Aller au contenu

finiarel

Membres
  • Compteur de contenus

    18
  • Inscription

  • Dernière visite

Tout ce qui a été posté par finiarel

  1. Je sais pas trop je trouve mon pc plus lent et zonealarm ne veut toujour pas s'installer
  2. ok je vai essayer et hijackthis c clean?
  3. J'ai aussi un autre probleme je ne peux pas installer mon pare feu zonealarm: il me di que je dois etre sur une session administrateur mais je suis deja sur la session admin donc je sais pas quoi faire? voila le rapport hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:45:51, on 16/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\IoctlSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Anthony\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B12ACA14-C7FB-44FE-883B-6121FD02BAD3} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1220112356109 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 6905 bytes
  4. donc tu es sur que ma machine est clean? Si c'est le cas je te remercie grandement
  5. Merci donc la j'ai plus rien a faire c'est fini j'ai plus rien? Je peux suprimer ce dossier? C:\_OTMoveIt
  6. Je pense qu'il est envoyé non?
  7. voila c'est fait et comment je te l'envoie?
  8. c'est fait et ensuite je dois faire quoi? Qu'est ce que tu veux dire par "ziper" le dossier?
  9. le dossier pese (non zippé) 58.2mo et zippé avec winrar (methode best) 18.8mo et voila le rapport hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:21:12, on 16/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\IoctlSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Anthony\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B12ACA14-C7FB-44FE-883B-6121FD02BAD3} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1220112356109 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PoliceService - Unknown owner - C:\WINDOWS\system32\srksrv.exe (file missing) -- End of file - 6967 bytes
  10. desle d'etre aussi pressé mais il faudrait imperativement que le probleme soit reglé aant ce soir 18H00 donc je stress ^^ voila le rapport moveit: ========== PROCESSES ========== Process explorer.exe killed successfully. ========== FILES ========== C:\WINDOWS\system32\srksrv.exe moved successfully. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\Anthony\LOCALS~1\Temp\etilqs_nIll04z4fhfdqeXPesvC scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_368.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\urlclassifier3.sqlite scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\XUL.mfl scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11162008_120544 Files moved on Reboot... File C:\DOCUME~1\Anthony\LOCALS~1\Temp\etilqs_nIll04z4fhfdqeXPesvC not found! C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully. File C:\WINDOWS\temp\Perflib_Perfdata_368.dat not found! C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\urlclassifier3.sqlite moved successfully. C:\Documents and Settings\Anthony\Local Settings\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\XUL.mfl moved successfully.
  11. Alors mon rapport HiJackThis il donne quoi? Et aussi je peux pas installer zonealarm parce que il me dit que je dois etre sur une session administrateur alors que j'y suis c'est pas normal
  12. voila le rappotr hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:48:15, on 16/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\IoctlSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\srksrv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Documents and Settings\Anthony\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B12ACA14-C7FB-44FE-883B-6121FD02BAD3} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1220112356109 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PoliceService - Unknown owner - C:\WINDOWS\system32\srksrv.exe -- End of file - 6849 bytes
  13. Qu'est-ce-que je dois faire maintenant?
  14. voila la rapport MBAM: Malwarebytes' Anti-Malware 1.30 Version de la base de données: 1401 Windows 5.1.2600 Service Pack 3 16/11/2008 00:57:02 mbam-log-2008-11-16 (00-57-02).txt Type de recherche: Examen rapide Eléments examinés: 49633 Temps écoulé: 6 minute(s), 7 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winsys2 (Spyware.OnlineGames) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\WINDOWS\system32\WinSys2.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
  15. je vai le faire mais lecan pren combien de temps et je reinstalle antivirus et pare feu maitenant ou apré le scan?
