BC537B086D42E19CB39D115FA043BF.exe + 2008-07-21 16:58:59 65,536 ----a-r C:\WINDOWS\Installer\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe + 2007-02-09 08:10:48 808,544 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\DelDrv.exe + 2007-02-15 06:22:48 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstAR.dll + 2007-02-13 07:55:54 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstCN.dll + 2007-02-13 23:58:48 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstCZ.dll + 2007-02-13 23:58:50 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstDE.dll + 2007-02-13 23:58:52 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstDK.dll + 2007-02-13 23:58:54 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstES.dll + 2007-02-13 23:58:54 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstFI.dll + 2007-02-13 23:58:56 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstFR.dll + 2007-02-13 23:58:58 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstGR.dll + 2007-02-15 00:26:48 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstHU.dll + 2007-02-14 07:36:14 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstID.dll + 2007-02-13 23:59:02 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstIT.dll + 2007-02-08 05:27:08 45,056 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstJP.dll + 2007-02-13 09:10:24 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstKR.dll + 2007-02-13 23:59:04 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstNL.dll + 2007-02-13 23:59:04 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstNO.dll + 2007-02-13 23:59:06 61,440 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstPL.dll + 2007-02-13 23:59:08 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstPT.dll + 2007-02-13 23:59:10 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstRU.dll + 2007-02-13 23:59:12 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstSE.dll + 2007-02-13 08:20:58 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstTH.dll + 2007-02-13 23:59:14 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstTR.dll + 2007-02-13 08:05:14 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstTW.dll + 2007-02-08 05:27:08 57,344 ----a-r C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\RES\DLL\IJInstUS.dll + 2007-03-23 07:30:48 1,400,832 ----a-w C:\WINDOWS\system32\CNC210C.DLL + 2007-03-23 07:29:52 98,304 ----a-w C:\WINDOWS\system32\CNC210I.DLL + 2007-03-19 01:16:12 200,704 ----a-w C:\WINDOWS\system32\CNC210L.DLL + 2007-03-15 05:12:00 188,416 ----a-w C:\WINDOWS\system32\CNC210O.DLL - 2004-08-03 21:58:46 15,104 ----a-w C:\WINDOWS\system32\dllcache\usbscan.sys + 2004-08-03 20:58:46 15,104 ----a-w C:\WINDOWS\system32\dllcache\usbscan.sys - 2004-08-03 21:58:46 15,104 ----a-w C:\WINDOWS\system32\drivers\usbscan.sys + 2004-08-03 20:58:46 15,104 ----a-w C:\WINDOWS\system32\drivers\usbscan.sys + 2002-01-05 02:48:16 974,848 ----a-w C:\WINDOWS\system32\mfc70.dll + 2002-01-05 02:36:38 964,608 ----a-w C:\WINDOWS\system32\mfc70u.dll + 2003-03-18 18:44:36 40,960 ----a-w C:\WINDOWS\system32\MFC71CHS.DLL + 2003-03-18 18:44:36 45,056 ----a-w C:\WINDOWS\system32\MFC71CHT.DLL + 2003-03-18 18:44:34 65,536 ----a-w C:\WINDOWS\system32\MFC71DEU.DLL + 2003-03-18 18:44:38 57,344 ----a-w C:\WINDOWS\system32\MFC71ENU.DLL + 2003-03-18 18:44:36 61,440 ----a-w C:\WINDOWS\system32\MFC71ESP.DLL + 2003-03-18 18:44:34 61,440 ----a-w C:\WINDOWS\system32\MFC71FRA.DLL + 2003-03-18 18:44:36 61,440 ----a-w C:\WINDOWS\system32\MFC71ITA.DLL + 2003-03-18 18:44:34 49,152 ----a-w C:\WINDOWS\system32\MFC71JPN.DLL + 2003-03-18 18:44:38 49,152 ----a-w C:\WINDOWS\system32\MFC71KOR.DLL + 2002-01-05 01:38:38 54,784 ----a-w C:\WINDOWS\system32\msvci70.dll + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMBM8S.DLL + 2007-03-18 20:00:00 33,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMBS8S.DLL + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMBU8S.DLL + 2007-03-18 20:00:00 1,600,000 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMCB8S.DLL + 2007-03-18 20:10:00 97,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMCP8S.DLL + 2007-03-18 20:00:00 221,184 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMD58S.DLL + 2007-03-18 20:00:00 545,792 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMDR8S.DLL + 2007-03-18 20:00:00 10,240 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMFU8S.DLL + 2007-03-18 20:00:00 9,216 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMLH8S.DLL + 2007-03-18 20:00:00 145,408 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMLR8S.DLL + 2007-03-18 20:00:00 27,136 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMOP8S.DLL + 2000-12-12 02:10:04 23,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMP08S.DAT + 2000-12-12 02:10:04 27,140 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMP18S.DAT + 2000-12-12 08:09:20 30,320 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMP28S.DAT + 2007-03-18 20:00:00 12,288 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMPI8S.DLL + 2007-03-18 20:00:00 102,400 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMPV8S.DLL + 2007-03-18 20:00:00 757,248 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSB8S.DLL + 2007-03-18 20:00:00 47,616 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSD8S.DLL + 2007-03-18 23:19:08 17,496 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSE8S.EXE + 2007-03-18 20:00:00 428,544 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSM8S.DLL + 2007-03-18 20:00:00 44,032 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSQ8S.DLL + 2007-03-18 20:00:00 76,288 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSR8S.DLL + 2007-03-18 20:00:00 310,272 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMUB8S.DLL + 2007-03-18 20:00:00 1,907,200 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMUI8S.DLL + 2007-03-18 20:00:00 361,472 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMUR8S.DLL + 2007-03-18 20:00:00 13,824 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMVS8S.DLL + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMW38S.DLL + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMBM8S.DLL + 2007-03-18 20:00:00 33,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMBS8S.DLL + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMBU8S.DLL + 2007-03-18 20:00:00 1,600,000 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMCB8S.DLL + 2007-03-18 20:10:00 97,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMCP8S.DLL + 2007-03-18 20:00:00 221,184 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMD58S.DLL + 2007-03-18 20:00:00 545,792 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMDR8S.DLL + 2007-03-18 20:00:00 10,240 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMFU8S.DLL + 2007-03-18 20:00:00 9,216 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMLH8S.DLL + 2007-03-18 20:00:00 145,408 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMLR8S.DLL + 2007-03-18 20:00:00 27,136 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMOP8S.DLL + 2000-12-12 02:10:04 23,280 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMP08S.DAT + 2000-12-12 02:10:04 27,140 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMP18S.DAT + 2000-12-12 08:09:20 30,320 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMP28S.DAT + 2007-03-18 20:00:00 12,288 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMPI8S.DLL + 2007-03-18 20:00:00 102,400 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMPV8S.DLL + 2007-03-18 20:00:00 757,248 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSB8S.DLL + 2007-03-18 20:00:00 47,616 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSD8S.DLL + 2007-03-18 23:19:08 17,496 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSE8S.EXE + 2007-03-18 20:00:00 428,544 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSM8S.DLL + 2007-03-18 20:00:00 44,032 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSQ8S.DLL + 2007-03-18 20:00:00 76,288 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMSR8S.DLL + 2007-03-18 20:00:00 310,272 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMUB8S.DLL + 2007-03-18 20:00:00 1,907,200 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMUI8S.DLL + 2007-03-18 20:00:00 361,472 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMUR8S.DLL + 2007-03-18 20:00:00 13,824 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMVS8S.DLL + 2007-03-18 20:00:00 11,264 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\canonmp210_seriesb4ef\CNMW38S.DLL + 2007-03-18 20:00:00 27,136 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPD8S.DLL + 2007-03-18 20:00:00 69,632 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPP8S.DLL - 2008-07-20 20:46:17 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_4b4.dat + 2008-07-21 20:49:55 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_4b4.dat + 2006-11-29 05:39:54 73,728 ----a-w C:\WINDOWS\twain_32\MP210 series\AG.DLL + 2005-04-15 06:34:36 57,344 ----a-w C:\WINDOWS\twain_32\MP210 series\BaLCo.dll + 2007-02-02 08:31:24 86,016 ----a-w C:\WINDOWS\twain_32\MP210 series\CAPS.DLL + 2005-08-24 06:51:00 126,976 ----a-w C:\WINDOWS\twain_32\MP210 series\CFine2.dll + 2007-02-19 01:42:20 3,724,256 ----a-w C:\WINDOWS\twain_32\MP210 series\CNC210.DAT + 2007-02-08 05:06:12 49,224 ----a-w C:\WINDOWS\twain_32\MP210 series\CNC210P.DAT + 2007-03-19 05:06:36 143,360 ----a-w C:\WINDOWS\twain_32\MP210 series\CUBS.DLL + 2006-04-13 06:43:30 53,248 ----a-w C:\WINDOWS\twain_32\MP210 series\HSL.DLL + 2006-07-31 06:17:08 53,248 ----a-w C:\WINDOWS\twain_32\MP210 series\IJFSHLIB.DLL + 2007-04-13 00:01:26 184,320 ----a-w C:\WINDOWS\twain_32\MP210 series\IOP.DLL + 2007-01-19 06:16:06 39,154 ----a-w C:\WINDOWS\twain_32\MP210 series\IPM.DAT + 2007-04-13 00:04:34 135,168 ----a-w C:\WINDOWS\twain_32\MP210 series\IPM.DLL + 2004-08-26 08:07:00 114,688 ----a-w C:\WINDOWS\twain_32\MP210 series\ITLIB32.DLL + 2004-06-07 03:58:04 290,816 ----a-w C:\WINDOWS\twain_32\MP210 series\libBLC.dll + 2006-12-13 02:28:04 122,880 ----a-w C:\WINDOWS\twain_32\MP210 series\MC2.DLL + 2006-01-12 05:22:00 73,728 ----a-w C:\WINDOWS\twain_32\MP210 series\RSTCOL.DLL + 2007-04-13 00:01:10 147,456 ----a-w C:\WINDOWS\twain_32\MP210 series\SCANINTF.DLL + 2005-02-02 09:34:44 118,784 ----a-w C:\WINDOWS\twain_32\MP210 series\SCRPRMV.DLL + 2006-12-01 00:24:10 1,159,168 ----a-w C:\WINDOWS\twain_32\MP210 series\SGCFLTR.DLL + 2007-04-23 05:36:34 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_AR.DLL + 2007-04-19 04:13:38 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_CN.DLL + 2007-04-17 02:55:38 1,044,480 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_CZ.DLL + 2007-04-23 05:36:56 1,052,672 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_DE.DLL + 2007-04-17 02:55:46 1,044,480 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_DK.DLL + 2007-04-23 05:37:26 1,056,768 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_ES.DLL + 2007-04-23 05:36:46 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_FI.DLL + 2007-04-23 05:36:52 1,052,672 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_FR.DLL + 2007-04-23 05:37:02 1,056,768 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_GR.DLL + 2007-04-17 02:56:24 1,048,576 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_HU.DLL + 2007-04-17 04:58:20 1,044,480 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_ID.DLL + 2007-04-17 02:56:32 1,056,768 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_IT.DLL + 2007-04-13 00:00:34 1,011,712 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_JP.DLL + 2007-04-17 02:35:08 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_KR.DLL + 2007-04-23 05:36:40 1,052,672 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_NL.DLL + 2007-04-17 02:56:38 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_NO.DLL + 2007-04-23 05:37:10 1,048,576 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_PL.DLL + 2007-04-23 05:37:16 1,048,576 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_PT.DLL + 2007-04-23 05:37:20 1,044,480 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_RU.DLL + 2007-04-23 05:37:32 1,044,480 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_SE.DLL + 2007-04-20 00:35:56 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_TH.DLL + 2007-04-23 05:37:38 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_TR.DLL + 2007-04-17 02:23:34 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_TW.DLL + 2007-04-13 00:00:30 1,040,384 ----a-w C:\WINDOWS\twain_32\MP210 series\SGRES_US.DLL + 2007-04-13 00:04:26 1,175,552 ----a-w C:\WINDOWS\twain_32\MP210 series\SGUI.DLL + 2006-11-06 07:13:26 98,304 ----a-w C:\WINDOWS\twain_32\MP210 series\softfare.dll + 2007-04-13 00:02:38 524,288 ----a-w C:\WINDOWS\twain_32\MP210 series\TPM.DLL + 2007-04-23 05:36:34 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESAR.DLL + 2007-04-19 04:13:38 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESCN.DLL + 2007-04-17 02:55:38 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESCZ.DLL + 2007-04-23 05:36:56 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESDE.DLL + 2007-04-17 02:55:46 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESDK.DLL + 2007-04-23 05:37:26 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESES.DLL + 2007-04-23 05:36:46 5,120 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESFI.DLL + 2007-04-23 05:36:52 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESFR.DLL + 2007-04-23 05:37:04 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESGR.DLL + 2007-04-17 02:56:24 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESHU.DLL + 2007-04-17 04:58:20 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESID.DLL + 2007-04-17 02:56:32 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESIT.DLL + 2007-01-26 06:44:36 4,096 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESJP.DLL + 2007-04-17 02:35:06 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESKR.DLL + 2007-04-23 05:36:40 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESNL.DLL + 2007-04-17 02:56:38 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESNO.DLL + 2007-04-23 05:37:10 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESPL.DLL + 2007-04-23 05:37:16 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESPT.DLL + 2007-04-23 05:37:20 5,120 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESRU.DLL + 2007-04-23 05:37:32 