elbasto007

Voici déjà mon rapport pour OTMoveIt3.. PARFAIT, ça fonctionne à nouveau.. Je peux écrire tête, fête et Noël sans problème! Sais-tu à quoi ce serait dû? J'ai une copine qui a le même problème, je lui ai dit de mettre son rapport HIJACK sur le forum. Que dois-je faire pour éviter ce genre de soucis à l'avenir? En tous cas, MERCI BEAUCOUP pour ton aide! ========== PROCESSES ========== Process explorer.exe killed successfully. Process windo.exe killed successfully. Process winacces.exe killed successfully. Process myapp.exe killed successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\DRIVESYS1 deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\DRIVESYS deleted successfully. ========== FILES ========== C:\Windows\System32\bycool\winacces.exe moved successfully. C:\Windows\System32\bycool\myapp.exe moved successfully. C:\Windows\System32\bycool1\windo.exe moved successfully. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\Bastien\LOCALS~1\Temp\~DF948E.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Bastien\LOCALS~1\Temp\~DF94A0.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot. Local Service Temp folder emptied. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\JET36D5.tmp scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6b8.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6e8.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_bc.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12292008_112701 Files moved on Reboot... File C:\DOCUME~1\Bastien\LOCALS~1\Temp\~DF948E.tmp not found! File C:\DOCUME~1\Bastien\LOCALS~1\Temp\~DF94A0.tmp not found! File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot. File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found! File C:\WINDOWS\temp\JET36D5.tmp not found! File C:\WINDOWS\temp\Perflib_Perfdata_6b8.dat not found! File C:\WINDOWS\temp\Perflib_Perfdata_6e8.dat not found! C:\WINDOWS\temp\Perflib_Perfdata_bc.dat moved successfully.

Voici le résultat pour: C:\Windows\System32\bycool\myapp.exe Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.73 2008.12.28 - AhnLab-V3 2008.12.25.0 2008.12.27 - AntiVir 7.9.0.45 2008.12.28 - Authentium 5.1.0.4 2008.12.28 - Avast 4.8.1281.0 2008.12.28 - AVG 8.0.0.199 2008.12.28 - BitDefender 7.2 2008.12.28 - CAT-QuickHeal 10.00 2008.12.27 - ClamAV 0.94.1 2008.12.28 - Comodo 834 2008.12.28 - DrWeb 4.44.0.09170 2008.12.28 - eSafe 7.0.17.0 2008.12.28 Suspicious File eTrust-Vet 31.6.6279 2008.12.28 - Ewido 4.0 2008.12.28 - F-Prot 4.4.4.56 2008.12.27 - F-Secure 8.0.14332.0 2008.12.28 - Fortinet 3.117.0.0 2008.12.28 - GData 19 2008.12.28 - Ikarus T3.1.1.45.0 2008.12.28 - K7AntiVirus 7.10.568 2008.12.27 - Kaspersky 7.0.0.125 2008.12.28 - McAfee 5477 2008.12.28 - McAfee+Artemis 5477 2008.12.28 - Microsoft 1.4205 2008.12.28 - NOD32 3719 2008.12.27 - Norman 5.80.02 2008.12.26 - Panda 9.0.0.4 2008.12.28 Suspicious file PCTools 4.4.2.0 2008.12.28 - Prevx1 V2 2008.12.28 - Rising 21.09.62.00 2008.12.28 - SecureWeb-Gateway 6.7.6 2008.12.28 - Sophos 4.37.0 2008.12.28 - Sunbelt 3.2.1809.2 2008.12.22 - Symantec 10 2008.12.28 - TheHacker 6.3.1.4.201 2008.12.28 - TrendMicro 8.700.0.1004 2008.12.26 - VBA32 3.12.8.10 2008.12.28 - ViRobot 2008.12.26.1536 2008.12.26 - VirusBuster 4.5.11.0 2008.12.28 - Information additionnelle File size: 161792 