  16. merci pour ta vitesse de reponse Voici le rapport: ComboFix 08-11-13.02 - Anthony 2008-11-16 0:20:56.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.742 [GMT 1:00] * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Anthony\Application Data\m c:\documents and settings\Anthony\Application Data\m\data.oct c:\documents and settings\Anthony\Application Data\m\flec006.exe c:\documents and settings\Anthony\Application Data\m\list.oct c:\documents and settings\Anthony\Application Data\m\shared\12Ghosts_Replace_8.11.zip c:\documents and settings\Anthony\Application Data\m\shared\360 Flash Panorama Viewer 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\3D_Space_Clock_ScreenSaver_2.3.zip c:\documents and settings\Anthony\Application Data\m\shared\3D_Stockcar_Screensaver_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Able2Extract_4.zip c:\documents and settings\Anthony\Application Data\m\shared\ACProtect_2.0_build_2006.03.10.zip c:\documents and settings\Anthony\Application Data\m\shared\Active_Sound_Studio_Professional_2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Advanced Page Rank Analyzer 2.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Akala Password Revealer 1.00.031103.zip c:\documents and settings\Anthony\Application Data\m\shared\All to AVI VCD SVCD DVD MPEG Converter 4.3.zip c:\documents and settings\Anthony\Application Data\m\shared\AlphaPeeler Professional 1.0b.zip c:\documents and settings\Anthony\Application Data\m\shared\ALTools Christmas Desktop Wallpapers 2005.zip c:\documents and settings\Anthony\Application Data\m\shared\Americanassist_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\AMP_Tile_Viewer_2.01.zip c:\documents and settings\Anthony\Application Data\m\shared\AOL_Suite_1.18.2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\ArintE_Level_Better_2.03.635.zip c:\documents and settings\Anthony\Application Data\m\shared\AvailSuite_2.70_Patch.zip c:\documents and settings\Anthony\Application Data\m\shared\AW_English-Spanish_Dictionary_1.7.zip c:\documents and settings\Anthony\Application Data\m\shared\Bad_Folkers_1.5.zip c:\documents and settings\Anthony\Application Data\m\shared\Belkasoft_BookaMark_2.04.zip c:\documents and settings\Anthony\Application Data\m\shared\Blade Transfer Services 1.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Bonbon_Quest_1.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Boombox_Granny_Demo_Screensaver_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Business_Card_Designer_Plus_9.0.1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\By Heart 4.0 (Patch).zip c:\documents and settings\Anthony\Application Data\m\shared\Cache Reader 5.0.3.1.zip c:\documents and settings\Anthony\Application Data\m\shared\CCMplayer 1.5.zip c:\documents and settings\Anthony\Application Data\m\shared\Chainsaw 3.7.zip c:\documents and settings\Anthony\Application Data\m\shared\Cheetah_Screensaver_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Christmas_Playtime_Demo_Screensaver_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Clicktionary (Thai) 3.2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Color_It_Update_4.0.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Copy_Table_for_SQL_Server_1.00.00_(Patch).zip c:\documents and settings\Anthony\Application Data\m\shared\CRM-Express Standard 3.20.zip c:\documents and settings\Anthony\Application Data\m\shared\DB Solo 2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\DBF_to_XLS_(Excel)_1.51.04.zip c:\documents and settings\Anthony\Application Data\m\shared\DBForms from MS Access to ASP.NET+MS SQL 1.0.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Defygo 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\DiskDriver_4.2.2_(Cracked).zip c:\documents and settings\Anthony\Application Data\m\shared\Easy-to-Use PDF Organizer 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\EldoS_Thumbnailer_4.41_Patch.zip c:\documents and settings\Anthony\Application Data\m\shared\Elecard Mobile Converter 2.0.37 build 60619.zip c:\documents and settings\Anthony\Application Data\m\shared\ewido-setup.zip c:\documents and settings\Anthony\Application Data\m\shared\EZ Unit Converter Wizard 2002 4.00.zip c:\documents and settings\Anthony\Application Data\m\shared\FastWin 1.00.zip c:\documents and settings\Anthony\Application Data\m\shared\File Watcher 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\FileCluster_Search_Plugin_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\fireQuest (Key+Serial).zip c:\documents and settings\Anthony\Application Data\m\shared\FlipPublisher 1.0 KeyGen.zip c:\documents and settings\Anthony\Application Data\m\shared\Framy_Leopard_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Full Moon 2.0.1.zip c:\documents and settings\Anthony\Application Data\m\shared\GENViewer_1.02.zip c:\documents and settings\Anthony\Application Data\m\shared\Ghost Surf Standard 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Glycemic_Impact_Diet_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Gyzmo_2.0_Key+Serial.zip c:\documents and settings\Anthony\Application Data\m\shared\Hide_The_IP_2.1.1_Crack.zip c:\documents and settings\Anthony\Application Data\m\shared\Hot_Phone_2.8_(Key).zip c:\documents and settings\Anthony\Application Data\m\shared\HTML_Protect_Center_1.0_[Crack].zip c:\documents and settings\Anthony\Application Data\m\shared\Idea_Cruncher_1.4.