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESSE.DLL + 2007-04-20 00:35:56 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESTH.DLL + 2007-04-23 05:37:38 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESTR.DLL + 2007-04-17 02:23:34 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESTW.DLL + 2007-01-26 06:44:38 4,608 ----a-w C:\WINDOWS\twain_32\MP210 series\USDRESUS.DLL + 2007-02-06 12:00:06 258,048 ----a-w C:\WINDOWS\twain_32\MP210 series\USIP.DLL + 2008-07-21 16:58:54 1,230,336 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 09:51 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360] "Orange Desktop Search"="C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" [2007-01-17 16:10 4938016] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe" [2008-01-01 00:05 2449455] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe" [2005-06-03 03:52 36975] "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272] "PCMService"="c:\APPS\Powercinema\PCMService.exe" [2006-02-23 12:08 147456] "DXM6Patch_981116"="C:\WINDOWS\p_981116.exe" [1998-11-30 19:04 497376] "RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-05-26 13:35 26112] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-26 13:35 98304] "ORAHSSSessionManager"="C:\Program Files\Orange\SessionManager\SessionManager.exe" [2007-09-25 19:10 102400] "SystrayORAHSS"="C:\Program Files\Orange\Systray\SystrayApp.exe" [2007-09-25 20:08 94208] "CanonSolutionMenu"="C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 18:01 644696] "CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 18:50 1603152] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 09:03 210472] "OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 12:02 79400] "VTTimer"="VTTimer.exe" [2005-03-08 04:33 53248 C:\WINDOWS\system32\VTTimer.exe] "VTTrayp"="VTtrayp.exe" [2005-11-01 05:15 163840 C:\WINDOWS\system32\VTTrayp.exe] "SoundMan"="SOUNDMAN.EXE" [2005-01-20 21:04 77824 C:\WINDOWS\SOUNDMAN.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360] D:\Documents and Settings\franck\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.1.lnk - C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 17:45:48 393216] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\\AOL 9.0\\aol.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"= "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\eMule\\emule.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "C:\\Program Files\\Free Download Manager\\fdm.exe"= "C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37] R2 IJPLMSVC;PIXMA Extended Survey Program;C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 08:49] S3 CnxEtP;ZTE ZXDSL852 Adapter Filter Driver;C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [] S3 CnxEtU;ZTE ZXDSL852 Interface Device Driver;C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [] S3 CnxTgNW;ZTE ZXDSL852 WAN PPPoA Adapter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [] S3 dump_wmimmc;dump_wmimmc;C:\WINDOWS\system32\drivers\dump_wmimmc.sys [2007-04-23 11:08] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dab0dbf1-38f6-11dc-a7ad-00d0d077e5af}] \Shell\AutoRun\command - F:\LaunchU3.exe *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-21 23:12:17 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-07-21 23:14:55 ComboFix-quarantined-files.txt 2008-07-21 21:14:18 ComboFix2.txt 2008-07-20 20:56:27 Pre-Run: 19,233,009,664 octets libres Post-Run: 19,218,481,152 octets libres 329 --- E O F --- 2008-07-09 08:44:55 Quatrieme rapport : Malwarebytes' Anti-Malware 1.22 Version de la base de données: 976 Windows 5.1.2600 Service Pack 2 23:31:07 21/07/2008 mbam-log-7-21-2008 (23-31-07).txt Type de recherche: Examen rapide Eléments examinés: 42568 Temps écoulé: 4 minute(s), 32 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 11 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\xbtb01621.ietoolbar (Adware.SoftMate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\xbtb01621.ietoolbar.1 (Adware.SoftMate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\xbtb01621.xbtb01621 (Adware.SoftMate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\xbtb01621.xbtb01621.1 (Adware.SoftMate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{b7d3e479-cc68-42b5-a338-938ece35f419} (Adware.SoftMate) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\SecuriSoft SARL (Trojan.FakeAlert) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{b7d3e479-cc68-42b5-a338-938ece35f419} (Adware.SoftMate) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) Cinquieme et dernier rapport HijacThis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:00:38, on 21/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\VTtrayp.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe C:\APPS\Powercinema\PCMService.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Orange\Systray\SystrayApp.exe C:\APPS\SMP\SmpSys.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe C:\Program Files\Free Download Manager\fdm.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Canon\MyPrinter\BJMyPrt.exe D:\Documents and Settings\franck\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://format.packardbell.com/cgi-bin/redi...=6&key=OEM4 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKCU\..\Run: [smpcSys] C:\APPS\SMP\SmpSys.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Orange Desktop Search] "C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" /tray O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKCU\..\Run: [s9201] "D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect\wspwprtct.exe" /autorun O4 - HKCU\..\RunOnce: [RunCanonMsetUp] D:\DOCUME~1\franck\LOCALS~1\Temp\MasterReboot\CANON_IJ\MCDCHK2.EXE O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O16 - DPF: {011F473E-0880-43D4-99F3-F490A84128AE} (GenimoWebGames Control) - http://jeuxenligne.orange.fr/orange2.0/gam...amesControl.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {49E67060-2C0D-415E-94C7-52A49F73B2F1} (CPlayFirstPiratePoppersControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/PiratePoppers.1.0.0.39.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119fd.bay119.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/GameShell/onl...mjolauncher.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/Gam...ronGameHost.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {FC4CAF5F-91BD-4DD9-ADC1-F3C737E37BC4} (CPlayFirstSweetopiaControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/Sweetopia.1.0.0.46.cab O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- End of file - 12735 bytes Moi et ma famille te remercions beaucoup pour ton aide. Surtout mes 4 enfants, car sans leur ordinateur ils sont perduent. Bon courage et encore merci.

