max26101992

-----------\\ ToolBar S&D 1.2.2 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon XP 2400+ ) BIOS : BIOS Date: 07/11/03 17:19:14 Ver: 08.00.08 USER : Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.454 (Not Activated) Firewall : Kaspersky Internet Security 8.0.0.454 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total : 74 Go Free : 50 Go D:\ (CD or DVD) E:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 ) Option : [2] ( 2008-10-07|18:35 ) -----------\\ SUPPRESSION Supprime! - C:\Program Files\AskSBar\bar Supprime! - C:\Program Files\AskSBar\SrchAstt Supprime! - C:\Program Files\Gossiper\GossiperToolbarHelper.exe Supprime! - C:\Program Files\Gossiper\INSTALL.LOG Supprime! - C:\Program Files\Gossiper\tbGoss.dll Supprime! - C:\Program Files\Gossiper\toolbar.cfg Supprime! - C:\Program Files\Gossiper\UNWISE.EXE Supprime! - C:\WINDOWS\iun6002.exe Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsg32.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nskE.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsl31.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nso8.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nso9.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsq39.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsq3A.tmp Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsuD.tmp Supprime! - C:\Program Files\AskSBar Supprime! - C:\Program Files\Gossiper -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ Extensions (Propriétaire) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Default_Search_URL"="http://srch-fr8.hpwis.com/"'>http://srch-fr8.hpwis.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.msn.com/" "Search Bar"="http://srch-fr8.hpwis.com/" --------------------\\ Recherche d'autres infections C:\WINDOWS\system32\SAyxyccf.ini C:\WINDOWS\system32\SAyxyccf.ini2 ==> VUNDO <== --------------------\\ Cracks & Keygens .. C:\DOCUME~1\PROPRI~1\Local Settings\Application Data\Opera\Opera\profile\bt_metadata\Lavalys.EVEREST.Ultimate.Edition.v4.60.1500.Multilingual.Incl.Keygen-BRD.rar.dat C:\DOCUME~1\PROPRI~1\Recent\Lavalys.EVEREST.Ultimate.Edition.v4.60.1500.Multilingual.Incl.Keygen-BRD.lnk 1 - "C:\ToolBar SD\TB_1.txt" - 2008-10-07|18:33 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 2008-10-07|18:39 - Option : [2] -----------\\ Fin du rapport a 18:39:20.70 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:40, on 2008-10-07 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Spyware Terminator\sp_rsser.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamtrayctrl.exe C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\ALCXMNTR.EXE C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe C:\WINDOWS\vsnpstd.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\Belkin\Bluetooth Software\BTTray.exe C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr8.hpwis.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr8.hpwis.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll R3 - URLSearchHook: (no name) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - (no file) O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: (no name) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - (no file) O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [storageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [spywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" O4 - HKLM\..\Run: [dc485a3b] rundll32.exe "C:\WINDOWS\system32\gybdesad.dll",b O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: BTTray.lnk = ? O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1198839707421 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1198839764859 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe -- End of file - 10108 bytes

-----------\\ ToolBar S&D 1.2.2 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon XP 2400+ ) BIOS : BIOS Date: 07/11/03 17:19:14 Ver: 08.00.08 USER : Propriétaire ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.454 (Not Activated) Firewall : Kaspersky Internet Security 8.0.0.454 (Not Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total : 74 Go Free : 50 Go D:\ (CD or DVD) E:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 ) Option : [1] ( 2008-10-07|18:30 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\Program Files\AskSBar C:\Program Files\AskSBar\bar C:\Program Files\AskSBar\SrchAstt C:\Program Files\Gossiper C:\Program Files\Gossiper\GossiperToolbarHelper.exe C:\Program Files\Gossiper\INSTALL.LOG C:\Program Files\Gossiper\tbGoss.dll C:\Program Files\Gossiper\toolbar.cfg C:\Program Files\Gossiper\UNWISE.EXE C:\WINDOWS\iun6002.exe C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsg32.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nskE.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsl31.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nso8.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nso9.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsq39.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsq3A.tmp C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsuD.tmp -----------\\ Extensions (Propriétaire) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Default_Search_URL"="http://srch-fr8.hpwis.com/"'>http://srch-fr8.hpwis.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.google.com" "Search Bar"="http://srch-fr8.hpwis.com/" --------------------\\ Recherche d'autres infections C:\WINDOWS\system32\SAyxyccf.ini C:\WINDOWS\system32\SAyxyccf.ini2 ==> VUNDO <== --------------------\\ Cracks & Keygens .. C:\DOCUME~1\PROPRI~1\Local Settings\Application Data\Opera\Opera\profile\bt_metadata\Lavalys.EVEREST.Ultimate.Edition.v4.60.1500.Multilingual.Incl.Keygen-BRD.rar.dat C:\DOCUME~1\PROPRI~1\Recent\Lavalys.EVEREST.Ultimate.Edition.v4.60.1500.Multilingual.Incl.Keygen-BRD.lnk 1 - "C:\ToolBar SD\TB_1.txt" - 2008-10-07|18:33 - Option : [1] -----------\\ Fin du rapport a 18:33:58.84