bytes MD5...: 3a936cdc26c5226dbb9e2059c4734d1f SHA1..: dfa5a51525439f6fc2deb4d93b552c488eb3ec8e SHA256: e47d287cc53f9672a4e2ed29ec777a49d56ff5e4c0c382f5073f878f46ba5a9e SHA512: 004fa7a41f17380407091e36ab9bea80824db44fb66100f651e1ae7062671ec4 9b15ac6d8d92edc079751e604dd5d97847247b3b168750b6c6cc4ec40b257f29 ssdeep: 3072:4BV820qjvSfhWJ/JZBkoL7U20T2X/5W5gdKo2Gsoj02TyNvHOQo/WGJUu8h 6ProS:C0qTseZBD730T2X/84o12Qo/WGXoS PEiD..: - TrID..: File type identification UPX compressed Win32 Executable (38.5%) Win32 EXE Yoda's Crypter (33.4%) Win32 Executable Generic (10.7%) Win32 Dynamic Link Library (generic) (9.5%) Win16/32 Executable Delphi generic (2.6%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x472670 timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x4c000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x4d000 0x27000 0x26400 7.99 a5a0a65d65733f4d737edf56f2704cdc .rsrc 0x74000 0x1000 0x1000 3.65 8a5f6a5d781b19f304f856385f881368 ( 8 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > advapi32.dll: RegFlushKey > comctl32.dll: ImageList_Add > gdi32.dll: SaveDC > my.dll: EndKeybrdHook > oleaut32.dll: VariantCopy > shell32.dll: ShellExecuteA > user32.dll: GetDC ( 0 exports ) packers (Kaspersky): UPX packers (F-Prot): UPX_LZMA ------------------------------------------------------------------------------------------------------------------------- Voici le résultat pour: C:\Windows\System32\bycool\winacces.exe Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.73 2008.12.28 - AhnLab-V3 2008.12.25.0 2008.12.27 - AntiVir 7.9.0.45 2008.12.28 - Authentium 5.1.0.4 2008.12.28 - Avast 4.8.1281.0 2008.12.28 - AVG 8.0.0.199 2008.12.28 - BitDefender 7.2 2008.12.28 - CAT-QuickHeal 10.00 2008.12.27 - ClamAV 0.94.1 2008.12.28 - Comodo 834 2008.12.28 - DrWeb 4.44.0.09170 2008.12.28 - eSafe 7.0.17.0 2008.12.28 Suspicious File eTrust-Vet 31.6.6279 2008.12.28 - Ewido 4.0 2008.12.28 - F-Prot 4.4.4.56 2008.12.27 - F-Secure 8.0.14332.0 2008.12.28 - Fortinet 3.117.0.0 2008.12.28 - GData 19 2008.12.28 - Ikarus T3.1.1.45.0 2008.12.28 - K7AntiVirus 7.10.568 2008.12.27 - Kaspersky 7.0.0.125 2008.12.28 - McAfee 5477 2008.12.28 - McAfee+Artemis 5477 2008.12.28 - Microsoft 1.4205 2008.12.28 - NOD32 3719 2008.12.27 - Norman 5.80.02 2008.12.26 - Panda 9.0.0.4 2008.12.28 - PCTools 4.4.2.0 2008.12.28 - Prevx1 V2 2008.12.28 - Rising 21.09.62.00 2008.12.28 - SecureWeb-Gateway 6.7.6 2008.12.28 - Sophos 4.37.0 2008.12.28 - Sunbelt 3.2.1809.2 2008.12.22 - Symantec 10 2008.12.28 - TheHacker 6.3.1.4.201 2008.12.28 - TrendMicro 8.700.0.1004 2008.12.26 - VBA32 3.12.8.10 2008.12.28 - ViRobot 2008.12.26.1536 2008.12.26 - VirusBuster 4.5.11.0 2008.12.28 - Information additionnelle File size: 1133622 bytes MD5...: 7a06dff9189a0cbb23b46afed14cbc74 SHA1..: 9aee5440c46ef20ef8ad20c7e8a6f54bffb80395 SHA256: 0388d16dc56e5dd2091deb93ca876fb8bf06051a81122352910f117e7191ef1e SHA512: 99a6d847568c15fa51500adc99f406454019640e12b71408ef5756c90b16f7f8 4ae81bf27302862e07c1e783b633dc395355de3849321108efd0bafaf06a8ac7 ssdeep: 24576:KPatCg7EPzFokV3Mpt7K5YOyyc3QwPIC5aZxSdgJEIYaQ08F+5mUbRVwX8 :htV7EP5VNYSc+1RYaQ0Hmke8 PEiD..: - TrID..: File type identification UPX compressed Win32 Executable (39.5%) Win32 EXE Yoda's Crypter (34.3%) Win32 Executable Generic (11.0%) Win32 Dynamic Link Library (generic) (9.8%) Generic