bonsoir Gof merci de t'intereser à mes problemes. Merci pour les liens. Je vient de desactiver la protection residente d'avast. J'ai telechargé combofix et je l'ai executé. Voici le rapport : ComboFix 08-07-20.2 - franck 2008-07-20 22:41:31.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.564 [GMT 2:00] Endroit: D:\Documents and Settings\franck\Bureau\ComboFix.exe * Création d'un nouveau point de restauration . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\instant access C:\Program Files\instant access\Center\CrazyGirls.upd C:\Program Files\instant access\Center\GamesDesktop.upd C:\Program Files\instant access\Center\LastSoftwares.upd C:\Program Files\instant access\Center\SerialPlayer.upd C:\Program Files\instant access\Center\SerialPlayers.upd C:\Program Files\instant access\Center\VideoZapping.upd C:\Program Files\instant access\Dialer\1068908513\external-api.dlv4.com\hits\a3c326271c5745ff1537744a179978c4 C:\Program Files\instant access\Dialer\1068908513\external-api.dlv4.com\js\d812e91df9363df4b5f91ba9c63f9709 C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\button.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_01.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_02.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_03.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_05.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_06.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_07.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\50292\images\index_08.gif C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\d27e996a94e9a46ac69b6602c24936ec.html C:\Program Files\instant access\Dialer\1068908513\fp.pc-on-internet.com\d27e996a94e9a46ac69b6602c24936ec.html_0.loginvis C:\Program Files\instant access\Dialer\1099027401\external-api.dlv4.com\hits\dc32306f0523ec045960e1736719c341 C:\Program Files\instant access\Dialer\1099027401\external-api.dlv4.com\js\14a558dd1fc605c74437698110b5ca5d C:\Program Files\instant access\Dialer\1099027401\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\1099027401\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\1099027401\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html C:\Program Files\instant access\Dialer\1099027401\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html_0.loginvis C:\Program Files\instant access\Dialer\157494189\external-api.dlv4.com\hits\d4efd985048766046a63a1309653cdcd C:\Program Files\instant access\Dialer\157494189\external-api.dlv4.com\js\7948af689531620ed9e439884b734e69 C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\button.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_01.jpg C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_02.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_03.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_04.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_05.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_06.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_07.gif C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_08.jpg C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\50251\images\index_10.jpg C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\fc5ab0cd68f45daf61904a61d08d7890.html C:\Program Files\instant access\Dialer\157494189\fp.pc-on-internet.com\fc5ab0cd68f45daf61904a61d08d7890.html_0.loginvis C:\Program Files\instant access\Dialer\1621273\external-api.dlv4.com\hits\df8b26489579d4f38f7858cc54164efc C:\Program Files\instant access\Dialer\1621273\external-api.dlv4.com\js\14a558dd1fc605c74437698110b5ca5d C:\Program Files\instant access\Dialer\1621273\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\1621273\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\1621273\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html C:\Program Files\instant access\Dialer\1621273\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html_0.loginvis C:\Program Files\instant access\Dialer\163748492\external-api.dlv4.com\hits\a85f77aba23b2f6d4416990d23e2f10b C:\Program Files\instant access\Dialer\163748492\external-api.dlv4.com\js\a05a90bdb0668ffd0cde182657a748ca C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\05627ceec1467caf0c61f1880f005929.html C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\05627ceec1467caf0c61f1880f005929.html_0.loginvis C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\bg.gif C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\button.jpg C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\button1.jpg C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\button2.jpg C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\index_01.gif C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\index_03.jpg C:\Program Files\instant access\Dialer\163748492\fp.pc-on-internet.com\50081\images\index_05.jpg C:\Program Files\instant access\Dialer\186585212\external-api.dlv4.com\hits\2b72e6573153a25b72d757b09c082e29 C:\Program Files\instant access\Dialer\186585212\external-api.dlv4.com\js\aa68a6836731516c1e1dc37f6022aa1a C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\button.gif C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\index_01.jpg C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\index_02.jpg C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\index_04.jpg C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\index_05.jpg C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\50181\images\index_06.jpg C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\71051d0d1d3a202df504ee72850538d5.html C:\Program Files\instant access\Dialer\186585212\fp.pc-on-internet.com\71051d0d1d3a202df504ee72850538d5.html_0.loginvis C:\Program Files\instant access\Dialer\272951092\external-api.dlv4.com\hits\9799986a63060bbcecc384039365dead C:\Program Files\instant access\Dialer\272951092\external-api.dlv4.com\js\2d9082760d822d2110479d8cbd302dfe C:\Program Files\instant access\Dialer\272951092\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\272951092\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\272951092\fp.pc-on-internet.com\f4730f3da6c854e1e35fccbbfee49734.html C:\Program Files\instant access\Dialer\272951092\fp.pc-on-internet.com\f4730f3da6c854e1e35fccbbfee49734.html_0.loginvis C:\Program Files\instant access\Dialer\274167769\external-api.dlv4.com\hits\b575dca887cbcaf2e52af00e3f798193 C:\Program Files\instant access\Dialer\274167769\external-api.dlv4.com\js\af9a366389fc22b0a3812820e038c083 C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\50220\images\button.gif C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\50220\images\index_01.jpg C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\50220\images\index_02.jpg C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\50220\images\index_03.jpg C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\50220\images\index_04.jpg C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\fad760c23f26676ab6f3568066a312c6.html C:\Program Files\instant access\Dialer\274167769\fp.pc-on-internet.com\fad760c23f26676ab6f3568066a312c6.html_0.loginvis C:\Program Files\instant access\Dialer\294323135\external-api.dlv4.com\hits\529bc46a097aa41f7dd766eca77b510a C:\Program Files\instant access\Dialer\294323135\external-api.dlv4.com\js\4db8db423ef669eb37b064bb1272a0a1 C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\bg.jpg C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\button.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_01.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_02.jpg C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_03.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_04.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_05.