k2r

Merci j'ai appliqué la plupart des trucs et astuces ... sans succès puisque la problème persiste : je pense que tu as raison, il s'agit cerainement d'un problème de Hardware , c'est ce que je pensais (cf. mon premier post) S'il s'agit d'un problème de Hardware, as tu une idée de ce que cela pourrait être ?? J'ai ce problème de reboot uniquement sur la séquence de démarrage et de plus une fois le système démarré avec succès, il est très stable!! J'entend un bruit (de commutateur) et le système reboot !!! Ce problème arrive a tout moment du démarrage (au boot initial, pendant le chargement d XP, une fois le bureau tout juste affiché ... etc ...) C'est pour cela que j'avais post sur la patie Hardware du forum ---> si quelqu'un peut m'aider !! Merci en tout cas pour votre aide K2r NB j'ai habité Guidel (56) pendant 5 ans lol

Bonjour, J'ai cru le faire ... mais alors c'est que je ne comprend pas ... il faut copier / coller ça ? : "@echo Suppression du Service sc stop Bonjour Service sc delete Bonjour Service cd c:\ cd Program files del /f /s /q C:\Program Files\Bonjour" pour le rapport "ni le rapport Smitfraud." je l'ai publié au dessus après action en mode sans echec ... enfin je pense Merci de ton aide ... dis moi ce que j'ai mal fait k2r

Voilà j'ai tout fait .... ci dessous le nouveau Log de Hijackthis Merci à tous les 2 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:01:13, on 17/02/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18372) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Documents and Settings\Adrien\Bureau\HiJackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_1_1_0.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 5114 bytes k2r

OK un grand merci à tous les deux ... 1) j'ai executé le job serv.bat 2) j'ai executé le SmitFraudFix voici le log : SmitFraudFix v2.396 Rapport fait à 9:14:27,89, 17/02/2009 Executé à partir de C:\Documents and Settings\Adrien\Bureau\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Le type du système de fichiers est NTFS Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Adrien\Bureau\SmitfraudFix\Policies.exe C:\WINDOWS\system32\cmd.exe »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Adrien »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Adrien\LOCALS~1\Temp »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Adrien\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Adrien\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» o4Patch !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! o4Patch Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» IEDFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! Agent.OMZ.Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» VACFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» 404Fix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! 404Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" "LoadAppInit_DLLs"=dword:00000001 »»»»»»»»»»»»»»»»»»»»»»»» Winlogon !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\\WINDOWS\\system32\\userinit.exe," "System"="" »»»»»»»»»»»»»»»»»»»»»»»» RK »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets DNS Server Search Order: 212.27.40.240 DNS Server Search Order: 212.27.40.241 HKLM\SYSTEM\CCS\Services\Tcpip\..\{138EB943-75E6-4D6A-9E8A-F742A83A2245}: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS1\Services\Tcpip\..\{138EB943-75E6-4D6A-9E8A-F742A83A2245}: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS2\Services\Tcpip\..\{138EB943-75E6-4D6A-9E8A-F742A83A2245}: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS3\Services\Tcpip\..\{138EB943-75E6-4D6A-9E8A-F742A83A2245}: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241 »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin Merci k2r

Bonsoir, Merci de ton aide Je t'ai copié le LOG : Logfile of HijackThis v1.99.1 Scan saved at 20:17:10, on 15/02/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18372) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\DOCUME~1\Adrien\LOCALS~1\Temp\Rar$EX00.375\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll O11 - Options group: [iNTERNATIONAL] International O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_1_1_0.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing) O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe Merci K2r

Bonsoir, j'ai essayé plusieurs fois avec ou sans panneau ... ça ne change rien coté son !! il s'agit d'un PC fixe. Le démarrage est toujours aussi catastrophique ... la galère @+ k2r

Bonjour à tous, J'ai un soucis, mon PC reboot plus ou moins 3 fois avant de demarrer normalement ... il fait un bruit de ventilation d'enfer !!! et je le trouve très lent. Bref je pense qu'il y a quelquechose de mal foutu dans le Hardware ... mais quoi ?? Merci de votre aide K2r

Salut Falkra, J'ai suivi la procédure ... j'ai install IE 7 --> pas mal Pour l'infection, plus aucun signe ... je trouve le PC lent, mais c'est peut être parcequ'il y a plus de prog qui tournent, et notamment IE7 qui a l'air plus lourd. Bref ça marche donc encore MERCI pour ton aide, ta dispo et la qualité des infos !! Je ne sais pas si te souhaiter a plus tard est une bonne idée ça veut dire avoir des problèmes ... Alors je te souhaites ainsi qu'à tous les désinfecteurs du forum, seulement une bonne année !! K2r

OK pour la desinstal, c fait ... Pour le reboot, tu as raison, je vais regarder sur le coté Hardware Voici le Log : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:40:33, on 19/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\hijackth\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 7579 bytes J'espère que tout est OK Encore une fois MERCI !! K2r

Salut Falkra, Me voilà de retour ... j'ai fait ce que tu m'as demandé sur le fichier renommé en .dll et copier coller au bon endroit Je ne vois plus de signe d'infection ... MERCI ET BRAVO Quelle est l'étape suivante ? si il y en a une ?? j'ai toujours ce problème de reboot au démarrage ??? K2r

Salut Falkra, OK pour le script, je te fais signe quand je serais de retour ... Tous les symptomes ont disparus à l'exception des redémarages à froid (toujours par 3 ) je ne sais pas si c'est lié. Puis je mettre le fichier à la corbeille : c:\qoobox ??? Merci, à bientot K2r

l'upload est fait ..... cf mon MP Puis je mettre le fichier c:\qoobox à la corbeille ??? MERCI encore pour toute ton AIDE et ta DISPO K2r

Oui j'ai refait tourner un coup MBAM comme tu me l'avais conseillé, et il a détruit ce truc : EoRezo Pour le zip je te le post comment ???

OK Voici le log de HiJackThis ... Merci encore pour le temps que tu me consacres, c'est vraiment très sympa Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:39:05, on 13/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\hijackth\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 6891 bytes K2r

tu me dis : "il y a un truc étonnant (mais pas grave)." --> là tu m'inquiètes vraiment pour le coup !!! Avant que je te poste le HiJackThis, dans le fichier où se trouve le HiJackThis.exe, il y a les save des .txt que nous avons fait hier et un fichier : Adrien.exe ????? avec la même icône que HiJackThis ??? !!! Est ce normal ??? lequel dois je prendre ?? K2r