Win/DOS Executable (2.5%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x498ca0 timedatestamp.....: 0x4850e379 (Thu Jun 12 08:51:05 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x60000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x61000 0x38000 0x38000 7.93 203f39ca3a4df8ddeaf319b4b3a70c07 .rsrc 0x99000 0x7000 0x6a00 2.69 2d90f59613795ca42d2cc590ff127cd0 ( 13 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > ADVAPI32.dll: RegCloseKey > COMCTL32.dll: ImageList_Create > comdlg32.dll: GetSaveFileNameW > GDI32.dll: LineTo > MPR.dll: WNetUseConnectionW > ole32.dll: CoInitialize > OLEAUT32.dll: - > SHELL32.dll: DragFinish > USER32.dll: GetDC > VERSION.dll: VerQueryValueW > WINMM.dll: timeGetTime > WSOCK32.dll: - ( 0 exports ) packers (F-Prot): UPX packers (Kaspersky): PE_Patch.UPX, UPX, UPX, UPX CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=7a06dff9189a0cbb23b46afed14cbc74' target='_blank'>http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=7a06dff9189a0cbb23b46afed14cbc74</a> ------------------------------------------------------------------------------------------- Voici le résultat pour: C:\Windows\System32\bycool1\windo.exe Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.73 2008.12.28 - AhnLab-V3 2008.12.25.0 2008.12.27 - AntiVir 7.9.0.45 2008.12.28 - Authentium 5.1.0.4 2008.12.28 - Avast 4.8.1281.0 2008.12.28 - AVG 8.0.0.199 2008.12.28 - BitDefender 7.2 2008.12.28 - CAT-QuickHeal 10.00 2008.12.27 - ClamAV 0.94.1 2008.12.28 - Comodo 834 2008.12.28 DrWeb 4.44.0.09170 2008.12.28 - eSafe 7.0.17.0 2008.12.28 Suspicious File eTrust-Vet 31.6.6279 2008.12.28 - Ewido 4.0 2008.12.28 - F-Prot 4.4.4.56 2008.12.27 - F-Secure 8.0.14332.0 2008.12.28 - Fortinet 3.117.0.0 2008.12.28 - GData 19 2008.12.28 - Ikarus T3.1.1.45.0 2008.12.28 - K7AntiVirus 7.10.568 2008.12.27 - Kaspersky 7.0.0.125 2008.12.28 - McAfee 5477 2008.12.28 - McAfee+Artemis 5477 2008.12.28 - Microsoft 1.4205 2008.12.28 - NOD32 3719 2008.12.27 - Norman 5.80.02 2008.12.26 - Panda 9.0.0.4 2008.12.28 - PCTools 4.4.2.0 2008.12.28 - Prevx1 V2 2008.12.28 - Rising 21.09.62.00 2008.12.28 - SecureWeb-Gateway 6.7.6 2008.12.28 - Sophos 4.37.0 2008.12.28 W32/Autorun-SR Sunbelt 3.2.1809.2 2008.12.22 - Symantec 10 2008.12.28 - TheHacker 6.3.1.4.201 2008.12.28 - TrendMicro 8.700.0.1004 2008.12.26 - VBA32 3.12.8.10 2008.12.28 - ViRobot 2008.12.26.1536 2008.12.26 - VirusBuster 4.5.11.0 2008.12.28 - Information additionnelle File size: 1393777 bytes MD5...: 5e13e8c59937866a41c533ed47ab087b SHA1..: 8980158a7a0419eb767770e14eb30c7b9a374342 SHA256: 4f07ba3ea6095fc4dc01e4ab41fb3f543d227ba74079d2dbc87437ee168cb618 SHA512: e9bd038c241c23000f8606cdf3c9c913f8cf038944a67cbf0ab93626c6b5632f 8bf490c40051a9c23a9f933947e5061bfdc52b0a527cfa176253890862a9f5aa ssdeep: 24576:muGShxmS7J63cCEpshK9pDDk+ZGC4BXj89NTiRDyeu1WL/BF74:2Shxt7c 3c8qNq149NUKA/E PEiD..: - TrID..: File type identification UPX compressed Win32 Executable (39.5%) Win32 EXE Yoda's Crypter (34.3%) Win32 Executable Generic (11.0%) Win32 Dynamic Link Library (generic) (9.8%) Generic Win/DOS Executable (2.5%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x498440 timedatestamp.....: 0x4850e379 (Thu Jun 12 08:51:05 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x5f000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x60000 