mkl08

J ai mon pc qui rame beaucoup il es très très lent,alors qi quelqu'un peut m'aider SVP,ça serait gentil.MERCI D'AVANCE. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:27:55, on 06/02/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\rundll32.exe C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\AOL\1244972105\ee\aolsoftware.exe C:\Program Files\Iminent\IMBooster\IMBooster.exe C:\Program Files\HiYo\Bin\HiYo.exe C:\Windows\system32\conime.exe C:\Program Files\EoRezo\EoEngine.exe C:\Program Files\SweetIM\Messenger\SweetIM.exe C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe C:\Program Files\Babylon\Babylon-Pro\Babylon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe C:\Users\dudul\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F8OHCJD9\HiJackThis[1].exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=A...07&m=el1200 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr/fr/adsl.jsp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx?b=A...07&m=el1200 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll O1 - Hosts: ::1 localhost O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha0.dll O2 - BHO: IMBooster4web-en Toolbar - {346de098-61f9-4b42-89da-6dfba7091bb6} - C:\Program Files\IMBooster4web-en\tbIMB1.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: peer2peer Toolbar - {bbd2ed67-d377-443d-b126-48572a40ff44} - C:\Program Files\peer2peer\tbpee1.dll O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O2 - BHO: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyBa.dll O3 - Toolbar: peer2peer Toolbar - {bbd2ed67-d377-443d-b126-48572a40ff44} - C:\Program Files\peer2peer\tbpee1.dll O3 - Toolbar: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha0.dll O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,2,0.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: IMBooster4web-en Toolbar - {346de098-61f9-4b42-89da-6dfba7091bb6} - C:\Program Files\IMBooster4web-en\tbIMB1.dll O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O3 - Toolbar: myBabylon English4 Toolbar - {fc600575-3013-4e8e-941c-4b00dafce730} - C:\Program Files\myBabylon_English4\tbmyBa.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [setresolution] C:\ACER\config\1366x768.cmd O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1244972105\ee\AOLSoftware.exe O4 - HKLM\..\Run: [iMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe" O4 - HKLM\..\Run: [sweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe O4 - HKLM\..\Run: [babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\RunOnce: [softwareHelper] C:\Users\fabienne\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\Windows\system32\Shdocvw.dll O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll O13 - Gopher Prefix: O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGam...1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\ORSP Client\fsorsp.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe -- End of file - 11897 bytes

Bonjour, je voudrai savoir si quelqu'un pourrai m'aider SVP,j'ai mon pc qui rame très fort. Voilà mon rapport hijackthis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:42:06, on 07/08/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\CLCFUZGB\HiJackThis[1].exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [workflow] D:\install\workflow.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: BTTray.lnk = ? O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe -- End of file - 4818 bytes Merci d'avance.

Merci pour tout.

[ Rapport ToolsCleaner version 2.3.9 (par A.Rothstein & dj QUIOU) ] --> Recherche: C:\cleannavi.txt: trouvé ! C:\lopR.txt: trouvé ! C:\Lop SD: trouvé ! C:\Lop SD\catchme.exe: trouvé ! C:\Lop SD\catchme.log: trouvé ! C:\Program Files\Navilog1: trouvé ! C:\Program Files\Navilog1\Navilog1.bat: trouvé ! C:\Program Files\Navilog1\catchme.exe: trouvé ! C:\Users\Mike\SmitFraudfix: trouvé ! C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: trouvé ! C:\Users\Mike\Downloads\LopSD.exe: trouvé ! C:\Users\Mike\Downloads\Navilog1.exe: trouvé ! C:\Users\Mike\Downloads\HijackThis.exe: trouvé ! C:\Users\Mike\Downloads\hijackthis.log: trouvé ! C:\Windows\System32\SmitFraudfix: trouvé ! --------------------------------- --> Suppression: C:\Lop SD\catchme.exe: supprimé ! C:\Program Files\Navilog1\Navilog1.bat: ERREUR DE SUPPRESSION !! C:\Program Files\Navilog1\catchme.exe: ERREUR DE SUPPRESSION !! C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: supprimé ! C:\Users\Mike\Downloads\LopSD.exe: supprimé ! C:\Users\Mike\Downloads\Navilog1.exe: supprimé ! C:\Users\Mike\Downloads\HijackThis.exe: supprimé ! C:\cleannavi.txt: ERREUR DE SUPPRESSION !! C:\lopR.txt: ERREUR DE SUPPRESSION !! C:\Lop SD\catchme.log: supprimé ! C:\Users\Mike\Downloads\hijackthis.log: supprimé ! C:\Lop SD: supprimé ! C:\Program Files\Navilog1: ERREUR DE SUPPRESSION !! C:\Users\Mike\SmitFraudfix: supprimé ! C:\Windows\System32\SmitFraudfix: ERREUR DE SUPPRESSION !!