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\50256\images\index_07.gif C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\cce3fb1395a334a7cffe7017d4bdcc2f.html C:\Program Files\instant access\Dialer\294323135\fp.pc-on-internet.com\cce3fb1395a334a7cffe7017d4bdcc2f.html_0.loginvis C:\Program Files\instant access\Dialer\380395190\external-api.dlv4.com\hits\196e6125c34d49a8b7558906cfaf3c56 C:\Program Files\instant access\Dialer\380395190\external-api.dlv4.com\js\470deedfb16d28cecd335e5e4fa63a43 C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\button.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_01.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_02.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_03.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_05.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_06.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_07.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\50292\images\index_08.gif C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\e6b5763e3f2f2a7697e5e9f1291092a1.html C:\Program Files\instant access\Dialer\380395190\fp.pc-on-internet.com\e6b5763e3f2f2a7697e5e9f1291092a1.html_0.loginvis C:\Program Files\instant access\Dialer\418334578\external-api.dlv4.com\hits\82f524970884e21105c9e9bed119a174 C:\Program Files\instant access\Dialer\418334578\external-api.dlv4.com\js\c5e12543a22d2ae7f81bf1c92715caa0 C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\bckg.gif C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\button.gif C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\index_01.gif C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\index_02.gif C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\index_03.jpg C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\50255\images\index_05.jpg C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\8170731778368ec85318fecfcbe0ed61.html C:\Program Files\instant access\Dialer\418334578\fp.pc-on-internet.com\8170731778368ec85318fecfcbe0ed61.html_0.loginvis C:\Program Files\instant access\Dialer\456644972\external-api.dlv4.com\hits\57051e430cc65cd2e71941dfc5680cc9 C:\Program Files\instant access\Dialer\456644972\external-api.dlv4.com\js\5617979f66c10bf6e834ef5d214e935e C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\50182\images\button.gif C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\50182\images\index_01.jpg C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\50182\images\index_02.jpg C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\50182\images\index_03.jpg C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\50182\images\index_04.jpg C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\72042d0dbd413266ec158f5d0bed13ea.html C:\Program Files\instant access\Dialer\456644972\fp.pc-on-internet.com\72042d0dbd413266ec158f5d0bed13ea.html_0.loginvis C:\Program Files\instant access\Dialer\505109222\external-api.dlv4.com\hits\e7d3c91af016689b15e113a14f07332c C:\Program Files\instant access\Dialer\505109222\external-api.dlv4.com\js\aa68a6836731516c1e1dc37f6022aa1a C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\button.gif C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\index_01.jpg C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\index_02.jpg C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\index_04.jpg C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\index_05.jpg C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\50181\images\index_06.jpg C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\71051d0d1d3a202df504ee72850538d5.html C:\Program Files\instant access\Dialer\505109222\fp.pc-on-internet.com\71051d0d1d3a202df504ee72850538d5.html_0.loginvis C:\Program Files\instant access\Dialer\521470466\external-api.dlv4.com\hits\97a7e61e9578b0a18f0dbf4e63f793ba C:\Program Files\instant access\Dialer\521470466\external-api.dlv4.com\js\d11a84fdaaba591a4690610bac0e0cb8 C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\button.gif C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\index_01.jpg C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\index_02.jpg C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\index_04.jpg C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\index_05.jpg C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\50181\images\index_06.jpg C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html C:\Program Files\instant access\Dialer\521470466\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html_0.loginvis C:\Program Files\instant access\Dialer\554183579\external-api.dlv4.com\hits\089b210456791d00febbfd4250499bb2 C:\Program Files\instant access\Dialer\554183579\external-api.dlv4.com\js\14a558dd1fc605c74437698110b5ca5d C:\Program Files\instant access\Dialer\554183579\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\554183579\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\554183579\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html C:\Program Files\instant access\Dialer\554183579\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html_0.loginvis C:\Program Files\instant access\Dialer\560252678\external-api.dlv4.com\hits\e80b3420c97f7978013140a8dfd74db0 C:\Program Files\instant access\Dialer\560252678\external-api.dlv4.com\js\d11a84fdaaba591a4690610bac0e0cb8 C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\button.gif C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\index_01.jpg C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\index_02.jpg C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\index_04.jpg C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\index_05.jpg C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\50181\images\index_06.jpg C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html C:\Program Files\instant access\Dialer\560252678\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html_0.loginvis C:\Program Files\instant access\Dialer\584121834\external-api.dlv4.com\hits\1f68f0f0dd923337303ebe5679bc71fc C:\Program Files\instant access\Dialer\584121834\external-api.dlv4.com\js\470deedfb16d28cecd335e5e4fa63a43 C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\button.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_01.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_02.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_03.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_05.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_06.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_07.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\50292\images\index_08.gif C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\e6b5763e3f2f2a7697e5e9f1291092a1.html C:\Program Files\instant access\Dialer\584121834\fp.pc-on-internet.com\e6b5763e3f2f2a7697e5e9f1291092a1.html_0.loginvis C:\Program Files\instant access\Dialer\598940351\external-api.dlv4.com\hits\7957c7d9feea95e1911cf6db48247863 C:\Program Files\instant access\Dialer\598940351\external-api.dlv4.com\js\69ce5aebfb6988e608304a4c29b13b63 C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\3fd4e17a16e53b8c058a84f41f7aba5b.html C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\3fd4e17a16e53b8c058a84f41f7aba5b.html_0.loginvis C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\button.