prof de sport ok mais prof de français math c'est quand même autre chose

taux de réussite aux brevet 2006-2007:48% 2007-2008:52% pas un jour sans l'absence d'un prof quand même de sérieux problème pour être aux niveaux national... j'ai un ami il été l'un des meilleur sinon le meilleur de mon collège il est aller au lycée carnot à dijon il n'a pas le niveaux comparé aux autre... donc un peut d'indulgence svp

salut à tous , j'ai fait une analyse avec mbam il me detecte plusieurs trojan vundo.H je vous poste les log de mbam , hijackthis et virtumundobegone mbam: Malwarebytes' Anti-Malware 1.28 Version de la base de données: 1222 Windows 5.1.2600 Service Pack 3 2008-10-07 15:10:13 mbam-log-2008-10-07 (15-10-13).txt Type de recherche: Examen rapide Eléments examinés: 50281 Temps écoulé: 5 minute(s), 50 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 2 Clé(s) du Registre infectée(s): 8 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 2 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 8 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): C:\WINDOWS\system32\nvbfgsng.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\gbgorxou.dll (Trojan.Vundo.H) -> Delete on reboot. Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2a2462ba-8a0d-436e-8811-66e69ad36b7d} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssqolbsp (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{2a2462ba-8a0d-436e-8811-66e69ad36b7d} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3396fe42-8f5d-463b-be54-d18484172963} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{3396fe42-8f5d-463b-be54-d18484172963} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d739581e-c7f8-4c4a-b049-3684cf04dae1} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{d739581e-c7f8-4c4a-b049-3684cf04dae1} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{2a2462ba-8a0d-436e-8811-66e69ad36b7d} (Trojan.Vundo.H) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\fccyxyas -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\fccyxyas -> Delete on reboot. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\WINDOWS\system32\SAyxyccf.ini (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\SAyxyccf.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wwizdl.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\nvbfgsng.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\gnsgfbvn.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\gbgorxou.dll (Trojan.Vundo.H) -> Delete on reboot. C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\4J3LWWDT\nd82m0[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\DDLNQ6CY\upd105320[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully. hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:29, on 2008-10-07 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Spyware Terminator\sp_rsser.exe C:\WINDOWS\System32\svchost.exe C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\ALCXMNTR.EXE C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamtrayctrl.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe C:\WINDOWS\vsnpstd.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Belkin\Bluetooth Software\BTTray.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr8.hpwis.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr8.hpwis.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll R3 - URLSearchHook: (no name) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - (no file) R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: (no name) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - (no file) O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [storageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [spywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" O4 - HKLM\..\Run: [dc485a3b] rundll32.exe "C:\WINDOWS\system32\gybdesad.dll",b O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: BTTray.lnk = ? O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1198839707421 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1198839764859 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe -- End of file - 10260 bytes virtumundobegone: [10/07/2008, 15:07:48] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Propriétaire\Bureau\VirtumundoBeGone.exe" ) [10/07/2008, 15:08:01] - Detected System Information: [10/07/2008, 15:08:04] - Windows Version: 5.1.2600, Service Pack 3 [10/07/2008, 15:08:07] - Current Username: Propriétaire (Admin) [10/07/2008, 15:08:08] - Windows is in NORMAL mode. [10/07/2008, 15:08:10] - Searching for Browser Helper Objects: [10/07/2008, 15:08:11] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:08:13] - BHO 2: {2A2462BA-8A0D-436E-8811-66E69AD36B7D} () [10/07/2008, 15:08:15] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:08:18] - Checking for HKLM\...