Malwarebytes' Anti-Malware 1.39 Version de la base de données: 2540 Windows 6.0.6002 Service Pack 2 01/08/2009 18:25:29 mbam-log-2009-08-01 (18-25-23).txt Type de recherche: Examen complet (C:\|D:\|) Eléments examinés: 285429 Temps écoulé: 2 hour(s), 59 minute(s), 55 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 5 Valeur(s) du Registre infectée(s): 2 Elément(s) de données du Registre infecté(s): 1 Dossier(s) infecté(s): 1 Fichier(s) infecté(s): 2 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae5619ca-d637-3a0e-b048-83627b096d00} (Trojan.Vundo.H) -> No action taken. HKEY_CLASSES_ROOT\CLSID\{ae5619ca-d637-3a0e-b048-83627b096d00} (Trojan.Vundo.H) -> No action taken. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\clbdriver (Trojan.Agent) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken. Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\XML2u (Spyware.OnlineGames) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\w32id (Spyware.OnlineGames) -> No action taken. Elément(s) de données du Registre infecté(s): HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (C:\Windows\system32\spywarewarning.mht) Good: (http://www.Google.com/) -> No action taken. Dossier(s) infecté(s): C:\Users\Mike\AppData\Roaming\Microsoft\dtsc (Trojan.Agent) -> No action taken. Fichier(s) infecté(s): c:\Users\Mike\AppData\Roaming\microsoft\dtsc\id (Trojan.Agent) -> No action taken. C:\Windows\System32\Spywarewarning2.mht (Trojan.FakeAlert) -> No action taken. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:28:23, on 01/08/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Hp\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Users\Mike\Program Files\DNA\btdna.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\TransVente\TransVente.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Users\Mike\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...o&pf=laptop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: D - {AE5619CA-D637-3A0E-B048-83627B096D00} - C:\Windows\system32\xwr97477.dll (file missing) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [synTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Users\Mike\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [TransVente] C:\PROGRA~1\TRANSV~1\TransVente.exe 1 O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 11111 bytes

Avira AntiVir Personal Date de création du fichier de rapport : vendredi 31 juillet 2009 16:07 La recherche porte sur 1284893 souches de virus. Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus Numéro de série : 0000149996-ADJIE-0000001 Plateforme : Windows Vista Version de Windows : (Service Pack 2) [6.0.6002] Mode Boot : Démarré normalement Identifiant : SYSTEM Nom de l'ordinateur : PC-DE-MIKE Informations de version : BUILD.DAT : 9.0.0.65 17959 Bytes 22/04/2009 12:06:00 AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 12:20:54 AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02 LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11 LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36 ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 19:33:26 ANTIVIR2.VDF : 7.1.2.105 513536 Bytes 03/03/2009 06:41:14 ANTIVIR3.VDF : 7.1.2.127 110592 Bytes 05/03/2009 13:58:20 Version du moteur : 8.2.0.100 AEVDF.DLL : 8.1.1.0 106868 Bytes 27/01/2009 16:36:42 AESCRIPT.DLL : 8.1.1.56 352634 Bytes 26/02/2009 19:01:56 AESCN.DLL : 8.1.1.7 127347 Bytes 12/02/2009 10:44:25 AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 17:24:41 AEPACK.DLL : 8.1.3.10 397686 Bytes 04/03/2009 12:06:10 AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 19:01:56 AEHEUR.DLL : 8.1.0.100 1618295 Bytes 25/02/2009 14:49:16 AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 