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_01.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_02.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_03.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_04.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_05.jpg C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_07.jpg C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_09.gif C:\Program Files\instant access\Dialer\598940351\fp.pc-on-internet.com\50287\images\index_10.gif C:\Program Files\instant access\Dialer\624433006\external-api.dlv4.com\hits\a0b31edb48d79d32056886ce0a85a7f1 C:\Program Files\instant access\Dialer\624433006\external-api.dlv4.com\js\f20a86072695446e61cd8752f87838cf C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\3a97170a700cd0a18b53f30683e99ac0.html C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\3a97170a700cd0a18b53f30683e99ac0.html_0.loginvis C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\alert.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\button.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\index_01.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\index_02.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\index_04.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\index_07.gif C:\Program Files\instant access\Dialer\624433006\fp.pc-on-internet.com\50296\images\index_11.gif C:\Program Files\instant access\Dialer\719095612\external-api.dlv4.com\hits\0216e34be9412327b669f48527eb09f9 C:\Program Files\instant access\Dialer\719095612\external-api.dlv4.com\js\f20a86072695446e61cd8752f87838cf C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\3a97170a700cd0a18b53f30683e99ac0.html C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\3a97170a700cd0a18b53f30683e99ac0.html_0.loginvis C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\alert.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\button.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\index_01.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\index_02.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\index_04.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\index_07.gif C:\Program Files\instant access\Dialer\719095612\fp.pc-on-internet.com\50296\images\index_11.gif C:\Program Files\instant access\Dialer\721992251\external-api.dlv4.com\hits\8d6bfba36662e731e46d5de46697f4fb C:\Program Files\instant access\Dialer\721992251\external-api.dlv4.com\js\af9a366389fc22b0a3812820e038c083 C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\50220\images\button.gif C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\50220\images\index_01.jpg C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\50220\images\index_02.jpg C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\50220\images\index_03.jpg C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\50220\images\index_04.jpg C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\fad760c23f26676ab6f3568066a312c6.html C:\Program Files\instant access\Dialer\721992251\fp.pc-on-internet.com\fad760c23f26676ab6f3568066a312c6.html_0.loginvis C:\Program Files\instant access\Dialer\804505186\external-api.dlv4.com\hits\78bd9ea6fc7905f8662828283a4585a6 C:\Program Files\instant access\Dialer\804505186\external-api.dlv4.com\js\2d9082760d822d2110479d8cbd302dfe C:\Program Files\instant access\Dialer\804505186\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\804505186\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\804505186\fp.pc-on-internet.com\f4730f3da6c854e1e35fccbbfee49734.html C:\Program Files\instant access\Dialer\804505186\fp.pc-on-internet.com\f4730f3da6c854e1e35fccbbfee49734.html_0.loginvis C:\Program Files\instant access\Dialer\80841852\external-api.dlv4.com\hits\0de5b3967b488c433da5dc8782466cd0 C:\Program Files\instant access\Dialer\80841852\external-api.dlv4.com\js\5f4956ed4f2b9cd6e7bad3c11404139f C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\button.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_01.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_02.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_03.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_04.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_05.jpg C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_07.jpg C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_09.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\50287\images\index_10.gif C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\a0942ec87336f906e04220312d8ad401.html C:\Program Files\instant access\Dialer\80841852\fp.pc-on-internet.com\a0942ec87336f906e04220312d8ad401.html_0.loginvis C:\Program Files\instant access\Dialer\822341018\external-api.dlv4.com\hits\54f76821367890a56c34ec40aeac73de C:\Program Files\instant access\Dialer\822341018\external-api.dlv4.com\js\d11a84fdaaba591a4690610bac0e0cb8 C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\button.gif C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\index_01.jpg C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\index_02.jpg C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\index_04.jpg C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\index_05.jpg C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\50181\images\index_06.jpg C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html C:\Program Files\instant access\Dialer\822341018\fp.pc-on-internet.com\920aef3f353fb396a2d6fdd28913e3ce.html_0.loginvis C:\Program Files\instant access\Dialer\82280516\external-api.dlv4.com\hits\c9dcb2b4f682343eef65aede45f9a685 C:\Program Files\instant access\Dialer\82280516\external-api.dlv4.com\js\14a558dd1fc605c74437698110b5ca5d C:\Program Files\instant access\Dialer\82280516\fp.pc-on-internet.com\50264\images\button.gif C:\Program Files\instant access\Dialer\82280516\fp.pc-on-internet.com\50264\images\loading.gif C:\Program Files\instant access\Dialer\82280516\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html C:\Program Files\instant access\Dialer\82280516\fp.pc-on-internet.com\63226975490b1a709159c220af50b0a0.html_0.loginvis C:\Program Files\instant access\Dialer\846624669\external-api.dlv4.com\hits\d6d465b074580f59b24d1f17d4fe339c C:\Program Files\instant access\Dialer\846624669\external-api.dlv4.com\js\91b9dfea79ccb237d21d43369e33da94 C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\bckg.gif C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\button.gif C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_01.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_02.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_04.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_05.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_06.