\Winlogon\Notify\ssqoLBsP [10/07/2008, 15:08:21] - Found: HKLM\...\Winlogon\Notify\ssqoLBsP - This is probably Virtumundo. [10/07/2008, 15:08:22] - Assigning {2A2462BA-8A0D-436E-8811-66E69AD36B7D} MSEvents Object [10/07/2008, 15:08:23] - BHO list has been changed! Starting over... [10/07/2008, 15:08:24] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:08:26] - BHO 2: {2A2462BA-8A0D-436E-8811-66E69AD36B7D} (MSEvents Object) [10/07/2008, 15:08:27] - ALERT: Found MSEvents Object! [10/07/2008, 15:08:30] - BHO 3: {3396FE42-8F5D-463B-BE54-D18484172963} () [10/07/2008, 15:08:31] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:08:33] - Checking for HKLM\...\Winlogon\Notify\fccyxyAS [10/07/2008, 15:08:35] - Key not found: HKLM\...\Winlogon\Notify\fccyxyAS, continuing. [10/07/2008, 15:08:38] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [10/07/2008, 15:08:40] - BHO 5: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live) [10/07/2008, 15:08:43] - BHO 6: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) [10/07/2008, 15:08:46] - BHO 7: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO) [10/07/2008, 15:08:46] - BHO 8: {d739581e-c7f8-4c4a-b049-3684cf04dae1} () [10/07/2008, 15:08:47] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:08:51] - Checking for HKLM\...\Winlogon\Notify\wwizdl [10/07/2008, 15:08:53] - Key not found: HKLM\...\Winlogon\Notify\wwizdl, continuing. [10/07/2008, 15:08:53] - Finished Searching Browser Helper Objects [10/07/2008, 15:08:54] - *** Detected MSEvents Object [10/07/2008, 15:08:56] - Trying to remove MSEvents Object... [10/07/2008, 15:11:56] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Propriétaire\Bureau\VirtumundoBeGone.exe" ) [10/07/2008, 15:12:07] - Detected System Information: [10/07/2008, 15:12:12] - Windows Version: 5.1.2600, Service Pack 3 [10/07/2008, 15:12:12] - Current Username: Propriétaire (Admin) [10/07/2008, 15:12:12] - Windows is in NORMAL mode. [10/07/2008, 15:12:13] - Searching for Browser Helper Objects: [10/07/2008, 15:12:13] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:12:13] - BHO 2: {2A2462BA-8A0D-436E-8811-66E69AD36B7D} () [10/07/2008, 15:12:14] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:12:14] - Checking for HKLM\...\Winlogon\Notify\ssqoLBsP [10/07/2008, 15:12:15] - Found: HKLM\...\Winlogon\Notify\ssqoLBsP - This is probably Virtumundo. [10/07/2008, 15:12:15] - Assigning {2A2462BA-8A0D-436E-8811-66E69AD36B7D} MSEvents Object [10/07/2008, 15:12:16] - BHO list has been changed! Starting over... [10/07/2008, 15:12:16] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:12:16] - BHO 2: {2A2462BA-8A0D-436E-8811-66E69AD36B7D} (MSEvents Object) [10/07/2008, 15:12:19] - ALERT: Found MSEvents Object! [10/07/2008, 15:12:19] - BHO 3: {3396FE42-8F5D-463B-BE54-D18484172963} () [10/07/2008, 15:12:20] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:12:20] - Checking for HKLM\...\Winlogon\Notify\fccyxyAS [10/07/2008, 15:12:20] - Key not found: HKLM\...\Winlogon\Notify\fccyxyAS, continuing. [10/07/2008, 15:12:21] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [10/07/2008, 15:12:21] - BHO 5: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live) [10/07/2008, 15:12:21] - BHO 6: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) [10/07/2008, 15:12:22] - BHO 7: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO) [10/07/2008, 15:12:22] - Finished Searching Browser Helper Objects [10/07/2008, 15:12:23] - *** Detected MSEvents Object [10/07/2008, 15:12:23] - Trying to remove MSEvents Object... [10/07/2008, 15:12:24] - Terminating Process: IEXPLORE.EXE [10/07/2008, 15:12:31] - Terminating Process: RUNDLL32.EXE [10/07/2008, 15:12:32] - Disabling Automatic Shell Restart [10/07/2008, 15:12:33] - Terminating Process: EXPLORER.EXE [10/07/2008, 15:12:36] - Suspending the NT Session Manager System Service [10/07/2008, 15:12:37] - Terminating Windows NT Logon/Logoff Manager [10/07/2008, 15:12:41] - Re-enabling Automatic Shell Restart [10/07/2008, 15:12:43] - File to disable: C:\WINDOWS\system32\ssqoLBsP.dll [10/07/2008, 15:12:44] - Renaming C:\WINDOWS\system32\ssqoLBsP.dll -> C:\WINDOWS\system32\ssqoLBsP.dll.vir [10/07/2008, 15:12:45] - File successfully renamed! [10/07/2008, 15:12:45] - Removing HKLM\...