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Ideal Gas in 3D 2.01.zip c:\documents and settings\Anthony\Application Data\m\shared\IL-2_Sturmovik_1.2_patch.zip c:\documents and settings\Anthony\Application Data\m\shared\iMiser Research Assistant 3.0 Build 1073.zip c:\documents and settings\Anthony\Application Data\m\shared\Instant_Image_Creator_1.0_Cracked.zip c:\documents and settings\Anthony\Application Data\m\shared\Itel_Office_2.1.1_[Key+Serial].zip c:\documents and settings\Anthony\Application Data\m\shared\JGraphpad_2.zip c:\documents and settings\Anthony\Application Data\m\shared\linrdp 2.5.zip c:\documents and settings\Anthony\Application Data\m\shared\LockItNow!_1.2_Crack.zip c:\documents and settings\Anthony\Application Data\m\shared\Lunascape_4.1.3.zip c:\documents and settings\Anthony\Application Data\m\shared\Magic Garden Screensaver 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Manet Screensaver 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Messenger_Jump!_MSN_Content_Installer_1.10.zip c:\documents and settings\Anthony\Application Data\m\shared\MS_Access_Password_Recovery_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\MultiMediaPhile_1.6.zip c:\documents and settings\Anthony\Application Data\m\shared\Multiplication_Flash_2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\News Publishing Content Management System 2.3.zip c:\documents and settings\Anthony\Application Data\m\shared\Nod32.AntiVirus.v2.52.17+Crack.zip c:\documents and settings\Anthony\Application Data\m\shared\NTFS_Compressed_File_Decompressor_2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Old Fireplace - Animated Wallpaper 5.07.zip c:\documents and settings\Anthony\Application Data\m\shared\OneClick_Encryption_Software_2.2.zip c:\documents and settings\Anthony\Application Data\m\shared\Option_Pricing_Spreadsheet_1.zip c:\documents and settings\Anthony\Application Data\m\shared\Oregon Real Estate Finder 1.03.zip c:\documents and settings\Anthony\Application Data\m\shared\OrgChart Professional 4.0.1183.zip c:\documents and settings\Anthony\Application Data\m\shared\Panda Gadget 1.00.zip c:\documents and settings\Anthony\Application Data\m\shared\PDF-Pro 2.7.zip c:\documents and settings\Anthony\Application Data\m\shared\Performance_Monitoring_Protocol_(PMP)_8.3.1_[Key+Serial].zip c:\documents and settings\Anthony\Application Data\m\shared\Personal_Timeclock_4.4_(KeyGen).zip c:\documents and settings\Anthony\Application Data\m\shared\phpBB Advanced Quick Reply Quote Edit 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Piramide 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\PostgreSQL_Import_Multiple_Text_Files_Software_7.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Prg_Text_Launcher_1.0_[Cracked].zip c:\documents and settings\Anthony\Application Data\m\shared\PrimaSoft_Encryption_-_Service_Edition_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\ReaSoft PDF Printer Lite 3.0.zip c:\documents and settings\Anthony\Application Data\m\shared\RegEm_1.0.0.zip c:\documents and settings\Anthony\Application Data\m\shared\RetailRoadshow 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Rikisoft_EasySnap_Pro_1.7.0.zip c:\documents and settings\Anthony\Application Data\m\shared\RTF_Convertor_1.0_beta.zip c:\documents and settings\Anthony\Application Data\m\shared\SafarIcon_2.1.zip c:\documents and settings\Anthony\Application Data\m\shared\setupitapro-Avast!.versione.4.7.Homa.Edition.zip c:\documents and settings\Anthony\Application Data\m\shared\ShapeBook with 2D3DSteel 3.10.zip c:\documents and settings\Anthony\Application Data\m\shared\Silver_Net_Inventory_system_1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Smart Diary Suite 3.10.zip c:\documents and settings\Anthony\Application Data\m\shared\Snooker_1.zip c:\documents and settings\Anthony\Application Data\m\shared\StartupList_1.5.1.zip c:\documents and settings\Anthony\Application Data\m\shared\SubC - Subtitle Converter 1.2.0.91.zip c:\documents and settings\Anthony\Application Data\m\shared\Super Echo SE-i 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Systweak_Photo_Studio_1.00_[serial].zip c:\documents and settings\Anthony\Application Data\m\shared\TCP Optimizer 2.0.3.zip c:\documents and settings\Anthony\Application Data\m\shared\TestDisk_&_PhotoRec_6.3.zip c:\documents and settings\Anthony\Application Data\m\shared\The Spring Path Screensaver 1.0 [Crack].zip c:\documents and settings\Anthony\Application Data\m\shared\Theta- Software HTML To PDF Converter 2.0.zip c:\documents and settings\Anthony\Application Data\m\shared\TIM_USB_Transfer_1.2.zip c:\documents and settings\Anthony\Application Data\m\shared\Timesheets MTS 2.3.0 Patch.zip c:\documents and settings\Anthony\Application Data\m\shared\TOP - Vista Shutdown Control 2.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Traffic_Game_Demo.zip c:\documents and settings\Anthony\Application Data\m\shared\TreeNotes_2.01.zip c:\documents and settings\Anthony\Application Data\m\shared\Trend_Micro_PC-cillin_Internet_Security_2007_Build_1420_Cracked.zip c:\documents and settings\Anthony\Application Data\m\shared\Ultimate Spyware Adware Remover 6.