Bonsoir ... me revoilà Hier soir après un reboot, mon PC a reboot 3 fois de suite, j'ai perdu patiente et j'ai été me coucher J'ai fait tourner Combo Fix .... voilà le résultat ComboFix 08-12-12.05 - Adrien 2008-12-13 17:33:14.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1527.1066 [GMT 1:00] Lancé depuis: c:\documents and settings\Adrien\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\igfxCoIn_v4764.dll c:\windows\system32\igfxres.dll . ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-13 au 2008-12-13 )))))))))))))))))))))))))))))))))))) . 2008-12-12 23:21 . 2008-12-12 23:21 <REP> d-------- C:\rsit 2008-12-12 22:31 . 2008-12-12 22:45 <REP> d-------- C:\Lop SD 2008-12-12 21:42 . 2008-12-12 21:42 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware 2008-12-12 21:42 . 2008-12-12 21:42 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2008-12-12 21:42 . 2008-12-12 21:42 <REP> d-------- c:\documents and settings\Adrien\Application Data\Malwarebytes 2008-12-12 21:42 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2008-12-12 21:42 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2008-12-12 21:28 . 2008-12-12 23:21 <REP> d-------- C:\hijackth 2008-12-12 21:25 . 2008-12-12 21:26 <REP> d-------- C:\Hijack 2008-12-12 21:24 . 2008-12-12 21:24 <REP> d-------- C:\Nouveau dossier 2008-12-12 20:27 . 2008-12-12 20:27 664 --a------ c:\windows\system32\d3d9caps.dat 2008-12-12 18:16 . 2008-12-12 18:27 <REP> d-------- C:\HiJackThis 2008-12-10 23:08 . 2007-05-30 13:10 10,872 --a------ c:\windows\system32\drivers\AvgAsCln.sys 2008-12-10 23:05 . 2008-12-10 23:05 <REP> d-------- C:\VundoFix Backups 2008-12-06 23:02 . 2008-12-06 23:02 <REP> d-------- C:\ProgramData 2008-12-06 11:46 . 2008-12-06 11:46 <REP> d-------- c:\documents and settings\Adrien\Application Data\Leadertech 2008-11-23 00:46 . 2008-11-23 00:40 410,976 --a------ c:\windows\system32\deploytk.dll 2008-11-16 21:18 . 2008-11-16 23:59 <REP> d-------- c:\program files\InterActual 2008-11-14 18:50 . 2008-11-14 18:50 <REP> d-------- c:\program files\Intel 2008-11-14 18:41 . 2008-11-14 18:41 <REP> d-------- c:\program files\ma-config.com 2008-11-14 18:41 . 2008-11-14 18:41 <REP> d-------- c:\documents and settings\All Users\Application Data\ma-config.com 2008-11-13 21:10 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-11-13 21:10 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-12 20:02 --------- d-----w c:\program files\Steam 2008-12-12 13:16 --------- d-----w c:\documents and settings\Adrien\Application Data\Skype 2008-12-07 13:11 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-06 09:33 --------- d-----w c:\program files\EA SPORTS 2008-12-04 01:09 --------- d-----w c:\program files\eMule 2008-11-30 19:10 --------- d-----w c:\documents and settings\Adrien\Application Data\Azureus 2008-11-30 12:58 --------- d-----w c:\program files\Azureus 2008-11-24 17:26 --------- d-----w c:\documents and settings\Adrien\Application Data\FileZilla 2008-11-22 23:39 --------- d-----w c:\program files\Java 2008-11-22 11:52 --------- d-----w c:\program files\SpeedFan 2008-11-02 22:01 --------- d-----w c:\program files\Lavalys 2008-11-02 20:17 102,664 ----a-w c:\windows\system32\drivers\tmcomm.sys 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys . ((((((((((((((((((((((((((((( snapshot@2008-12-12_ 0.36.10.13 ))))))))))))))))))))))))))))))))))))))))) . + 2008-12-13 16:38:48 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_124.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-15 68856] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-23 136600] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2008-11-27 1261336] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-01-13 131072] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-01-13 163840] "Persistence"="c:\windows\system32\igfxpers.exe" [2007-01-13 135168] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-08-26 98304] "DAEMON Tools-1033"="c:\program files\D-Tools\daemon.exe" [2004-08-22 81920] "!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 c:\windows\soundman.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360] "Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 443968] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm "VIDC.MJPG"= Pvmjpg21.dll "VIDC.PIM1"= pclepim1.dll "vidc.xvid"= xvid.dll [HKLM\~\startupfolder\C:^Documents and Settings^Adrien^Menu Démarrer^Programmes^Démarrage^TribalWeb.lnk] backup=c:\windows\pss\TribalWeb.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Adrien^Menu Démarrer^Programmes^Démarrage^TribalWeb.net.lnk] backup=c:\windows\pss\TribalWeb.net.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk] backup=c:\windows\pss\Démarrage rapide de HP Photosmart Premier.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk] backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\Steam\\SteamApps\\adik2r\\counter-strike\\hl.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\TribalWeb.net\\tribalweb.exe"= "c:\\Program Files\\Steam\\Steam.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "c:\\Program Files\\K!TV\\K!TV.exe"= "c:\\WINDOWS\\system32\\dpvsetup.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "c:\\Program Files\\TVAnts\\Tvants.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "c:\\Program Files\\Azureus\\Azureus.exe"= "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "c:\\Program Files\\EA SPORTS\\FIFA 09\\FIFA09.exe"= "c:\\WINDOWS\\system32\\hkcmd.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "4662:TCP"= 4662:TCP:mule "46672:UDP"= 46672:UDP:mule2 "5900:TCP"= 5900:TCP:vnc "5900:UDP"= 5900:UDP:vnc2 R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-07-07 97928] R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-07-07 231704] R2 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver;c:\windows\system32\DRIVERS\HCWBT8XX.sys [2007-11-25 280644] S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" [2008-11-02 195752] S4 Aliarpc;Aliarpc;\??\c:\windows\system32\drivers\fsvermdd.sys [] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.fr/ uSearch Page = hxxp://www.google.com uSearch Bar = hxxp://www.google.com/ie mDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://www.google.fr/ uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s mSearchAssistant = hxxp://www.google.com/ie IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O16 -: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab c:\windows\Downloaded Program Files\DirectAnimation Java Classes.osd O16 -: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_0_3_5.cab c:\windows\Downloaded Program Files\hardwaredetection.inf . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-13 17:38:45 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\HPZipm12.exe c:\windows\system32\wdfmgr.exe c:\program files\AVG\AVG8\avgrsx.exe c:\windows\system32\wbem\wmiapsrv.exe c:\windows\system32\verclsid.exe . ************************************************************************** . Heure de fin: 2008-12-13 17:44:23 - La machine a redémarré ComboFix-quarantined-files.txt 2008-12-13 16:44:15 ComboFix2.txt 2008-12-11 23:37:52 Avant-CF: 26 178 703 360 octets libres Après-CF: 26,192,945,152 octets libres 189 --- E O F --- 2008-11-13 20:19:46 C'est grave docteur ???? K2r