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\50265\images\index_07.jpg C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\fa58d0d6a866a30d8141ef5598cc5b5e.html C:\Program Files\instant access\Dialer\846624669\fp.pc-on-internet.com\fa58d0d6a866a30d8141ef5598cc5b5e.html_0.loginvis C:\Program Files\instant access\Dialer\856246608\external-api.dlv4.com\hits\c416050f71bc09427545774f2cde233e C:\Program Files\instant access\Dialer\856246608\external-api.dlv4.com\js\a66d7e79153637be56e2091605213d8d C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\bckg.gif C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\button.gif C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\index_01.jpg C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\index_03.jpg C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\index_04.jpg C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\index_05.jpg C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\50267\images\index_06.jpg C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\916c19684ce7f2069b58aef750de3ad9.html C:\Program Files\instant access\Dialer\856246608\fp.pc-on-internet.com\916c19684ce7f2069b58aef750de3ad9.html_0.loginvis C:\Program Files\instant access\Dialer\879327509\external-api.dlv4.com\hits\5a60b519d7d083e99855bfa703540591 C:\Program Files\instant access\Dialer\879327509\external-api.dlv4.com\js\a66d7e79153637be56e2091605213d8d C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\bckg.gif C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\button.gif C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\index_01.jpg C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\index_03.jpg C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\index_04.jpg C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\index_05.jpg C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\50267\images\index_06.jpg C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\916c19684ce7f2069b58aef750de3ad9.html C:\Program Files\instant access\Dialer\879327509\fp.pc-on-internet.com\916c19684ce7f2069b58aef750de3ad9.html_0.loginvis C:\Program Files\instant access\Dialer\976752259\external-api.dlv4.com\hits\6de7f409d51d920ea5864c671b26e915 C:\Program Files\instant access\Dialer\976752259\external-api.dlv4.com\js\c01a4acc6ba726c5c139f088abbb7ea9 C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\bckg.gif C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\button.gif C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\index_01.gif C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\index_02.gif C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\index_03.jpg C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\50255\images\index_05.jpg C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\ff914a877404c431b11c69fbe02cd27e.html C:\Program Files\instant access\Dialer\976752259\fp.pc-on-internet.com\ff914a877404c431b11c69fbe02cd27e.html_0.loginvis C:\Program Files\instant access\Dialer\995257283\external-api.dlv4.com\hits\c28c641f9cfda60b0dd4a69d990dc969 C:\Program Files\instant access\Dialer\995257283\external-api.dlv4.com\js\7fd0a5f1c396c2d82463532c058e9e4d C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\bckg.gif C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\button.gif C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\index_01.jpg C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\index_02.jpg C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\index_04.jpg C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\index_05.jpg C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\50243\images\index_06.jpg C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\9b7c88dc3898a497c8e52d59197a25cc.html C:\Program Files\instant access\Dialer\995257283\fp.pc-on-internet.com\9b7c88dc3898a497c8e52d59197a25cc.html_0.loginvis C:\WINDOWS\evgratsm.dll C:\WINDOWS\qndsfmao.dll C:\WINDOWS\system32\byXRhGxv.dll C:\WINDOWS\system32\dpwrbkef.ini C:\WINDOWS\system32\fekbrwpd.dll C:\WINDOWS\system32\hgGxVMDv.dll C:\WINDOWS\system32\jseqyhkq.ini C:\WINDOWS\system32\mjacnxar.dll C:\WINDOWS\system32\NXxEKRqr.ini C:\WINDOWS\system32\NXxEKRqr.ini2 C:\WINDOWS\system32\qkhyqesj.dll C:\WINDOWS\system32\rqRKExXN.dll C:\WINDOWS\system32\rujcyz.dll C:\WINDOWS\system32\uijnrc.dll C:\WINDOWS\system32\ukoewvqb.dll D:\Documents and Settings\franck\Local Settings\Application Data\bmylpjobui.dat D:\Documents and Settings\franck\Local Settings\Application Data\bmylpjobui_nav.dat D:\Documents and Settings\franck\Local Settings\Application Data\bmylpjobui_navps.dat . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-20 to 2008-07-20 )))))))))))))))))))))))))))))))))))) . 2008-07-20 16:20 . 2008-07-20 20:27 <REP> d-------- D:\Documents and Settings\franck\.housecall6.6 2008-07-20 16:10 . 2008-07-20 16:15 40 --a------ C:\WINDOWS\TSC.INI 2008-07-20 16:09 . 2008-07-20 16:09 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL 2008-07-20 16:09 . 2008-07-20 16:09 286,720 --a------ C:\WINDOWS\PATCH.EXE 2008-07-20 16:09 . 2008-07-20 16:09 69,689 --a------ C:\WINDOWS\UNZIP.DLL 2008-07-20 13:49 . 2008-07-20 13:49 <REP> d-------- D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-07-08 12:39 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys 2008-06-20 19:41 . 2008-06-20 19:41 247,808 --------- C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 12:44 . 2008-06-20 12:44 138,368 --------- C:\WINDOWS\system32\dllcache\afd.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-20 20:45 --------- d-----w D:\Documents and Settings\franck\Application Data\OpenOffice.org2 2008-07-20 20:45 --------- d-----w D:\Documents and Settings\franck\Application Data\Free Download Manager 2008-07-09 10:30 --------- d-----w C:\Program Files\eMule 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 07:44 --------- d-----w C:\Program Files\Orange 2008-06-11 07:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-11 07:34 --------- d-----w D:\Documents and Settings\franck\Application Data\InstallShield 2008-06-11 07:34 --------- d-----w C:\Program Files\Securitoo 2008-06-11 07:34 --------- d-----w C:\Program Files\SAGEM . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 09:51 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360] "Orange Desktop Search"="C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" [2007-01-17 16:10 4938016] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe" [2008-01-01 00:05 2449455] "s9201"="D:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect\wspwprtct.exe" [2008-07-20 22:32 1253888] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 14:00 208952] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 14:00 455168] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe" [2005-06-03 03:52 36975] "Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 13:03 310272] "PCMService"="c:\APPS\Powercinema\PCMService.exe" [2006-02-23 12:08 147456] "DXM6Patch_981116"="C:\WINDOWS\p_981116.exe" [1998-11-30 19:04 497376] "RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-05-26 13:35 26112] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-26 13:35 98304] "ORAHSSSessionManager"="C:\Program Files\Orange\SessionManager\SessionManager.exe" [2007-09-25 19:10 102400] "SystrayORAHSS"="C:\Program Files\Orange\Systray\SystrayApp.exe" [2007-09-25 20:08 94208] "VTTimer"="VTTimer.exe" [2005-03-08 04:33 53248 C:\WINDOWS\system32\VTTimer.exe] "VTTrayp"="VTtrayp.exe" [2005-11-01 05:15 163840 C:\WINDOWS\system32\VTTrayp.exe] "SoundMan"="SOUNDMAN.EXE" [2005-01-20 21:04 77824 C:\WINDOWS\SOUNDMAN.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\\AOL 9.0\\aol.