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Unreal_Tournament_2003_-_Proximity_Mine_mod_1.1a.zip c:\documents and settings\Anthony\Application Data\m\shared\Unreal_Tournament_2003_-_VSK_War_Zone_deathmatch_map.zip c:\documents and settings\Anthony\Application Data\m\shared\US_Army_in_Iraq_1.zip c:\documents and settings\Anthony\Application Data\m\shared\VCE_Testing_System_1.0.815.zip c:\documents and settings\Anthony\Application Data\m\shared\Verbose Text to Speech Converter 1.04.zip c:\documents and settings\Anthony\Application Data\m\shared\Virtual Piano 1.0.zip c:\documents and settings\Anthony\Application Data\m\shared\Viscom Video Converter 1.0 [serial].zip c:\documents and settings\Anthony\Application Data\m\shared\Wapet 0.5.zip c:\documents and settings\Anthony\Application Data\m\shared\Word Password Recovery Master 3.0.0.1.zip c:\documents and settings\Anthony\Application Data\m\shared\Work Examiner Standard 2.1 Build 337.zip c:\documents and settings\Anthony\Application Data\m\shared\Xlit 2.3.zip c:\documents and settings\Anthony\Application Data\m\shared\zsCompare 3.03 KeyGen.zip c:\documents and settings\Anthony\Application Data\m\srvlist.oct c:\windows\system32\ban_list.txt c:\windows\system32\drivers\downld c:\windows\system32\drivers\downld\118812.exe c:\windows\system32\drivers\downld\123406.exe c:\windows\system32\drivers\downld\128843.exe c:\windows\system32\drivers\downld\130187.exe c:\windows\system32\drivers\downld\130593.exe c:\windows\system32\drivers\downld\134562.exe c:\windows\system32\drivers\downld\134656.exe c:\windows\system32\drivers\downld\138296.exe c:\windows\system32\drivers\downld\148515.exe c:\windows\system32\drivers\downld\14996421.exe c:\windows\system32\drivers\downld\15002515.exe c:\windows\system32\drivers\downld\15003453.exe c:\windows\system32\drivers\downld\15012796.exe c:\windows\system32\drivers\downld\15016125.exe c:\windows\system32\drivers\downld\15018609.exe c:\windows\system32\drivers\downld\15022109.exe c:\windows\system32\drivers\downld\15028140.exe c:\windows\system32\drivers\downld\15089281.exe c:\windows\system32\drivers\downld\15126000.exe c:\windows\system32\drivers\downld\15134125.exe c:\windows\system32\drivers\downld\163437.exe c:\windows\system32\drivers\downld\166750.exe c:\windows\system32\drivers\downld\183765.exe c:\windows\system32\drivers\downld\198156.exe c:\windows\system32\drivers\downld\221484.exe c:\windows\system32\drivers\downld\245968.exe c:\windows\system32\drivers\downld\349078.exe c:\windows\system32\drivers\downld\361562.exe c:\windows\system32\drivers\downld\381187.exe c:\windows\system32\drivers\downld\500281.exe c:\windows\system32\drivers\downld\574140.exe c:\windows\system32\drivers\downld\79421.exe c:\windows\system32\drivers\downld\81812.exe c:\windows\system32\drivers\downld\89046.exe c:\windows\system32\drivers\downld\90156.exe c:\windows\system32\drivers\downld\91906.exe c:\windows\system32\drivers\downld\94062.exe c:\windows\system32\drivers\downld\95031.exe c:\windows\system32\drivers\srosa.sys c:\windows\system32\drivers\winfilse.exe c:\windows\system32\mdelk.exe c:\windows\system32\wintems.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_SROSA -------\Legacy_SROSA ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-15 au 2008-11-15 )))))))))))))))))))))))))))))))))))) . 2008-11-16 00:07 . 2001-08-23 17:47 46,080 --a--c--- c:\windows\system32\dllcache\esuni.dll 2008-11-16 00:07 . 2001-08-23 17:47 34,816 --a--c--- c:\windows\system32\dllcache\esuimg.dll 2008-11-16 00:06 . 2001-08-23 17:16 596,319 --a--c--- c:\windows\system32\dllcache\es56cvmp.sys 2008-11-16 00:06 . 2001-08-23 17:16 594,910 --a--c--- c:\windows\system32\dllcache\es56hpi.sys 2008-11-16 00:06 . 2001-08-23 17:16 348,222 --a--c--- c:\windows\system32\dllcache\es56tpi.sys 2008-11-16 00:06 . 2001-08-17 20:19 174,464 --a--c--- c:\windows\system32\dllcache\es198x.sys 2008-11-16 00:06 . 2004-08-03 22:32 137,088 --a--c--- c:\windows\system32\dllcache\essm2e.sys 2008-11-16 00:06 . 2001-08-17 20:19 72,192 --a--c--- c:\windows\system32\dllcache\es1969.sys 2008-11-16 00:06 . 2001-08-17 20:19 63,360 --a--c--- c:\windows\system32\dllcache\ess.sys 2008-11-16 00:06 . 2001-08-23 17:47 43,008 --a--c--- c:\windows\system32\dllcache\esucm.dll 2008-11-16 00:06 . 2001-08-17 20:19 40,704 --a--c--- c:\windows\system32\dllcache\es1371mp.sys 2008-11-16 00:05 . 2001-08-23 17:16 630,016 --a--c--- c:\windows\system32\dllcache\eqn.sys 2008-11-16 00:05 . 2001-08-17 20:19 283,904 --a--c--- c:\windows\system32\dllcache\emu10k1m.sys 2008-11-16 00:05 . 2001-08-17 21:50 144,896 --a--c--- c:\windows\system32\dllcache\epcfw2k.sys 2008-11-16 00:05 . 2001-08-17 21:50 114,944 --a--c--- c:\windows\system32\dllcache\epstw2k.sys 2008-11-16 00:05 . 2001-08-23 17:47 62,464 --a--c--- c:\windows\system32\dllcache\eqnloop.exe 2008-11-16 00:05 . 