Monsieur est servi voici le premier log.txt : Logfile of random's system information tool 1.04 (written by random/random) Run by Adrien at 2008-12-12 23:21:45 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 24 GB (15%) free of 156 GB Total RAM: 1527 MB (65% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:21:54, on 12/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Documents and Settings\Adrien\Mes documents\RSIT.exe C:\hijackth\Adrien.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll C:\WINDOWS\system32\wavemile.dll c:\windows\system32\vivuyayo.dll c:\windows\system32\wudumuzo.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 6933 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-08-29 455960] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}] EoBho Class [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-23 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-09-06 2436160] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-10-19 737776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-23 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-23 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-09-06 2436160] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-23 136600] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152] "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536] "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-11-27 1261336] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-01-13 131072] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-01-13 163840] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-01-13 135168] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-08-26 98304] "DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920] "!AVG Anti-Spyware"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2007-06-11 6731312] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-06-15 68856] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Adrien^Menu Démarrer^Programmes^Démarrage^TribalWeb.lnk] C:\PROGRA~1\TRIBAL~1.NET\TRIBAL~1.EXE [2007-05-02 1060864] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Adrien^Menu Démarrer^Programmes^Démarrage^TribalWeb.net.lnk] C:\PROGRA~1\TRIBAL~1.NET\TRIBAL~1.EXE [2007-05-02 1060864] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk] C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2006-02-10 73728] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk] C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2006-02-19 288472] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="avgrsstx.dll C:\WINDOWS\system32\wavemile.dll c:\windows\system32\vivuyayo.dll c:\windows\system32\wudumuzo.dll " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2007-01-13 204800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "notification packages"=scecli C:\WINDOWS\system32\wavemile.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Driver] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Guard] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDrives"=0 "NoDriveAutoRun"=67108863 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"= "NoDriveAutoRun"= "NoDriveTypeAutoRun"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\Program Files\Steam\SteamApps\adik2r\counter-strike\hl.exe"="C:\Program Files\Steam\SteamApps\adik2r\counter-strike\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\TribalWeb.net\tribalweb.exe"="C:\Program Files\TribalWeb.net\tribalweb.exe:*:Enabled:TribalWeb.net : Réseau privé sur Internet" "C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe" "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "C:\Program Files\K!TV\K!TV.exe"="C:\Program Files\K!TV\K!TV.exe:*:Enabled:K!TV - Application de TéléVision" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player" "C:\Program Files\TVAnts\Tvants.exe"="C:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts" "C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver" "C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice" "C:\Program Files\EA SPORTS\FIFA 09\FIFA09.exe"="C:\Program Files\EA SPORTS\FIFA 09\FIFA09.exe:*:Disabled:FIFA09" "C:\WINDOWS\system32\hkcmd.exe"="C:\WINDOWS\system32\hkcmd.exe:*:Enabled:hkcmd" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorer" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" ======List of files/folders created in the last 1 months====== 2008-12-12 23:21:45 ----D---- C:\rsit 2008-12-12 22:34:20 ----A---- C:\lopR.txt 2008-12-12 22:31:36 ----D---- C:\Lop SD 2008-12-12 21:42:22 ----D---- C:\Documents and Settings\Adrien\Application Data\Malwarebytes 2008-12-12 21:42:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2008-12-12 21:42:12 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-12-12 21:28:05 ----D---- C:\hijackth 2008-12-12 21:25:56 ----D---- C:\Hijack 2008-12-12 21:24:02 ----D---- C:\Nouveau dossier 2008-12-12 19:29:14 ----SHD---- C:\RECYCLER 2008-12-12 19:01:47 ----A---- C:\WINDOWS\ntbtlog.txt 2008-12-12 18:16:51 ----D---- C:\HiJackThis 2008-12-12 17:43:21 ----D---- C:\ComboFix 2008-12-12 17:43:18 ----A---- C:\WINDOWS\system32\CF4527.exe 2008-12-12 00:37:52 ----A---- C:\ComboFix.txt 2008-12-12 00:21:39 ----A---- C:\Boot.bak 2008-12-12 00:21:24 ----RASHD---- C:\cmdcons 2008-12-12 00:19:24 ----A---- C:\WINDOWS\zip.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\VFIND.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\SWXCACLS.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\SWSC.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\SWREG.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\sed.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\grep.exe 2008-12-12 00:19:24 ----A---- C:\WINDOWS\fdsv.exe 2008-12-12 00:18:16 ----D---- C:\WINDOWS\ERDNT 2008-12-12 00:18:16 ----D---- C:\Qoobox 2008-12-10 23:05:11 ----D---- C:\VundoFix Backups 2008-12-10 23:05:11 ----A---- C:\VundoFix.txt 2008-12-06 23:02:05 ----D---- C:\ProgramData 2008-12-06 11:46:48 ----D---- C:\Documents and Settings\Adrien\Application Data\Leadertech 2008-11-23 00:46:16 ----A---- C:\WINDOWS\system32\javaws.exe 2008-11-23 00:46:16 ----A---- C:\WINDOWS\system32\javaw.exe 2008-11-23 00:46:16 ----A---- C:\WINDOWS\system32\java.exe 2008-11-23 00:46:16 ----A---- C:\WINDOWS\system32\deploytk.dll 2008-11-22 12:37:27 ----A---- C:\WINDOWS\system32\STKIT432.DLL 2008-11-16 21:18:30 ----D---- C:\Program Files\InterActual 2008-11-14 18:50:03 ----D---- C:\Program Files\Intel 2008-11-14 18:48:09 ----A---- C:\WINDOWS\system32\igxprd32.dll 2008-11-14 18:48:08 ----A---- C:\WINDOWS\system32\igxpdv32.dll 2008-11-14 18:48:08 ----A---- C:\WINDOWS\system32\igldev32.dll 2008-11-14 18:48:07 ----A---- C:\WINDOWS\system32\igxpgd32.dll 2008-11-14 18:48:07 ----A---- C:\WINDOWS\system32\iglicd32.dll 2008-11-14 18:48:07 ----A---- C:\WINDOWS\system32\igfxCoIn_v4764.dll 2008-11-14 18:48:06 ----A---- C:\WINDOWS\system32\igxpdx32.dll 2008-11-14 18:48:01 ----A---- C:\WINDOWS\system32\igxpun.exe 2008-11-14 18:48:01 ----A---- C:\WINDOWS\system32\difxapi.dll 2008-11-14 18:41:07 ----D---- C:\Program Files\ma-config.com 2008-11-14 18:41:06 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com 2008-11-13 21:15:49 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$ 2008-11-13 21:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$ 2008-11-13 21:14:27 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$ ======List of files/folders modified in the last 1 months====== 2008-12-12 23:21:53 ----D---- C:\WINDOWS\Temp 2008-12-12 23:21:50 ----D---- C:\WINDOWS\Prefetch 2008-12-12 22:42:46 ----RD---- C:\Program Files 2008-12-12 22:42:45 ----SD---- C:\WINDOWS\Tasks 2008-12-12 21:58:51 ----D---- C:\WINDOWS\system32\drivers 2008-12-12 21:58:51 ----D---- C:\WINDOWS\system32 2008-12-12 21:58:51 ----D---- C:\WINDOWS 2008-12-12 21:58:24 ----A---- C:\WINDOWS\SchedLgU.Txt 2008-12-12 21:02:04 ----D---- C:\Program Files\Steam 2008-12-12 21:01:06 ----D---- C:\WINDOWS\system32\CatRoot2 2008-12-12 21:00:06 ----D---- C:\Program Files\Registry Mechanic 2008-12-12 17:42:20 ----HD---- C:\$AVG8.VAULT$ 2008-12-12 14:16:50 ----D---- C:\Documents and Settings\Adrien\Application Data\Skype 2008-12-12 12:34:23 ----D---- C:\WINDOWS\Help 2008-12-12 00:30:57 ----A---- C:\WINDOWS\system.ini 2008-12-12 00:27:42 ----D---- C:\WINDOWS\system32\config 2008-12-12 00:24:17 ----D---- C:\WINDOWS\AppPatch 2008-12-12 00:24:17 ----D---- C:\Program Files\Fichiers communs 2008-12-12 00:23:13 ----SD---- C:\WINDOWS\Downloaded Program Files 2008-12-12 