19:01:56 AEGEN.DLL : 8.1.1.24 336244 Bytes 04/03/2009 12:06:10 AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40 AECORE.DLL : 8.1.6.6 176501 Bytes 17/02/2009 13:22:44 AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40 AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30 AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26 AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28 AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42 AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22 AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37 SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49 SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57 NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59 RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 17/02/2009 12:49:32 RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05 Configuration pour la recherche actuelle : Nom de la tâche...............................: Contrôle intégral du système Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp Documentation.................................: bas Action principale.............................: interactif Action secondaire.............................: ignorer Recherche sur les secteurs d'amorçage maître..: marche Recherche sur les secteurs d'amorçage.........: marche Secteurs d'amorçage...........................: C:, D:, Recherche dans les programmes actifs..........: marche Recherche en cours sur l'enregistrement.......: marche Recherche de Rootkits.........................: marche Contrôle d'intégrité de fichiers système......: arrêt Fichier mode de recherche.....................: Tous les fichiers Recherche sur les archives....................: marche Limiter la profondeur de récursivité..........: 20 Archive Smart Extensions......................: marche Heuristique de macrovirus.....................: marche Heuristique fichier...........................: moyen Catégories de dangers divergentes.............: +APPL,+GAME,+JOKE,+PCK,+SPR, Début de la recherche : vendredi 31 juillet 2009 16:07 La recherche d'objets cachés commence. '136343' objets ont été contrôlés, '0' objets cachés ont été trouvés. La recherche sur les processus démarrés commence : Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'VSSVC.exe' - '1' module(s) sont contrôlés Processus de recherche 'wlcomm.exe' - '1' module(s) sont contrôlés Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés Processus de recherche 'hpqste08.exe' - '1' module(s) sont contrôlés Processus de recherche 'soffice.bin' - '1' module(s) sont contrôlés Processus de recherche 'NMIndexStoreSvr.exe' - '1' module(s) sont contrôlés Processus de recherche 'NMIndexingService.exe' - '1' module(s) sont contrôlés Processus de recherche 'SynTPHelper.exe' - '1' module(s) sont contrôlés Processus de recherche 'HpqToaster.exe' - '1' module(s) sont contrôlés Processus de recherche 'ehmsas.exe' - '1' module(s) sont contrôlés Processus de recherche 'soffice.exe' - '1' module(s) sont contrôlés Processus de recherche 'wmpnetwk.exe' - '1' module(s) sont contrôlés Processus de recherche 'hpqtra08.exe' - '1' module(s) sont contrôlés Processus de recherche 'wmpnscfg.exe' - '1' module(s) sont contrôlés Processus de recherche 'TransVente.exe' - '1' module(s) sont contrôlés Processus de recherche 'NMBgMonitor.exe' - '1' module(s) sont contrôlés Processus de recherche 'ehtray.exe' - '1' module(s) sont contrôlés Processus de recherche 'daemon.exe' - '1' module(s) sont contrôlés Processus de recherche 'btdna.exe' - '1' module(s) sont contrôlés Processus de recherche 'GoogleToolbarNotifier.exe' - '1' module(s) sont contrôlés Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés Processus de recherche 