2001-08-23 17:47 53,760 --a--c--- c:\windows\system32\dllcache\eqndiag.exe 2008-11-16 00:05 . 2001-08-23 17:47 51,712 --a--c--- c:\windows\system32\dllcache\eqnlogr.exe 2008-11-16 00:05 . 2001-08-17 20:19 37,120 --a--c--- c:\windows\system32\dllcache\es1370mp.sys 2008-11-16 00:05 . 2001-08-17 20:12 18,503 --a--c--- c:\windows\system32\dllcache\epro4.sys 2008-11-16 00:05 . 2001-08-17 21:46 6,400 --a--c--- c:\windows\system32\dllcache\enum1394.sys 2008-11-16 00:04 . 2001-08-23 17:13 455,711 --a--c--- c:\windows\system32\dllcache\el985n51.sys 2008-11-16 00:04 . 2001-08-23 17:13 175,104 --a--c--- c:\windows\system32\dllcache\el99xn51.sys 2008-11-16 00:04 . 2001-08-23 17:13 153,631 --a--c--- c:\windows\system32\dllcache\el90xnd5.sys 2008-11-16 00:04 . 2001-08-17 20:11 70,174 --a--c--- c:\windows\system32\dllcache\el98xn5.sys 2008-11-16 00:04 . 2001-08-17 20:11 66,591 --a--c--- c:\windows\system32\dllcache\el90xbc5.sys 2008-11-16 00:04 . 2001-08-17 20:10 25,159 --a--c--- c:\windows\system32\dllcache\elnk3.sys 2008-11-16 00:04 . 2001-08-17 20:10 19,996 --a--c--- c:\windows\system32\dllcache\em556n4.sys 2008-11-16 00:04 . 2001-08-17 21:53 7,296 --a--c--- c:\windows\system32\dllcache\elmsmc.sys 2008-11-16 00:03 . 2001-08-23 17:13 634,166 --a--c--- c:\windows\system32\dllcache\el656ct5.sys 2008-11-16 00:03 . 2001-08-23 17:13 241,238 --a--c--- c:\windows\system32\dllcache\el656se5.sys 2008-11-16 00:03 . 2001-08-17 20:11 77,386 --a--c--- c:\windows\system32\dllcache\el656nd5.sys 2008-11-16 00:03 . 2001-08-17 20:10 69,692 --a--c--- c:\windows\system32\dllcache\el575nd5.sys 2008-11-16 00:03 . 2001-08-17 20:11 69,194 --a--c--- c:\windows\system32\dllcache\el656cd5.sys 2008-11-16 00:03 . 2001-08-17 20:10 55,999 --a--c--- c:\windows\system32\dllcache\el556nd5.sys 2008-11-16 00:03 . 2001-08-23 17:13 44,615 --a--c--- c:\windows\system32\dllcache\el515.sys 2008-11-16 00:03 . 2001-08-17 20:10 26,141 --a--c--- c:\windows\system32\dllcache\el589nd5.sys 2008-11-16 00:03 . 2001-08-17 20:10 24,653 --a--c--- c:\windows\system32\dllcache\el574nd4.sys 2008-11-16 00:02 . 2001-08-17 20:20 334,208 --a--c--- c:\windows\system32\dllcache\ds1wdm.sys 2008-11-16 00:02 . 2008-04-13 20:39 206,976 --a--c--- c:\windows\system32\dllcache\dot4.sys 2008-11-16 00:02 . 2001-08-23 17:12 117,760 --a--c--- c:\windows\system32\dllcache\e100b325.sys 2008-11-16 00:02 . 2001-08-23 17:12 51,743 --a--c--- c:\windows\system32\dllcache\e1000nt5.sys 2008-11-16 00:02 . 2001-08-17 20:12 28,062 --a--c--- c:\windows\system32\dllcache\dp83820.sys 2008-11-16 00:02 . 2001-08-23 17:11 24,064 --a--c--- c:\windows\system32\dllcache\dot4usb.sys 2008-11-16 00:02 . 2008-04-14 04:34 20,992 --a--c--- c:\windows\system32\dllcache\dshowext.ax 2008-11-16 00:02 . 2001-08-17 22:07 20,192 --a--c--- c:\windows\system32\dllcache\dpti2o.sys 2008-11-16 00:02 . 2001-08-17 20:12 19,594 --a--c--- c:\windows\system32\dllcache\e100isa4.sys 2008-11-16 00:02 . 2001-08-17 21:47 12,928 --a--c--- c:\windows\system32\dllcache\dot4prt.sys 2008-11-16 00:02 . 2001-08-17 21:47 8,704 --a--c--- c:\windows\system32\dllcache\dot4scan.sys 2008-11-16 00:01 . 2001-08-17 20:14 952,007 --a--c--- c:\windows\system32\dllcache\diwan.sys 2008-11-16 00:01 . 2001-08-23 17:47 236,060 --a--c--- c:\windows\system32\dllcache\ditrace.exe 2008-11-16 00:01 . 2001-08-23 17:47 38,985 --a--c--- c:\windows\system32\dllcache\disrvsu.dll 2008-11-16 00:01 . 2001-08-23 17:47 37,962 --a--c--- c:\windows\system32\dllcache\divaprop.dll 2008-11-16 00:01 . 2001-08-23 17:47 31,817 --a--c--- c:\windows\system32\dllcache\disrvpp.dll 2008-11-16 00:01 . 2001-08-23 17:47 29,768 --a--c--- c:\windows\system32\dllcache\divasu.dll 2008-11-16 00:01 . 2001-08-17 20:11 29,696 --a--c--- c:\windows\system32\dllcache\dm9pci5.sys 2008-11-16 00:01 . 2001-08-17 20:11 26,698 --a--c--- c:\windows\system32\dllcache\dlh5xnd5.sys 2008-11-16 00:01 . 2008-04-13 20:40 8,320 --a--c--- c:\windows\system32\dllcache\dlttape.sys 2008-11-16 00:01 . 2001-08-23 17:47 6,729 --a--c--- c:\windows\system32\dllcache\disrvci.dll 2008-11-16 00:01 . 2001-08-23 17:47 6,216 --a--c--- c:\windows\system32\dllcache\divaci.dll 2008-11-16 00:00 . 2001-08-23 17:47 622,621 --a--c--- c:\windows\system32\dllcache\digiview.exe 2008-11-16 00:00 . 2001-08-23 17:47 229,462 --a--c--- c:\windows\system32\dllcache\digifwrk.dll 2008-11-16 00:00 . 2001-08-23 17:47 159,828 --a--c--- c:\windows\system32\dllcache\digihlc.dll 2008-11-16 00:00 . 2001-08-23 17:47 110,621 --a--c--- c:\windows\system32\dllcache\digirlpt.dll 2008-11-16 00:00 . 2001-08-23 17:10 103,492 --a--c--- c:\windows\system32\dllcache\digidxb.sys 2008-11-16 00:00 . 2001-08-23 17:47 102,484 --a--c--- c:\windows\system32\dllcache\digiinf.dll 2008-11-16 00:00 . 2001-08-17 20:13 91,305 --a--c--- c:\windows\system32\dllcache\dimaint.sys 2008-11-16 00:00 . 2001-08-23 17:10 90,685 --a--c--- c:\windows\system32\dllcache\digifep5.sys 2008-11-16 00:00 . 2001-08-23 17:10 42,656 --a--c--- c:\windows\system32\dllcache\digirlpt.sys 2008-11-16 00:00 . 