\Browser Helper Objects\{2A2462BA-8A0D-436E-8811-66E69AD36B7D} [10/07/2008, 15:12:46] - Removing HKCR\CLSID\{2A2462BA-8A0D-436E-8811-66E69AD36B7D} [10/07/2008, 15:12:47] - Adding Kill Bit for ActiveX for GUID: {2A2462BA-8A0D-436E-8811-66E69AD36B7D} [10/07/2008, 15:12:48] - Deleting ATLEvents/MSEvents Registry entries [10/07/2008, 15:12:48] - Removing HKLM\...\Winlogon\Notify\ssqoLBsP [10/07/2008, 15:12:49] - Searching for Browser Helper Objects: [10/07/2008, 15:12:49] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:12:53] - BHO 2: {3396FE42-8F5D-463B-BE54-D18484172963} () [10/07/2008, 15:12:55] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:12:58] - Checking for HKLM\...\Winlogon\Notify\fccyxyAS [10/07/2008, 15:13:07] - Key not found: HKLM\...\Winlogon\Notify\fccyxyAS, continuing. [10/07/2008, 15:13:15] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [10/07/2008, 15:13:20] - BHO 4: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live) [10/07/2008, 15:13:21] - BHO 5: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) [10/07/2008, 15:13:22] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO) [10/07/2008, 15:13:23] - Finished Searching Browser Helper Objects [10/07/2008, 15:13:24] - Finishing up... [10/07/2008, 15:13:24] - A restart is needed. [10/07/2008, 15:13:33] - Attempting to Restart via STOP error (Blue Screen!) [10/07/2008, 15:19:30] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Propriétaire\Bureau\VirtumundoBeGone.exe" ) [10/07/2008, 15:19:42] - Detected System Information: [10/07/2008, 15:19:42] - Windows Version: 5.1.2600, Service Pack 3 [10/07/2008, 15:19:42] - Current Username: Propriétaire (Admin) [10/07/2008, 15:19:42] - Windows is in NORMAL mode. [10/07/2008, 15:19:42] - Searching for Browser Helper Objects: [10/07/2008, 15:19:42] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:19:42] - BHO 2: {46D4B632-38EE-4A16-86A6-9622E5386826} () [10/07/2008, 15:19:42] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:19:42] - Checking for HKLM\...\Winlogon\Notify\fccyxyAS [10/07/2008, 15:19:42] - Key not found: HKLM\...\Winlogon\Notify\fccyxyAS, continuing. [10/07/2008, 15:19:42] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [10/07/2008, 15:19:42] - BHO 4: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live) [10/07/2008, 15:19:42] - BHO 5: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) [10/07/2008, 15:19:42] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO) [10/07/2008, 15:19:42] - BHO 7: {e0f69398-ed9c-490e-bf4a-c300dfa3483e} () [10/07/2008, 15:19:42] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:19:42] - Checking for HKLM\...\Winlogon\Notify\ukvowz [10/07/2008, 15:19:42] - Key not found: HKLM\...\Winlogon\Notify\ukvowz, continuing. [10/07/2008, 15:19:42] - Finished Searching Browser Helper Objects [10/07/2008, 15:19:42] - Finishing up... [10/07/2008, 15:19:42] - Nothing found! Exiting... [10/07/2008, 15:20:35] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Propriétaire\Bureau\VirtumundoBeGone.exe" ) [10/07/2008, 15:20:36] - Detected System Information: [10/07/2008, 15:20:36] - Windows Version: 5.1.2600, Service Pack 3 [10/07/2008, 15:20:36] - Current Username: Propriétaire (Admin) [10/07/2008, 15:20:37] - Windows is in NORMAL mode. [10/07/2008, 15:20:37] - Searching for Browser Helper Objects: [10/07/2008, 15:20:37] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [10/07/2008, 15:20:37] - BHO 2: {46D4B632-38EE-4A16-86A6-9622E5386826} () [10/07/2008, 15:20:37] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:20:37] - Checking for HKLM\...\Winlogon\Notify\fccyxyAS [10/07/2008, 15:20:37] - Key not found: HKLM\...\Winlogon\Notify\fccyxyAS, continuing. [10/07/2008, 15:20:37] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [10/07/2008, 15:20:38] - BHO 4: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live) [10/07/2008, 15:20:38] - BHO 5: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) [10/07/2008, 15:20:38] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO) [10/07/2008, 15:20:38] - BHO 7: {e0f69398-ed9c-490e-bf4a-c300dfa3483e} () [10/07/2008, 15:20:38] - WARNING: BHO has no default name. Checking for Winlogon reference. [10/07/2008, 15:20:38] - Checking for HKLM\...\Winlogon\Notify\ukvowz [10/07/2008, 15:20:38] - Key not found: HKLM\...\Winlogon\Notify\ukvowz, continuing. [10/07/2008, 15:20:38] - Finished Searching Browser Helper Objects [10/07/2008, 15:20:38] - Finishing up... [10/07/2008, 15:20:38] - Nothing found! Exiting... voila merci d'avance