0x39000 0x38600 7.93 646cfca0d452a6c4ea2be9f4c82162fa .rsrc 0x99000 0x7000 0x6600 2.65 02466e07a2059fed50a9b91fd9f6ba58 ( 13 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > ADVAPI32.dll: RegCloseKey > COMCTL32.dll: ImageList_Create > comdlg32.dll: GetSaveFileNameW > GDI32.dll: LineTo > MPR.dll: WNetUseConnectionW > ole32.dll: CoInitialize > OLEAUT32.dll: - > SHELL32.dll: DragFinish > USER32.dll: GetDC > VERSION.dll: VerQueryValueW > WINMM.dll: timeGetTime > WSOCK32.dll: - ( 0 exports ) packers (Kaspersky): PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, UPX, UPX packers (F-Prot): UPX --------------------------------------------------------------------------------------- Je viens d'apprendre qu'une de mes amies avait exactement le même problème que moi. De plus, lorsque je fais copier-coller avec le raccourci clavier, ça foire.. Pfffff! En tous cas, un IMMENSE merci pour ton aide!

Peut-^^etre fallait-il que je le fasse en mode sans échec?

J'avais déjà passé ce programme ce matin, il m'avait supprimé 4 fichiers je pense.. Je viens de le refaire, voici mon rapport: Malwarebytes' Anti-Malware 1.31 Version de la base de données: 1562 Windows 5.1.2600 Service Pack 2 28/12/2008 15:35:15 mbam-log-2008-12-28 (15-35-15).txt Type de recherche: Examen rapide Eléments examinés: 60156 Temps écoulé: 5 minute(s), 52 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

Bonsoir à tous, J'ai un problème d'accent circonflexe comme beaucoup d'autres.. J'ai passé plein d'antivirus, rien ne fonctionne.. Voici mon rapport HIJACK THIS. Pouvez-vous m'aider? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:29:22, on 27/12/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Apoint\Apoint.exe C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\ICO.EXE C:\Program Files\Sony\VAIO Power Management\SPMgr.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Sony\ISB Utility\ISBMgr.exe C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe C:\Windows\System32\bycool1\windo.exe C:\Windows\System32\bycool\winacces.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Windows\System32\bycool\myapp.exe C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Sony\VAIO Event Service\VESMgr.exe C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE O4 - HKLM\..\Run: [sonyPowerCfg] "C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" O4 - HKLM\..\Run: [iSBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe O4 - HKLM\..\Run: [switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary O4 - HKLM\..\Run: [DRIVESYS1] C:\Windows\System32\bycool1\windo.exe O4 - HKLM\..\Run: [DRIVESYS] C:\Windows\System32\bycool\winacces.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/ O15 - Trusted Zone: *.canalplay.com (HKLM) O15 - Trusted Zone: *.canalplusactive.com (HKLM) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {070CA17A-4BD2-4612-83B4-32B1B9159B47} - http://uc.sina.com.cn/download/live/weblive2.4.0.0.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab55762.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (file missing) O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Unknown owner - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (file missing) O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe -- End of file - 13513 bytes