'SynTPEnh.exe' - '1' module(s) sont contrôlés Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés Processus de recherche 'WiFiMsg.exe' - '1' module(s) sont contrôlés Processus de recherche 'HPWAMain.exe' - '1' module(s) sont contrôlés Processus de recherche 'hpwuSchd2.exe' - '1' module(s) sont contrôlés Processus de recherche 'MSASCui.exe' - '1' module(s) sont contrôlés Processus de recherche 'QLBCTRL.exe' - '1' module(s) sont contrôlés Processus de recherche 'QPService.exe' - '1' module(s) sont contrôlés Processus de recherche 'SynTPStart.exe' - '1' module(s) sont contrôlés Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés Processus de recherche 'dwm.exe' - '1' module(s) sont contrôlés Processus de recherche 'taskeng.exe' - '1' module(s) sont contrôlés Processus de recherche 'mscorsvw.exe' - '1' module(s) sont contrôlés Processus de recherche 'HPHC_Service.exe' - '1' module(s) sont contrôlés Processus de recherche 'WmiPrvSE.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'taskeng.exe' - '1' module(s) sont contrôlés Processus de recherche 'WLIDSVCM.EXE' - '1' module(s) sont contrôlés Processus de recherche 'SDWinSec.exe' - '1' module(s) sont contrôlés Processus de recherche 'hpqWmiEx.exe' - '1' module(s) sont contrôlés Processus de recherche 'XAudio.exe' - '1' module(s) sont contrôlés Processus de recherche 'SearchIndexer.exe' - '1' module(s) sont contrôlés Processus de recherche 'WLIDSVC.EXE' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'StarWindServiceAE.exe' - '1' module(s) sont contrôlés Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'SLsvc.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'audiodg.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'nvvsvc.exe' - '1' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés Processus de recherche 'lsm.exe' - '1' module(s) sont contrôlés Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés Processus de recherche 'services.exe' - '1' module(s) sont contrôlés Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés Processus de recherche 'wininit.exe' - '1' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés '83' processus ont été contrôlés avec '83' modules La recherche sur les secteurs d'amorçage maître commence : Secteur d'amorçage maître HD0 [iNFO] Aucun virus trouvé ! La recherche sur les secteurs d'amorçage commence : Secteur d'amorçage 'C:\' [iNFO] Aucun virus trouvé ! Secteur d'amorçage 'D:\' [iNFO] Aucun virus trouvé ! La recherche sur les renvois aux fichiers exécutables (registre) commence : Le registre a été contrôlé ( '50' fichiers). La recherche sur les fichiers sélectionnés commence : Recherche débutant dans 'C:\' C:\hiberfil.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! [REMARQUE] Ce fichier est un fichier système Windows. [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche. C:\pagefile.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! [REMARQUE] Ce fichier est un fichier système Windows. [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche. C:\HP\BIN\EndProcess.exe [RESULTAT] Contient le modèle de détection de l'application APPL/KillApp.A C:\HP\HPQWare\EasySetup\SetACL.exe [RESULTAT] Contient le modèle de détection de l'application APPL/ACLSet C:\ProgramData\Spybot - Search & Destroy\Recovery\SpywareIsolator2.zip [RESULTAT] Contient le code suspect GEN/PwdZIP C:\Users\Mike\Desktop\Mike\Autres\Dorine\Mort subite du nourisson\Rauchenschadet - Dangers du tabagisme passif_ Dangers du tabagisme passif_fichiers\q[1].jpg [0] Type d'archive: CAB (Microsoft) --> heart.png [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. C:\Users\Mike\Desktop\Mike\Autres\JEUX\Lettre + cv\Dorine\Mort subite du nourisson\Rauchenschadet - Dangers du tabagisme