2001-08-23 17:47 41,046 --a--c--- c:\windows\system32\dllcache\digiisdn.dll 2008-11-16 00:00 . 2001-08-17 20:14 21,606 --a--c--- c:\windows\system32\dllcache\digiisdn.sys 2008-11-15 23:59 . 2001-08-23 17:47 422,429 --a--c--- c:\windows\system32\dllcache\dgconfig.dll 2008-11-15 23:59 . 2001-08-23 17:47 256,512 --a--c--- c:\windows\system32\dllcache\devcon32.dll 2008-11-15 23:59 . 2001-08-23 17:47 135,252 --a--c--- c:\windows\system32\dllcache\digidbp.dll 2008-11-15 23:59 . 2001-08-23 17:47 65,622 --a--c--- c:\windows\system32\dllcache\digiasyn.dll 2008-11-15 23:59 . 2001-08-23 17:10 37,927 --a--c--- c:\windows\system32\dllcache\digiasyn.sys 2008-11-15 23:59 . 2001-08-23 17:09 29,691 --a--c--- c:\windows\system32\dllcache\dgapci.sys 2008-11-15 23:59 . 2001-08-17 20:11 24,649 --a--c--- c:\windows\system32\dllcache\dfe650d.sys 2008-11-15 23:59 . 2001-08-17 20:11 24,648 --a--c--- c:\windows\system32\dllcache\dfe650.sys 2008-11-15 23:59 . 2001-08-23 17:47 24,064 --a--c--- c:\windows\system32\dllcache\devldr32.exe 2008-11-15 23:59 . 2001-08-17 20:11 20,928 --a--c--- c:\windows\system32\dllcache\defpa.sys 2008-11-15 23:58 . 2001-08-17 21:52 179,584 --a--c--- c:\windows\system32\dllcache\dac2w2k.sys 2008-11-15 23:58 . 2001-08-23 17:08 117,760 --a--c--- c:\windows\system32\dllcache\d100ib5.sys 2008-11-15 23:58 . 2001-08-23 17:47 112,128 --a--c--- c:\windows\system32\dllcache\dc260usd.dll 2008-11-15 23:58 . 2001-08-23 17:47 87,552 --a--c--- c:\windows\system32\dllcache\dc240usd.dll 2008-11-15 23:58 . 2001-08-23 17:47 82,432 --a--c--- c:\windows\system32\dllcache\dc210usd.dll 2008-11-15 23:58 . 2001-08-17 20:12 63,208 --a--c--- c:\windows\system32\dllcache\dc21x4.sys 2008-11-15 23:58 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyzports.dll 2008-11-15 23:58 . 2001-08-23 17:47 25,600 --a--c--- c:\windows\system32\dllcache\dc210_32.dll 2008-11-15 23:58 . 2001-08-17 21:52 14,720 --a--c--- c:\windows\system32\dllcache\dac960nt.sys 2008-11-15 23:58 . 2001-08-17 21:52 7,424 --a--c--- c:\windows\system32\dllcache\ddsmc.sys 2008-11-15 23:57 . 2001-08-17 20:19 111,872 --a--c--- c:\windows\system32\dllcache\cwcspud.sys 2008-11-15 23:57 . 2001-08-17 20:19 93,952 --a--c--- c:\windows\system32\dllcache\cwcwdm.sys 2008-11-15 23:57 . 2001-08-17 20:19 72,832 --a--c--- c:\windows\system32\dllcache\cwbwdm.sys 2008-11-15 23:57 . 2001-08-23 17:08 50,944 --a--c--- c:\windows\system32\dllcache\cyyport.sys 2008-11-15 23:57 . 2001-08-23 17:08 50,688 --a--c--- c:\windows\system32\dllcache\cyzport.sys 2008-11-15 23:57 . 2004-08-03 22:32 48,640 --a--c--- c:\windows\system32\dllcache\cwrwdm.sys 2008-11-15 23:57 . 2001-08-23 17:47 29,184 --a--c--- c:\windows\system32\dllcache\cyycoins.dll 2008-11-15 23:57 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyzcoins.dll 2008-11-15 23:57 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyyports.dll 2008-11-15 23:57 . 2001-08-23 17:08 17,536 --a--c--- c:\windows\system32\dllcache\cyclad-z.sys 2008-11-15 23:57 . 2001-08-23 17:08 15,104 --a--c--- c:\windows\system32\dllcache\cyclom-y.sys 2008-11-15 23:57 . 2001-08-17 20:19 3,584 --a--c--- c:\windows\system32\dllcache\cwcosnt5.sys 2008-11-15 23:56 . 2008-04-14 04:33 252,416 --a--c--- c:\windows\system32\dllcache\ctmasetp.dll 2008-11-15 23:56 . 2001-08-23 17:47 216,576 --a--c--- c:\windows\system32\dllcache\cpscan.dll 2008-11-15 23:56 . 2001-08-23 17:47 175,104 --a--c--- c:\windows\system32\dllcache\csamsp.dll 2008-11-15 23:56 . 2001-08-17 20:19 96,256 --a--c--- c:\windows\system32\dllcache\ctlsb16.sys 2008-11-15 23:56 . 2001-08-23 17:07 61,194 --a--c--- c:\windows\system32\dllcache\cpqtrnd5.sys 2008-11-15 23:56 . 2001-08-17 20:19 42,112 --a--c--- c:\windows\system32\dllcache\crtaud.sys 2008-11-15 23:56 . 2001-08-17 20:19 6,912 --a--c--- c:\windows\system32\dllcache\ctlfacem.sys 2008-11-15 23:56 . 2001-08-23 17:47 4,096 --a--c--- c:\windows\system32\dllcache\ctwdm32.dll 2008-11-15 23:56 . 2001-08-17 20:19 3,712 --a--c--- c:\windows\system32\dllcache\ctljystk.sys 2008-11-15 23:56 . 2001-08-17 20:19 3,072 --a--c--- c:\windows\system32\dllcache\cwbmidi.sys 2008-11-15 23:56 . 2001-08-17 20:19 3,072 --a--c--- c:\windows\system32\dllcache\cwbase.sys 2008-11-15 23:55 . 2001-08-17 21:57 248,064 --a--c--- c:\windows\system32\dllcache\cl546xm.sys 2008-11-15 23:55 . 2001-08-23 17:46 170,880 --a--c--- c:\windows\system32\dllcache\cl546x.dll 2008-11-15 23:55 . 2001-08-23 17:46 111,232 --a--c--- c:\windows\system32\dllcache\cl5465.dll 2008-11-15 23:55 . 2001-08-17 21:57 45,696 --a--c--- c:\windows\system32\dllcache\cirrus.sys 2008-11-15 23:55 . 2001-08-23 17:47 44,544 --a--c--- c:\windows\system32\dllcache\cnusd.dll 2008-11-15 23:55 . 2001-08-17 20:11 39,936 --a--c--- c:\windows\system32\dllcache\cnxt1803.sys 2008-11-15 23:55 . 2001-08-23 17:07 21,533 --a--c--- c:\windows\system32\dllcache\cpqndis5.sys 2008-11-15 23:55 . 2001-08-23 17:04 20,864 --a--c--- c:\windows\system32\dllcache\cmbp0wdm.sys 2008-11-15 23:55 . 2001-08-17 21:52 14,976 --a--c--- c:\windows\system32\dllcache\cpqarray.sys 2008-11-15 23:55 . 