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"= "%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"= "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\eMule\\emule.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "C:\\Program Files\\Free Download Manager\\fdm.exe"= "C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37] S3 CnxEtP;ZTE ZXDSL852 Adapter Filter Driver;C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [] S3 CnxEtU;ZTE ZXDSL852 Interface Device Driver;C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [] S3 CnxTgNW;ZTE ZXDSL852 WAN PPPoA Adapter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [] S3 dump_wmimmc;dump_wmimmc;C:\WINDOWS\system32\drivers\dump_wmimmc.sys [2007-04-23 11:08] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dab0dbf1-38f6-11dc-a7ad-00d0d077e5af}] \Shell\AutoRun\command - F:\LaunchU3.exe . - - - - ORPHANS REMOVED - - - - HKLM-Run-LVCOMS - C:\WINDOWS\system32\LVCOMS.EXE HKLM-Run-QCDriverInstaller - C:\Program Files\Fichiers communs\Logitech\QCDriver\QDRVINS.exe HKLM-Run-90e44716 - C:\WINDOWS\system32\fekbrwpd.dll HKU-Default-RunOnce-^SetupICWDesktop - (no file) . ------- Supplementary Scan ------- . R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 R1 -: HKCU-Internet Connection Wizard,ShellNext = hxxp://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=OEM4 O8 -: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html O8 -: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html O8 -: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 -: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 -: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 -: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O16 -: {011F473E-0880-43D4-99F3-F490A84128AE} - hxxp://jeuxenligne.orange.fr/orange2.0/games/channel--110167437/lc--fr/room--b4c809a3-acb1-4d53-b1c4-43655215b9bc/online/ButterflyEscape/GenimoWebGamesControl.cab C:\WINDOWS\Downloaded Program Files\GenimoWebGamesControl.inf C:\WINDOWS\Downloaded Program Files\GenimoWebGamesControl.ocx O16 -: {49E67060-2C0D-415E-94C7-52A49F73B2F1} - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/PiratePoppers.1.0.0.39.cab C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.39.inf C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.39.dll O16 -: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab C:\WINDOWS\Downloaded Program Files\DinerDash2_fr.1.0.0.70.inf C:\WINDOWS\Downloaded Program Files\DinerDash2_fr.1.0.0.70.dll O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game04.zylom.com/activex/zylomgamesplayer.cab C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf C:\WINDOWS\Downloaded Program Files\zylomgamesplayer.dll O16 -: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} - hxxp://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab C:\WINDOWS\Downloaded Program Files\OberonGameHost_dbg.inf C:\WINDOWS\Downloaded Program Files\OberonGameHost.dll O16 -: {FC4CAF5F-91BD-4DD9-ADC1-F3C737E37BC4} - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/Sweetopia.1.0.0.46.cab C:\WINDOWS\Downloaded Program Files\Sweetopia.1.0.0.46.inf C:\WINDOWS\Downloaded Program Files\Sweetopia.1.0.0.46.dll ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-20 22:47:27 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe C:\APPS\HIDSERVICE\HidService.exe C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe C:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe C:\Program Files\Orange\Launcher\Launcher.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.bin C:\Program Files\Orange\Deskboard\Deskboard.exe C:\Program Files\Orange\Connectivity\ConnectivityManager.exe C:\Program Files\Orange\Connectivity\corecom\CoreCom.exe C:\Program Files\Orange\Connectivity\corecom\OraConfigRecover.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe . ************************************************************************** . Temps d'accomplissement: 2008-07-20 22:56:26 - machine was rebooted ComboFix-quarantined-files.txt 2008-07-20 20:55:22 Pre-Run: 19,943,510,016 octets libres Post-Run: 19,919,085,568 octets libres 489 --- E O F --- 2008-07-09 08:44:55 Bonne lecture

bonsoir à tous pourriez vous m'aider à ressoudre mon probleme : mon anti-virus avast me signal que j'ai un virus sur mon ordinateur. Il revient toutes les 5 minutes alors que je le mais en quarantaine. Merci d'avance (je suis novice dans le monde informatique merci pour les explications claires que vous me fournirez) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:27:46, on 20/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\system32\svchost.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\VTtrayp.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe C:\APPS\Powercinema\PCMService.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Orange\Systray\SystrayApp.exe C:\APPS\SMP\SmpSys.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Orange\Launcher\Launcher.exe C:\Program Files\Free Download Manager\fdm.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe D:\DOCUME~1\franck\LOCALS~1\Temp\smchk.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Orange\Deskboard\deskboard.exe C:\Program Files\Orange\connectivity\connectivitymanager.exe C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Orange\browser\browser.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe D:\Documents and Settings\franck\Bureau\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.imesh.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://format.packardbell.com/cgi-bin/redi...=6&key=OEM4 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A O4 - HKLM\..\Run: [LVCOMS] C:\WINDOWS\system32\LVCOMS.EXE O4 - HKLM\..\Run: [QCDriverInstaller] C:\Program Files\Fichiers communs\Logitech\QCDriver\QDRVINS.exe /addrun /l 1036 /LaunchAtStart O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [90e44716] rundll32.exe "C:\WINDOWS\system32\qkhyqesj.dll",b O4 - HKCU\..\Run: [smpcSys] C:\APPS\SMP\SmpSys.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Orange Desktop Search] "C:\Program Files\Orange HSS\Orange Desktop Search\OrangeDesktopSearch.exe" /tray O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKCU\..\Run: [installProgram] D:\DOCUME~1\franck\LOCALS~1\Temp\smchk.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O15 - Trusted Zone: http://www.orange.fr O16 - DPF: {011F473E-0880-43D4-99F3-F490A84128AE} (GenimoWebGames Control) - http://jeuxenligne.orange.fr/orange2.0/gam...amesControl.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {49E67060-2C0D-415E-94C7-52A49F73B2F1} (CPlayFirstPiratePoppersControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/PiratePoppers.1.0.0.39.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119fd.bay119.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/GameShell/onl...mjolauncher.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/Gam...ronGameHost.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/popcaploader_v6.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {FC4CAF5F-91BD-4DD9-ADC1-F3C737E37BC4} (CPlayFirstSweetopiaControl Object) - file:///D:/Documents%20and%20Settings/franck/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/Sweetopia.1.0.0.46.cab O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- End of file - 13524 bytes