et dire qu'il ont le monopole sur les système d'exploitation franchement je comprend pas

google... sa aurais été plus rapide d'aller sur google et de taper site de voiture d'occasion que de poster sur se forum

désolé d'avoir 15 ans et d'être dans un collège ou le niveaux est l'un des plus bas de la Nièvre qui est l'une des régions les moins bien instruite faute de moyen et c'est pas pour quelques fautes que tu vas pas dormir cette nuit... sans rancune

je comprend pas si tu as des question adresse toi à lui

merci pour l'info

bah l'équipe sécurité est former pour venir à bout de toute sorte d'infection je pense qu'il y arrive tout le temps même si parfois c'est très long pour hijackthis je pense que des outil similaire on toujour exister ou du moins il se sont développer en même temps que les virus quand il ont pris une place monnaie courante dans le cybermonde après je me trompe peut être je suis pas très calé dans la matière mais je pense que c'est sa @++

salut à tous , je me demandais si l'instabilité de windows live messenger été une généralité ou si c'était le miens qui avais un problème par exemple quand je vais dans le menu des émoticone la plupart du temps il fait un "arret sur image" et mes fenêtre de contact se mette en blanc ou quand je clique sur un liens qu'on ma passer sa me le fait aussi des fois NB: j'utilise pas windows live messenger mais un deriver (aurora live messenger) voila merci à tous

ok merci beaucoup je vais gagné pas mal de temps

ok bah merci tout le monde bonne journer

oui c'est pour copier toute video pour les mettre dans mon téléphone , mon ipod et mon mp4 et elle sont un peu toute dispercé dans plusieurs dossier et je me demander si il était possible que tout se copie directement vers mes périphériques voila

bonjour , existe t'il une commande pour copier un fichier ou un dossier en plusieurs fois si oui merci de me la donné

franchement j'ai suivi la procédure à la lettre mais sa ne marche pas de plus secunia m'indique les 3 même version de macromedia dans end of life je comprend vraiment pas

ok bon je vais fermer se post j'ai toute mes reponse merci beaucoup à tout le monde

je c'est pas moi je dit sa comme sa il y a plein de forum ou il demande se genre de truc...dsl et j'ai zapper que tu été de l'équipe sécuriter vraiment dsl

de sa tu parle prorat ps: te fait pas d'illusion se sont de vieux virus tu ne poura rien en tirer si c'est sa que tu veux ^^

ok mais c virus sont quand même utiliser par des personne surtotu prorat pour les lamer...

http://www.trojanfrance.com/index.php?dir=Sources/VB/ se site

ok bah c'est pas moi le pro donc je vais suivre vos conseille lol prorat c'est un troyen

les signatures ne sont pas les même et varie selon les logiciel donc je pensais qu'il en falais plusieur en tout qu'a j'ai acheter kaspersky et mbam je peut pas me permettre de ne pas les utiliser

mais malware byte n'est pas un antispyware j'ai télécharger prorat pour faire le teste mbam ne le detecte pas mais spyware terminator si...