2008-04-13 20:36 13,952 --a--c--- c:\windows\system32\dllcache\cmbatt.sys 2008-11-15 23:55 . 2008-04-13 20:36 10,240 --a--c--- c:\windows\system32\dllcache\compbatt.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-15 23:14 --------- d-----w c:\documents and settings\Anthony\Application Data\uTorrent 2008-11-15 15:55 --------- d-----w c:\documents and settings\Anthony\Application Data\Platrium 2008-11-15 15:35 --------- d-----w c:\program files\eMule 2008-11-15 14:58 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-15 11:20 1,930,752 ----a-w c:\windows\Internet Logs\xDB6.tmp 2008-11-15 09:12 --------- d-----w c:\documents and settings\Oceane\Application Data\Platrium 2008-11-15 00:56 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-11-14 18:36 --------- d-----w c:\documents and settings\Valerie\Application Data\Platrium 2008-11-10 13:22 --------- d-----w c:\documents and settings\Valerie\Application Data\Nero 2008-11-05 10:17 --------- d-----w c:\documents and settings\Anthony\Application Data\Nero 2008-11-05 10:14 --------- d-----w c:\program files\Fichiers communs\Nero 2008-11-05 09:55 --------- d-----w c:\program files\Nero 2008-11-05 09:46 --------- d-----w c:\documents and settings\All Users\Application Data\Nero 2008-11-05 09:20 --------- d-----w c:\program files\Java 2008-10-31 15:58 3,636,418 ----a-w c:\windows\Internet Logs\tvDebug.Zip 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-19 16:17 2,861,056 ----a-w c:\windows\Internet Logs\xDB5.tmp 2008-10-19 08:59 --------- d-----w c:\program files\OpenOffice.org 2.4 2008-10-18 13:42 --------- d-----w c:\documents and settings\Anthony\Application Data\OpenOffice.org2 2008-10-17 17:03 1,529,856 ----a-w c:\windows\Internet Logs\xDB4.tmp 2008-10-16 17:54 --------- d-----w c:\documents and settings\Valerie\Application Data\OpenOffice.org2 2008-10-15 11:58 3,088,896 ----a-w c:\windows\Internet Logs\xDB2.tmp 2008-10-15 11:58 1,521,152 ----a-w c:\windows\Internet Logs\xDB3.tmp 2008-10-07 15:09 --------- d-----w c:\documents and settings\Oceane\Application Data\Nero 2008-10-07 11:33 86,016 ----a-w c:\windows\system32\SET177.tmp 2008-10-07 11:33 8,826,880 ----a-w c:\windows\system32\nvoglnt.dll 2008-10-07 11:33 6,133,856 ----a-w c:\windows\system32\drivers\nv4_mini.sys 2008-10-07 11:33 6,058,112 ----a-w c:\windows\system32\SET17C.tmp 2008-10-07 11:33 6,058,112 ----a-w c:\windows\system32\SET16B.tmp 2008-10-07 11:33 475,136 ----a-w c:\windows\system32\SET17E.tmp 2008-10-07 11:33 475,136 ----a-w c:\windows\system32\SET16F.tmp 2008-10-07 11:33 163,908 ----a-w c:\windows\system32\nvsvc32.exe 2008-10-07 11:33 13,574,144 ----a-w c:\windows\system32\SET181.tmp 2008-10-07 11:33 13,574,144 ----a-w c:\windows\system32\SET175.tmp 2008-10-07 11:33 1,368,064 ----a-w c:\windows\system32\nvcuda.dll 2008-10-05 19:50 1,501,184 ----a-w c:\windows\Internet Logs\xDB1.tmp 2008-10-05 16:06 --------- d-----w c:\documents and settings\Valerie\Application Data\vlc 2008-10-05 13:49 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2008-10-04 14:14 --------- d-----w c:\program files\Hero Editor 2008-10-04 14:12 249,856 ------w c:\windows\Setup1.exe 2008-10-04 14:11 73,216 ----a-w c:\windows\ST6UNST.EXE 2008-10-04 12:40 --------- d-----w c:\documents and settings\All Users\Application Data\PlatriumSA 2008-10-04 06:58 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll 2008-09-28 09:33 --------- d-----w c:\documents and settings\All Users\Application Data\B3E85FAA-C316-40E0-BB3C-BF07959CAB7A 2008-09-28 09:32 --------- d-----w c:\program files\Platrium 2008-09-28 09:32 --------- d-----w c:\documents and settings\Valerie\Application Data\PlatriumWeather 2008-09-27 18:29 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus! 2008-09-23 13:31 --------- d-----w c:\documents and settings\Oceane\Application Data\OpenOffice.org2 2008-09-21 11:22 --------- d-----w c:\documents and settings\Anthony\Application Data\DivX 2008-09-21 10:02 21,840 ----a-w c:\windows\system32\SIntfNT.dll 2008-09-21 10:02 17,212 ----a-w c:\windows\system32\SIntf32.dll 2008-09-21 10:02 12,067 ----a-w c:\windows\system32\SIntf16.dll 2008-09-21 09:46 2,829 ----a-w c:\windows\DIIUnin.pif 2008-09-21 09:46 102,400 ----a-w c:\windows\DIIUnin.exe 2008-09-21 09:21 --------- d-----w c:\program files\DivX 2008-09-20 22:43 --------- d-----w c:\program files\VirtualDubMOD 2008-09-20 17:33 --------- d-----w c:\program files\Google 2008-09-20 16:43 --------- d-----w c:\program files\TiLP-2 2008-09-20 16:41 --------- d-----w c:\program files\TI Education 2008-09-20 15:57 --------- d-----w c:\program files\Fichiers communs\TI Shared 2008-09-20 15:56 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard 2008-09-16 19:27 453,152 ----a-w c:\windows\system32\NVUNINST.EXE 2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys 2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll 2008-09-07 11:47 11,270 --sha-w c:\windows\system32\KGyGaAvL.sys 2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll 2008-08-30 18:49 107,888 ----a-w c:\windows\system32\CmdLineExt.dll 2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll 2008-08-21 18:41 1,221,008 ----a-w c:\windows\system32\zpeng25.dll 2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll 2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll 2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] "EPSON Stylus DX8400 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE" [2007-04-12 182272] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-10-29 2610608] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2008-10-18 270128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13574144] "SW20"="c:\windows\system32\sw20.exe" [2006-09-07 208896] "SW24"="c:\windows\system32\sw24.exe" [2006-09-07 69632] "WinSys2"="c:\windows\system32\winsys2.exe" [2006-10-03 217088] "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-11-15 266497] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-11-15 981904] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 86016] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-05-18 c:\windows\RTHDCPL.EXE] "nwiz"="nwiz.exe" [2008-09-17 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\Valerie\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-09-12 384000] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk backup=c:\windows\pss\BlueSoleil.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Valerie^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk] path=c:\documents and settings\Valerie\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.4.lnk backup=c:\windows\pss\OpenOffice.org 2.4.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 01:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] --a------ 2008-07-24 16:02 490952 c:\program files\DAEMON Tools Lite\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\filehippo.com] --a------ 2008-07-03 18:08 137216 c:\program files\filehippo.com\UpdateChecker.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] --a------ 2008-10-29 10:42 2610608 c:\program files\Internet Download Manager\IDMan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] --a------ 2008-06-24 15:06 1840424 c:\program files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor] --a------ 2008-04-30 17:30 498176 c:\program files\MSI\Live Update 3\LMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-10-18 10:34 5724184 c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] --a------ 2008-06-08 08:31 2221352 c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2008-06-19 08:53 570664 c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe] --a------ 2008-05-06 09:42 202088 c:\program files\TomTom HOME 2\HOMERunner.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] --a------ 2008-10-18 18:57 270128 c:\program files\uTorrent\uTorrent.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\River Past\\Video Cleaner\\VideoCleaner.exe"= "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= R1 sK9Ou0s;sK9Ou0s;\??\c:\windows\system32\drivers\srosa2.sys [2008-11-15 7168] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208] R2 PoliceService;PoliceService;c:\windows\system32\srksrv.exe [2008-11-04 453120] R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2008-01-25 25088] S2 PortTalk;PortTalk; [] S3 TiglUsb;TiglUsb.sys TI-GRAPH / DIRECT LINK USB driver;c:\windows\system32\Drivers\TiglUsb.sys [] *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Tâches planifiées' 2008-11-14 c:\windows\Tasks\Norton Security Scan.job - c:\program files\Norton Security Scan\Nss.exe [2008-01-09 04:08] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\AskBarDis\bar\bin\askBar.dll Toolbar-{3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\AskBarDis\bar\bin\askBar.dll . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Anthony\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.galaxywars.fr/ FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdeploytk.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-16 00:24:46 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... c:\documents and settings\Anthony\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 715 bytes hidden from API Scan terminé avec succès Fichiers cachés: 1 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet003\Services\srosa] . Heure de fin: 2008-11-16 0:33:00 ComboFix-quarantined-files.txt 2008-11-15 23:32:58 Avant-CF: 75,492,061,184 octets libres Après-CF: 75,124,748,288 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect 514 --- E O F --- 2008-11-13 16:02:10
  17. Bonsoir à tous!!! J'ai besoin d'aide d'urgence s'il vous plait parce que mon ordi est infecté par un ou plusieurs virus.J'en suis sur parce que l'accés a mon antivirus et a mon pare feu est refusé.De plus je ne peut pas faire de demarrage en mode sans echec ni de restauration systeme. Je suis completement perdu s'il vous plait j'ai terriblement besoin de votre aide d'urgence Merci d'avance à tous.
×
×
  • Créer...