00:21:39 ----RASH---- C:\boot.ini 2008-12-11 12:28:59 ----A---- C:\WINDOWS\NeroDigital.ini 2008-12-07 19:15:01 ----SHD---- C:\WINDOWS\Installer 2008-12-07 18:47:53 ----HD---- C:\Config.Msi 2008-12-07 14:11:14 ----HD---- C:\Program Files\InstallShield Installation Information 2008-12-06 11:47:15 ----A---- C:\WINDOWS\system32\CmdLineExt.dll 2008-12-06 11:37:05 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft 2008-12-06 10:33:15 ----D---- C:\WINDOWS\system32\DirectX 2008-12-06 10:33:15 ----D---- C:\Program Files\EA SPORTS 2008-12-06 10:33:09 ----HD---- C:\WINDOWS\inf 2008-12-06 10:32:00 ----RSD---- C:\WINDOWS\assembly 2008-12-04 02:09:25 ----D---- C:\Program Files\eMule 2008-11-30 20:10:21 ----D---- C:\Documents and Settings\Adrien\Application Data\Azureus 2008-11-30 13:58:26 ----D---- C:\Program Files\Azureus 2008-11-25 13:50:48 ----A---- C:\WINDOWS\win.ini 2008-11-24 18:26:14 ----D---- C:\Documents and Settings\Adrien\Application Data\FileZilla 2008-11-23 00:39:57 ----D---- C:\Program Files\Java 2008-11-22 12:52:13 ----D---- C:\Program Files\SpeedFan 2008-11-21 21:23:00 ----D---- C:\Program Files\WinRAR 2008-11-18 09:53:41 ----RSHDC---- C:\WINDOWS\system32\dllcache 2008-11-14 18:48:06 ----DC---- C:\WINDOWS\system32\DRVSTORE 2008-11-14 18:48:01 ----D---- C:\WINDOWS\system32\Lang 2008-11-14 18:47:55 ----D---- C:\Intel 2008-11-13 21:15:47 ----HD---- C:\WINDOWS\$hf_mig$ 2008-11-13 21:14:52 ----A---- C:\WINDOWS\imsins.BAK 2008-11-13 21:13:45 ----D---- C:\WINDOWS\WinSxS ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver; \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys [] R1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [2007-05-30 10872] R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-08-29 97928] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-07-07 26824] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys [] R2 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver; C:\WINDOWS\system32\DRIVERS\HCWBT8XX.sys [2002-03-01 280644] R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys [] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-10-26 4124352] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2004-03-10 11264] R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-01-13 5672032] R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2004-06-21 78976] R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 61883;Pilote d'unité 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128] S3 Avc;Périphérique AVC; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912] S3 catchme;catchme; \??\C:\ComboFix\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 DCamUSBSQTECH;Dual-Mode DSC(2770); C:\WINDOWS\System32\Drivers\SQcaptur.sys [2003-01-10 30921] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 DSDrv4;DSDrv4; \??\C:\PROGRA~1\K!TV\Plugins\S_Bt8x8\DSDrv4.sys [] S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664] S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496] S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568] S3 LHidFlt2;Logitech HID/USB Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFlt2.sys [] S3 LHidUsb;Logitech USB Receiver device driver; C:\WINDOWS\system32\drivers\LHidUsb.Sys [2001-12-19 39932] S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552] S3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-23 6912] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S4 Aliarpc;Aliarpc; \??\C:\WINDOWS\system32\drivers\fsvermdd.sys [] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard; C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2007-05-30 312880] R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-29 231704] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-23 152984] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2003-02-20 32768] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-25 138168] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-11-02 195752] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] -----------------EOF----------------- et le deuxième : info.txt logfile of random's system information tool 1.04 2008-12-12 23:21:56 ======Uninstall list====== -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986} AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe Cdiscount photos -->C:\Program Files\Cdiscount photos\uninst.exe Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" DAEMON Tools-->MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0} Dora l'exploratrice : Les animaux de la jungle-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF9FA161-78F2-11D8-95ED-000476379056}\Setup.exe" -l0x40c -uninst Dora Sakado-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3AFC7779-F2B8-49A4-9689-A2EA86ABCC8A}\Setup.exe" -l0x40c EA SPORTS™ Rugby 08-->MsiExec.exe /X{18D00C9F-B259-4838-871A-C61FCFF34C59} eMule-->"C:\Program Files\eMule\Uninstall.exe" EVEREST Ultimate Edition v4.60-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe" FIFA 09-->MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB} FileZilla Client 3.0.10-->C:\Program Files\FileZilla FTP Client\uninstall.exe Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72} Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29} Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll" HijackThis 2.0.2-->"C:\Documents and Settings\Adrien\Mes documents\HiJackThis\HijackThis.exe" /uninstall HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat hp deskjet 3820 series-->rundll32 hpzcon05.dll,VendorJettison hp deskjet 3820 series HP Document Viewer 7.0-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat HP Driver Diagnostics-->MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3} HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart Premier Software 6.5-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E} HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat Intel® Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall Java 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF} Java 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Java SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} K!TV-->C:\Program Files\K!TV\UninstKTV.exe Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Ma-Config.com-->MsiExec.exe /X{DD987A54-122B-4CFD-A8C5-5577027A6B78} Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Matroska Pack (remove only)-->C:\Program Files\Matroska Pack\Uninstall.exe Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft Money 2007 Home & Business-->"C:\Program Files\Microsoft Money 2007\MNYCoreFiles\Setup\uninst.exe" /s:120 Microsoft Money Shared Libraries-->MsiExec.exe /X{5F00DF7E-418B-4CD9-8EC5-781156BCC49E} Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} My DSC-->C:\Program Files\InstallShield Installation Information\{225af9a1-b556-88d5-94aa-0010b5426419}\setup.exe Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL NetCaptor (remove only)-->"C:\Program Files\NetCaptor\ncuninst.exe" OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe" Pinnacle Hollywood FX for Studio-->C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\uninstal.log Pro Evolution Soccer 5-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{85C3FA3C-4832-4204-B21E-168E4920936A} /l1036 QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly Registry Mechanic 7.0-->"C:\Program Files\Registry Mechanic\unins000.exe" Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Skype 2.5-->"C:\Program Files\Skype\Phone\unins000.exe" SLD Codec Pack-->C:\Program Files\SLD Codec Pack\uninstall.exe SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} SopCast 3.0.1-->C:\Program Files\SopCast\uninst.exe SpeedFan (remove only)-->"C:\Program Files\SpeedFan\uninstall.exe" Steam-->C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG Studio 9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E491AB7-4589-48CA-9CBB-874CB2788391}\Setup.exe" -l0x40c UNINSTALL TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe" TribalWeb 2.35-->"C:\Program Files\TribalWeb.net\unins001.exe" TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C} Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" ======Security center information====== AV: AVG Anti-Virus Free ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem "windir"=%SystemRoot% "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel "PROCESSOR_REVISION"=0403 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "FP_NO_HOST_CHECK"=NO -----------------EOF----------------- K2r

OK j'ai vu la vidéo : "Pour les cracks : un exemple : Cracks, Keygens, ... es-tu sûr de ton choix ?" Je retrouve la saloperie qui m'a infesté ... ma femme a eu le truc :voulez vous installer l'antivirus .... et elle a clike OUI Je pense que le .exe dont je te parlais au début est dans ta liste : * divocodec Je lance le nouveau truc .. K2r

Falkra, Je profites de ton aide pour te demander autre chose ... je ne sais pass si cela est lié, mais depuis 2 mois mon PC redémarre 3 fois de suite au premier allumage du jour !!! A chaque fois le bureau s'affiche/ les icones et puis il reboot !! As tu une idée ?, Merci K2r

Franchement je suis sur le c.. je crois que je vais reflechir à deux fois dans le futur ...; je t 'envois le rapport K2r Falkra, Voici le rapport de HijackThis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:57:45, on 12/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\internet explorer\iexplore.exe C:\hijackth\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll C:\WINDOWS\system32\wavemile.dll c:\windows\system32\vivuyayo.dll c:\windows\system32\wudumuzo.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 6827 bytes Qu'en penses tu ?? perso je n'ai plus de fenêtres intempestives !!! BRAVO l'artiste K2r

Le nettoyage est en cours .... Tu crois qu'un jeu pour gamin a pu faire tout ça ?? c'est déjà fini, je te colle le txt : pou --------------------\\ Lop S&D 4.2.4-9c XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.00GHz ) BIOS : Default System BIOS USER : Adrien ( Administrator ) BOOT : Normal boot Antivirus : AVG Anti-Virus Free 8.0 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:152 Go (Free:23 Go) D:\ (CD or DVD) F:\ (CD or DVD) G:\ (CD or DVD) I:\ (CD or DVD) "C:\Lop SD" ( MAJ : 01-11-2008|16:30 ) Option : [2] ( 12/12/2008|22:42 ) \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\internet bend.exe Supprime! - C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\bits memo extra.exe Supprime! - C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\bkbltavu.exe Supprime! - C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\Mpegheckslow.exe Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@adultfriendfinder[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@advertising[2].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.advertising.inmauritius[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.advertising2.inmauritius[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@fr.xblaster.bigpoint[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@banner.casinoking[2].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@casinoking[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@banner.cotedazurpalace[2].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@cotedazurpalace[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.cotedazurpalace[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@pacificpoker[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@partypoker[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@2xmoinscher[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@cc.2xmoinscher[1].txt Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.2xmoinscher[2].txt Supprime! - C:\WINDOWS\Tasks\AFB3A0B99094558D.job Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site Supprime! - C:\DOCUME~1\Adrien\APPLIC~1\logbon~1 Supprime! - C:\Program Files\logbon~1 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans APPLIC~1 [18/10/2008|18:48] C:\DOCUME~1\Adrien\APPLIC~1\Adobe [05/12/2005|11:16] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM [28/10/2005|20:35] C:\DOCUME~1\Adrien\APPLIC~1\Ahead [07/07/2008|09:15] C:\DOCUME~1\Adrien\APPLIC~1\AVG7 [30/11/2008|20:10] C:\DOCUME~1\Adrien\APPLIC~1\Azureus [27/06/2008|08:02] C:\DOCUME~1\Adrien\APPLIC~1\dvdcss [14/04/2007|18:43] C:\DOCUME~1\Adrien\APPLIC~1\EoRezo [24/11/2008|18:26] C:\DOCUME~1\Adrien\APPLIC~1\FileZilla [25/08/2007|15:23] C:\DOCUME~1\Adrien\APPLIC~1\Google [01/05/2006|20:18] C:\DOCUME~1\Adrien\APPLIC~1\Help [10/10/2007|18:47] C:\DOCUME~1\Adrien\APPLIC~1\HP [23/10/2005|16:37] C:\DOCUME~1\Adrien\APPLIC~1\Identities [14/04/2007|10:56] C:\DOCUME~1\Adrien\APPLIC~1\ItsLabel [06/12/2008|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Leadertech [02/11/2005|14:45] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia [12/12/2008|21:42] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes [09/10/2007|18:24] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft [12/12/2008|14:16] C:\DOCUME~1\Adrien\APPLIC~1\Skype [23/10/2005|20:38] C:\DOCUME~1\Adrien\APPLIC~1\Stilesoft [10/06/2007|11:04] C:\DOCUME~1\Adrien\APPLIC~1\Sun [23/10/2005|17:01] C:\DOCUME~1\Adrien\APPLIC~1\Symantec [14/01/2007|21:53] C:\DOCUME~1\Adrien\APPLIC~1\teamspeak2 [22/05/2007|19:27] C:\DOCUME~1\Adrien\APPLIC~1\TribalWeb [24/10/2005|09:52] C:\DOCUME~1\Adrien\APPLIC~1\vlc [23/10/2005|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [07/07/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVG7 [07/07/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8 [23/05/2008|20:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus [06/09/2007|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [25/11/2007|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft [09/10/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP [14/11/2008|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com [12/12/2008|21:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [06/12/2008|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [23/10/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle [30/01/2006|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [29/10/2005|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [14/12/2005|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc [09/10/2007|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic [27/02/2006|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [24/11/2007|23:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP [08/05/2006|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [05/06/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [23/10/2005|16:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [04/03/2007|14:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [04/03/2007|14:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/10/2005|20:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [12/12/2008 22:00][--ah-----] C:\WINDOWS\tasks\SA.DAT [23/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [23/10/2005|17:54] C:\Program Files\Adobe [29/10/2005|11:17] C:\Program Files\Ahead [17/08/2008|12:43] C:\Program Files\Atari [07/07/2008|09:13] C:\Program Files\AVG [23/10/2005|16:40] C:\Program Files\AvRack [30/11/2008|13:58] C:\Program Files\Azureus [31/12/2007|10:46] C:\Program Files\Cdiscount photos [23/10/2005|16:30] C:\Program Files\ComPlus Applications [06/07/2008|21:17] C:\Program Files\directx [14/08/2008|19:52] C:\Program Files\D-Tools [06/12/2008|10:33] C:\Program Files\EA SPORTS [04/12/2008|02:09] C:\Program Files\eMule [14/04/2007|18:43] C:\Program Files\eoRezo [12/12/2008|00:24] C:\Program Files\Fichiers communs [21/05/2008|18:37] C:\Program Files\FileZilla FTP Client [24/03/2008|20:37] C:\Program Files\Fraps [25/03/2008|12:59] C:\Program Files\Free [30/04/2008|22:35] C:\Program Files\Free Audio Pack [07/10/2007|18:10] C:\Program Files\Google [04/03/2007|14:23] C:\Program Files\Grisoft [09/10/2007|20:30] C:\Program Files\Hewlett-Packard [09/10/2007|20:36] C:\Program Files\HP [06/12/2005|10:14] C:\Program Files\hp deskjet 3820 series [07/12/2008|14:11] C:\Program Files\InstallShield Installation Information [14/11/2008|18:50] C:\Program Files\Intel [16/11/2008|23:59] C:\Program Files\InterActual [02/11/2008|22:33] C:\Program Files\Internet Explorer [23/11/2008|00:39] C:\Program Files\Java [25/11/2007|12:20] C:\Program Files\K!TV [02/11/2008|23:01] C:\Program Files\Lavalys [14/11/2008|18:41] C:\Program Files\ma-config.com [12/12/2008|21:42] C:\Program Files\Malwarebytes' Anti-Malware [23/10/2005|21:00] C:\Program Files\Matroska Pack [23/08/2008|11:07] C:\Program Files\Messenger [01/06/2006|21:33] C:\Program Files\Microsoft AntiSpyware [07/06/2008|21:45] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [23/10/2005|16:33] C:\Program Files\microsoft frontpage [28/05/2007|11:10] C:\Program Files\Microsoft Money 2007 [23/10/2005|16:51] C:\Program Files\Microsoft Office [23/08/2008|11:03] C:\Program Files\Movie Maker [23/10/2005|16:30] C:\Program Files\MSN [23/10/2005|16:30] C:\Program Files\MSN Gaming Zone [15/11/2006|23:13] C:\Program Files\MSXML 4.0 [23/10/2005|20:38] C:\Program Files\NetCaptor [23/08/2008|10:58] C:\Program Files\NetMeeting [23/08/2008|10:58] C:\Program Files\Outlook Express [11/10/2007|12:46] C:\Program Files\Picasa2 [14/08/2008|19:52] C:\Program Files\Pinnacle [15/08/2008|14:52] C:\Program Files\Pro Evolution Soccer 5 [07/10/2007|18:41] C:\Program Files\QuickTime [25/12/2007|22:57] C:\Program Files\Realtek AC97 [23/10/2005|16:40] C:\Program Files\Realtek Sound Manager [12/12/2008|21:00] C:\Program Files\Registry Mechanic [23/10/2005|16:32] C:\Program Files\Services en ligne [23/10/2005|17:53] C:\Program Files\Skype [24/11/2006|19:35] C:\Program Files\SLD Codec Pack [23/10/2005|18:36] C:\Program Files\SmartSound Software [15/08/2008|22:46] C:\Program Files\SopCast [22/11/2008|12:52] C:\Program Files\SpeedFan [12/12/2008|21:02] C:\Program Files\Steam [14/01/2007|21:53] C:\Program Files\Teamspeak2_RC2 [14/08/2008|19:52] C:\Program Files\TribalWeb.net [15/08/2008|22:58] C:\Program Files\TVAnts [23/10/2005|16:37] C:\Program Files\Uninstall Information [01/09/2006|20:40] C:\Program Files\USB Vibration Joystick [23/10/2005|17:53] C:\Program Files\VideoLAN [05/06/2008|23:00] C:\Program Files\Windows Live [22/01/2007|21:07] C:\Program Files\Windows Media Connect 2 [23/08/2008|10:58] C:\Program Files\Windows Media Player [23/08/2008|10:58] C:\Program Files\Windows NT [23/10/2005|16:30] C:\Program Files\WindowsUpdate [21/11/2008|21:23] C:\Program Files\WinRAR [25/11/2007|14:18] C:\Program Files\WinTV [23/10/2005|16:33] C:\Program Files\xerox [14/08/2008|19:52] C:\Program Files\Yacc Yet Another CSO Compressor --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [23/10/2005|17:55] C:\Program Files\Fichiers communs\Adobe [29/10/2005|11:17] C:\Program Files\Fichiers communs\Ahead [23/10/2005|16:51] C:\Program Files\Fichiers communs\DESIGNER [18/01/2007|22:50] C:\Program Files\Fichiers communs\Hewlett-Packard [09/10/2007|20:34] C:\Program Files\Fichiers communs\HP [23/10/2005|18:36] C:\Program Files\Fichiers communs\InstallShield [10/06/2007|11:01] C:\Program Files\Fichiers communs\Java [07/07/2008|09:12] C:\Program Files\Fichiers communs\Microsoft Shared [23/10/2005|16:31] C:\Program Files\Fichiers communs\MSSoap [23/10/2005|23:22] C:\Program Files\Fichiers communs\ODBC [23/10/2005|16:31] C:\Program Files\Fichiers communs\Services [09/10/2007|20:34] C:\Program Files\Fichiers communs\Sonic Shared [23/10/2005|23:22] C:\Program Files\Fichiers communs\SpeechEngines [27/02/2006|09:32] C:\Program Files\Fichiers communs\Symantec Shared [23/08/2008|11:11] C:\Program Files\Fichiers communs\System [05/06/2008|23:00] C:\Program Files\Fichiers communs\WindowsLiveInstaller --------------------\\ Process ( 34 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-12 22:44:11 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\Adrien\Mes documents\Jeux.Pour.PC-Dora.L'exploratrice.Les.Aventures.De.Sakado.(Crack.No.Cd).Fr.by.eMule-Paradise.com.iso C:\DOCUME~1\Adrien\Recent\Crack Nocd - Dora L'exploratrice - Les Animaux De La Jungle.rar.lnk [F:1185][D:10]-> C:\DOCUME~1\Adrien\LOCALS~1\Temp [F:2056][D:0]-> C:\DOCUME~1\Adrien\Cookies [F:933][D:4]-> C:\DOCUME~1\Adrien\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 12/12/2008|22:37 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 12/12/2008|22:45 - Option : [2] --------------------\\ Fin du rapport a 22:45:24 Merci K2r

Fin de la 1ere étape : je te copie le txt : MERCI encore --------------------\\ Lop S&D 4.2.4-9c XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.00GHz ) BIOS : Default System BIOS USER : Adrien ( Administrator ) BOOT : Normal boot Antivirus : AVG Anti-Virus Free 8.0 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:152 Go (Free:23 Go) D:\ (CD or DVD) F:\ (CD or DVD) G:\ (CD or DVD) I:\ (CD or DVD) "C:\Lop SD" ( MAJ : 01-11-2008|16:30 ) Option : [1] ( 12/12/2008|22:34 ) --------------------\\ Listing des dossiers dans APPLIC~1 [18/10/2008|18:48] C:\DOCUME~1\Adrien\APPLIC~1\Adobe [05/12/2005|11:16] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM [28/10/2005|20:35] C:\DOCUME~1\Adrien\APPLIC~1\Ahead [07/07/2008|09:15] C:\DOCUME~1\Adrien\APPLIC~1\AVG7 [30/11/2008|20:10] C:\DOCUME~1\Adrien\APPLIC~1\Azureus [27/06/2008|08:02] C:\DOCUME~1\Adrien\APPLIC~1\dvdcss [14/04/2007|18:43] C:\DOCUME~1\Adrien\APPLIC~1\EoRezo [24/11/2008|18:26] C:\DOCUME~1\Adrien\APPLIC~1\FileZilla [25/08/2007|15:23] C:\DOCUME~1\Adrien\APPLIC~1\Google [01/05/2006|20:18] C:\DOCUME~1\Adrien\APPLIC~1\Help [10/10/2007|18:47] C:\DOCUME~1\Adrien\APPLIC~1\HP [23/10/2005|16:37] C:\DOCUME~1\Adrien\APPLIC~1\Identities [14/04/2007|10:56] C:\DOCUME~1\Adrien\APPLIC~1\ItsLabel [06/12/2008|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Leadertech [08/12/2008|20:33] C:\DOCUME~1\Adrien\APPLIC~1\log bone camp [02/11/2005|14:45] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia [12/12/2008|21:42] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes [09/10/2007|18:24] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft [12/12/2008|14:16] C:\DOCUME~1\Adrien\APPLIC~1\Skype [23/10/2005|20:38] C:\DOCUME~1\Adrien\APPLIC~1\Stilesoft [10/06/2007|11:04] C:\DOCUME~1\Adrien\APPLIC~1\Sun [23/10/2005|17:01] C:\DOCUME~1\Adrien\APPLIC~1\Symantec [14/01/2007|21:53] C:\DOCUME~1\Adrien\APPLIC~1\teamspeak2 [22/05/2007|19:27] C:\DOCUME~1\Adrien\APPLIC~1\TribalWeb [24/10/2005|09:52] C:\DOCUME~1\Adrien\APPLIC~1\vlc [23/10/2005|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [07/07/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVG7 [07/07/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8 [23/05/2008|20:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus [06/09/2007|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [08/12/2008|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site [25/11/2007|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft [09/10/2007|20:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP [14/11/2008|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com [12/12/2008|21:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [06/12/2008|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [23/10/2005|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle [30/01/2006|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [29/10/2005|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [14/12/2005|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc [09/10/2007|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic [27/02/2006|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [24/11/2007|23:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP [08/05/2006|21:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [05/06/2008|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [23/10/2005|16:32] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [04/03/2007|14:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [04/03/2007|14:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/10/2005|20:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [12/12/2008 21:00][--ah-----] C:\WINDOWS\tasks\AFB3A0B99094558D.job [12/12/2008 22:00][--ah-----] C:\WINDOWS\tasks\SA.DAT [23/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini ( AFB3A0B99094558D.job )=( c:\docume~1\adrien\applic~1\logbon~1\Mpegheckslow.exe ) --------------------\\ Listing des dossiers dans C:\Program Files [23/10/2005|17:54] C:\Program Files\Adobe [29/10/2005|11:17] C:\Program Files\Ahead [17/08/2008|12:43] C:\Program Files\Atari [07/07/2008|09:13] C:\Program Files\AVG [23/10/2005|16:40] C:\Program Files\AvRack [30/11/2008|13:58] C:\Program Files\Azureus [31/12/2007|10:46] C:\Program Files\Cdiscount photos [23/10/2005|16:30] C:\Program Files\ComPlus Applications [06/07/2008|21:17] C:\Program Files\directx [14/08/2008|19:52] C:\Program Files\D-Tools [06/12/2008|10:33] C:\Program Files\EA SPORTS [04/12/2008|02:09] C:\Program Files\eMule [14/04/2007|18:43] C:\Program Files\eoRezo [12/12/2008|00:24] C:\Program Files\Fichiers communs [21/05/2008|18:37] C:\Program Files\FileZilla FTP Client [24/03/2008|20:37] C:\Program Files\Fraps [25/03/2008|12:59] C:\Program Files\Free [30/04/2008|22:35] C:\Program Files\Free Audio Pack [07/10/2007|18:10] C:\Program Files\Google [04/03/2007|14:23] C:\Program Files\Grisoft [09/10/2007|20:30] C:\Program Files\Hewlett-Packard [09/10/2007|20:36] C:\Program Files\HP [06/12/2005|10:14] C:\Program Files\hp deskjet 3820 series [07/12/2008|14:11] C:\Program Files\InstallShield Installation Information [14/11/2008|18:50] C:\Program Files\Intel [16/11/2008|23:59] C:\Program Files\InterActual [02/11/2008|22:33] C:\Program Files\Internet Explorer [23/11/2008|00:39] C:\Program Files\Java [25/11/2007|12:20] C:\Program Files\K!TV [02/11/2008|23:01] C:\Program Files\Lavalys [08/12/2008|20:32] C:\Program Files\log bone camp [14/11/2008|18:41] C:\Program Files\ma-config.com [12/12/2008|21:42] C:\Program Files\Malwarebytes' Anti-Malware [23/10/2005|21:00] C:\Program Files\Matroska Pack [23/08/2008|11:07] C:\Program Files\Messenger [01/06/2006|21:33] C:\Program Files\Microsoft AntiSpyware [07/06/2008|21:45] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [23/10/2005|16:33] C:\Program Files\microsoft frontpage [28/05/2007|11:10] C:\Program Files\Microsoft Money 2007 [23/10/2005|16:51] C:\Program Files\Microsoft Office [23/08/2008|11:03] C:\Program Files\Movie Maker [23/10/2005|16:30] C:\Program Files\MSN [23/10/2005|16:30] C:\Program Files\MSN Gaming Zone [15/11/2006|23:13] C:\Program Files\MSXML 4.0 [23/10/2005|20:38] C:\Program Files\NetCaptor [23/08/2008|10:58] C:\Program Files\NetMeeting [23/08/2008|10:58] C:\Program Files\Outlook Express [11/10/2007|12:46] C:\Program Files\Picasa2 [14/08/2008|19:52] C:\Program Files\Pinnacle [15/08/2008|14:52] C:\Program Files\Pro Evolution Soccer 5 [07/10/2007|18:41] C:\Program Files\QuickTime [25/12/2007|22:57] C:\Program Files\Realtek AC97 [23/10/2005|16:40] C:\Program Files\Realtek Sound Manager [12/12/2008|21:00] C:\Program Files\Registry Mechanic [23/10/2005|16:32] C:\Program Files\Services en ligne [23/10/2005|17:53] C:\Program Files\Skype [24/11/2006|19:35] C:\Program Files\SLD Codec Pack [23/10/2005|18:36] C:\Program Files\SmartSound Software [15/08/2008|22:46] C:\Program Files\SopCast [22/11/2008|12:52] C:\Program Files\SpeedFan [12/12/2008|21:02] C:\Program Files\Steam [14/01/2007|21:53] C:\Program Files\Teamspeak2_RC2 [14/08/2008|19:52] C:\Program Files\TribalWeb.net [15/08/2008|22:58] C:\Program Files\TVAnts [23/10/2005|16:37] C:\Program Files\Uninstall Information [01/09/2006|20:40] C:\Program Files\USB Vibration Joystick [23/10/2005|17:53] C:\Program Files\VideoLAN [05/06/2008|23:00] C:\Program Files\Windows Live [22/01/2007|21:07] C:\Program Files\Windows Media Connect 2 [23/08/2008|10:58] C:\Program Files\Windows Media Player [23/08/2008|10:58] C:\Program Files\Windows NT [23/10/2005|16:30] C:\Program Files\WindowsUpdate [21/11/2008|21:23] C:\Program Files\WinRAR [25/11/2007|14:18] C:\Program Files\WinTV [23/10/2005|16:33] C:\Program Files\xerox [14/08/2008|19:52] C:\Program Files\Yacc Yet Another CSO Compressor --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [23/10/2005|17:55] C:\Program Files\Fichiers communs\Adobe [29/10/2005|11:17] C:\Program Files\Fichiers communs\Ahead [23/10/2005|16:51] C:\Program Files\Fichiers communs\DESIGNER [18/01/2007|22:50] C:\Program Files\Fichiers communs\Hewlett-Packard [09/10/2007|20:34] C:\Program Files\Fichiers communs\HP [23/10/2005|18:36] C:\Program Files\Fichiers communs\InstallShield [10/06/2007|11:01] C:\Program Files\Fichiers communs\Java [07/07/2008|09:12] C:\Program Files\Fichiers communs\Microsoft Shared [23/10/2005|16:31] C:\Program Files\Fichiers communs\MSSoap [23/10/2005|23:22] C:\Program Files\Fichiers communs\ODBC [23/10/2005|16:31] C:\Program Files\Fichiers communs\Services [09/10/2007|20:34] C:\Program Files\Fichiers communs\Sonic Shared [23/10/2005|23:22] C:\Program Files\Fichiers communs\SpeechEngines [27/02/2006|09:32] C:\Program Files\Fichiers communs\Symantec Shared [23/08/2008|11:11] C:\Program Files\Fichiers communs\System [05/06/2008|23:00] C:\Program Files\Fichiers communs\WindowsLiveInstaller --------------------\\ Process ( 39 Processes ) iexplore.exe ~ [PID:2600] IEXPLORE.EXE ~ [PID:2644] iexplore.exe ~ [PID:2992] IEXPLORE.EXE ~ [PID:2240] --------------------\\ Recherche avec S_Lop C:\DOCUME~1\Adrien\APPLIC~1\LOGBON~1 C:\DOCUME~1\Adrien\APPLIC~1\LOGBON~1\bits memo extra.exe C:\DOCUME~1\Adrien\APPLIC~1\LOGBON~1\bkbltavu.exe C:\DOCUME~1\Adrien\APPLIC~1\LOGBON~1\Mpegheckslow.exe --------------------\\ Recherche de Fichiers / Dossiers Lop C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site\internet bend.exe C:\DOCUME~1\Adrien\APPLIC~1\logbon~1 C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\bits memo extra.exe C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\bkbltavu.exe C:\DOCUME~1\Adrien\APPLIC~1\logbon~1\Mpegheckslow.exe C:\Program Files\logbon~1 C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@adultfriendfinder[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@advertising[2].txt C:\DOCUME~1\Adrien\Cookies\adrien@www.advertising.inmauritius[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@www.advertising2.inmauritius[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt C:\DOCUME~1\Adrien\Cookies\adrien@fr.xblaster.bigpoint[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@banner.casinoking[2].txt C:\DOCUME~1\Adrien\Cookies\adrien@casinoking[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@banner.cotedazurpalace[2].txt C:\DOCUME~1\Adrien\Cookies\adrien@cotedazurpalace[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@www.cotedazurpalace[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@pacificpoker[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@partypoker[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@2xmoinscher[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@cc.2xmoinscher[1].txt C:\DOCUME~1\Adrien\Cookies\adrien@www.2xmoinscher[2].txt C:\WINDOWS\Tasks\AFB3A0B99094558D.job --------------------\\ Verification du Registre [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Gram Soft Dead] "DisplayName"="CiD Help" "UninstallString"="C:\\DOCUME~1\\Adrien\\APPLIC~1\\LOGBON~1\\bits memo extra.exe -uninstall" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "peak close"="C:\\DOCUME~1\\Adrien\\APPLIC~1\\LOGBON~1\\bits memo extra.exe" "peak close"="C:\\DOCUME~1\\Adrien\\APPLIC~1\\LOGBON~1\\bits memo extra.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-12 22:36:02 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\Adrien\Mes documents\Jeux.Pour.PC-Dora.L'exploratrice.Les.Aventures.De.Sakado.(Crack.No.Cd).Fr.by.eMule-Paradise.com.iso C:\DOCUME~1\Adrien\Recent\Crack Nocd - Dora L'exploratrice - Les Animaux De La Jungle.rar.lnk [F:1185][D:10]-> C:\DOCUME~1\Adrien\LOCALS~1\Temp [F:2074][D:0]-> C:\DOCUME~1\Adrien\Cookies [F:938][D:4]-> C:\DOCUME~1\Adrien\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 12/12/2008|22:37 - Option : [1] --------------------\\ Fin du rapport a 22:37:42 K2r

Merci Falkra, K2r

tu as raison, une belle récolte .... pour ton info, les pub intempestives recommencent malgré ça et le reboot !!! Voilà le nouveau rapport Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:08:28, on 12/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\hkcmd.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\hijackth\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [peak close] C:\DOCUME~1\Adrien\APPLIC~1\LOGBON~1\bits memo extra.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://ny.contentmatch.net (HKLM) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h30155.www3.hp.com/ediags/dd/instal...nosticsxp2k.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Au...eUploader35.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll C:\WINDOWS\system32\wavemile.dll c:\windows\system32\vivuyayo.dll c:\windows\system32\wudumuzo.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 7105 bytes