passif_ Dangers du tabagisme passif_fichiers\q[1].jpg [0] Type d'archive: CAB (Microsoft) --> heart.png [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. C:\Users\Mike\Desktop\Mike\Autres\Lettre + cv\Dorine\Mort subite du nourisson\Rauchenschadet - Dangers du tabagisme passif_ Dangers du tabagisme passif_fichiers\q[1].jpg [0] Type d'archive: CAB (Microsoft) --> heart.png [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. C:\Users\Mike\Downloads\install_flash_player.exe [0] Type d'archive: NSIS --> [unknownDir]/NPSWF32_FlashUtil.exe [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. [AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée. C:\Users\Mike\SmitfraudFix\restart.exe [RESULTAT] Contient le modèle de détection du programme SPR/Tool.Hardoff.A C:\Windows\System32\drivers\sptd.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\Windows\System32\SmitfraudFix\restart.exe [RESULTAT] Contient le modèle de détection du programme SPR/Tool.Hardoff.A Recherche débutant dans 'D:\' <PRESARIO_RP> Début de la désinfection : C:\HP\BIN\EndProcess.exe [RESULTAT] Contient le modèle de détection de l'application APPL/KillApp.A [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ad78957.qua' ! C:\HP\HPQWare\EasySetup\SetACL.exe [RESULTAT] Contient le modèle de détection de l'application APPL/ACLSet [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ae7894e.qua' ! C:\ProgramData\Spybot - Search & Destroy\Recovery\SpywareIsolator2.zip [RESULTAT] Contient le code suspect GEN/PwdZIP [REMARQUE] Le résultat positif a été classé comme suspect. [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4aec8959.qua' ! C:\Users\Mike\SmitfraudFix\restart.exe [RESULTAT] Contient le modèle de détection du programme SPR/Tool.Hardoff.A [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ae6894e.qua' ! C:\Windows\System32\SmitfraudFix\restart.exe [RESULTAT] Contient le modèle de détection du programme SPR/Tool.Hardoff.A [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4ae6894f.qua' ! Fin de la recherche : samedi 1 août 2009 02:14 Temps nécessaire: 10:05:19 Heure(s) La recherche a été effectuée intégralement 31308 Les répertoires ont été contrôlés 615340 Des fichiers ont été contrôlés 4 Des virus ou programmes indésirables ont été trouvés 1 Des fichiers ont été classés comme suspects 0 Des fichiers ont été supprimés 0 Des virus ou programmes indésirables ont été réparés 5 Les fichiers ont été déplacés dans la quarantaine 0 Les fichiers ont été renommés 3 Impossible de contrôler des fichiers 615332 Fichiers non infectés 4892 Les archives ont été contrôlées 11 Avertissements 7 Consignes 136343 Des objets ont été contrôlés lors du Rootkitscan 0 Des objets cachés ont été trouvés

--------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6000 ) X86-based PC ( Multiprocessor Free : AMD Turion 64 X2 Mobile Technology TL-60 ) BIOS : PhoenixBIOS 4.0 Release 6.1 USER : Mike ( Not Administrator ! ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090730-0] 4.8.1335 (Activated) C:\ (Local Disk) - NTFS - Total:137 Go (Free:50 Go) D:\ (Local Disk) - NTFS - Total:11 Go (Free:2 Go) E:\ (CD or DVD) F:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 31/07/2009| 1:56 ) [ UAC => 1 ] --------------------\\ Listing des dossiers dans Local [23/10/2008|21:02] C:\Users\Mike\AppData\Local\Adobe [05/12/2008|01:49] C:\Users\Mike\AppData\Local\Ahead [04/09/2008|01:40] C:\Users\Mike\AppData\Local\Apple [01/10/2008|15:48] C:\Users\Mike\AppData\Local\Apple Computer [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Application Data [22/05/2008|22:14] C:\Users\Mike\AppData\Local\AtStart.txt [10/06/2008|15:36] C:\Users\Mike\AppData\Local\CDBurnerXP_Soft [23/06/2009|14:41] C:\Users\Mike\AppData\Local\d3d9caps.dat [31/07/2009|00:09] C:\Users\Mike\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [11/11/2008|01:16] C:\Users\Mike\AppData\Local\DNA [22/05/2008|22:07] C:\Users\Mike\AppData\Local\Downloaded Installations [22/05/2008|22:14] C:\Users\Mike\AppData\Local\DSwitch.txt [08/06/2009|01:58] C:\Users\Mike\AppData\Local\eMule [30/07/2009|20:11] C:\Users\Mike\AppData\Local\gcamame.bat [17/07/2009|12:58] C:\Users\Mike\AppData\Local\GDIPFONTCACHEV1.DAT [18/07/2009|01:11] C:\Users\Mike\AppData\Local\Google [31/07/2009|01:56] C:\Users\Mike\AppData\Local\gyuie.dat [26/07/2009|14:06] C:\Users\Mike\AppData\Local\gyuie.exe [30/07/2009|16:37] C:\Users\Mike\AppData\Local\gyuie_nav.dat [31/07/2009|01:56] C:\Users\Mike\AppData\Local\gyuie_navps.dat [22/05/2008|22:14] C:\Users\Mike\AppData\Local\Hewlett-Packard [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Historique [23/08/2008|20:09] C:\Users\Mike\AppData\Local\HP [30/07/2009|20:08] C:\Users\Mike\AppData\Local\IconCache.db [18/07/2009|00:13] C:\Users\Mike\AppData\Local\kyouu.bat [21/07/2009|02:25] C:\Users\Mike\AppData\Local\Microsoft [17/02/2009|20:04] C:\Users\Mike\AppData\Local\Microsoft Games [30/07/2009|22:07] C:\Users\Mike\AppData\Local\Microsoft Help [25/08/2008|17:04] C:\Users\Mike\AppData\Local\Mozilla [22/05/2008|22:14] C:\Users\Mike\AppData\Local\QSwitch.txt [29/10/2008|15:30] C:\Users\Mike\AppData\Local\QuickPlay [16/11/2008|23:29] C:\Users\Mike\AppData\Local\Seven Zip [31/07/2009|01:55] C:\Users\Mike\AppData\Local\Temp [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Temporary Internet Files [24/05/2008|19:32] C:\Users\Mike\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [14/07/2009 23:06][--a------] C:\Windows\tasks\Ad-Aware Update (Weekly).job [30/07/2009 20:10][--ah-----] C:\Windows\tasks\SA.DAT [30/07/2009 20:09][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [25/10/2007|01:00] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [03/04/2009|21:21] C:\ProgramData\Adobe [21/11/2008|05:57] C:\ProgramData\Ahead [04/09/2008|01:38] C:\ProgramData\Apple [04/09/2008|01:42] C:\ProgramData\Apple Computer [02/11/2006|15:02] C:\ProgramData\Application Data [06/12/2007|23:01] C:\ProgramData\Atheros [22/05/2008|15:58] C:\ProgramData\Azureus [13/07/2009|20:27] C:\ProgramData\Blah Find Find.0hd5a [11/07/2009|00:09] C:\ProgramData\Blah Find Find.112xvx [13/07/2009|00:31] C:\ProgramData\Blah Find Find.1jf9mhy [10/07/2009|20:27] C:\ProgramData\Blah Find Find.31as9l [10/07/2009|23:00] C:\ProgramData\Blah Find Find.3awbin [12/07/2009|14:56] C:\ProgramData\Blah Find Find.3jetg [11/07/2009|22:04] C:\ProgramData\Blah Find Find.3vms5 [11/07/2009|21:20] C:\ProgramData\Blah Find Find.51dxkrd [14/07/2009|22:00] C:\ProgramData\Blah Find Find.5mz09 [10/07/2009|19:43] C:\ProgramData\Blah Find Find.5pvsuld [10/07/2009|20:49] C:\ProgramData\Blah Find Find.5xeawa [14/07/2009|19:29] C:\ProgramData\Blah Find Find.6ae9xj3 [12/07/2009|16:01] C:\ProgramData\Blah Find Find.6ep7s [10/07/2009|21:11] C:\ProgramData\Blah Find Find.7d0lmk3 [12/07/2009|14:34] C:\ProgramData\Blah Find Find.8rpcf [12/07/2009|23:36] C:\ProgramData\Blah Find Find.92fqbdg [14/07/2009|18:50] C:\ProgramData\Blah Find Find.a8syxb [11/07/2009|00:31] C:\ProgramData\Blah Find Find.c1fh8g1 [11/07/2009|23:07] C:\ProgramData\Blah Find Find.clzrrqq [13/07/2009|17:37] C:\ProgramData\Blah Find Find.d9tsoyo [13/07/2009|20:05] C:\ProgramData\Blah Find Find.dm24hx [11/07/2009|00:52] C:\ProgramData\Blah Find Find.g23fleu [14/07/2009|15:58] C:\ProgramData\Blah Find Find.jywq7j [11/07/2009|21:42] C:\ProgramData\Blah Find Find.k2ne3m [13/07/2009|19:43] C:\ProgramData\Blah Find Find.l7dni9 [10/07/2009|23:47] C:\ProgramData\Blah Find Find.lu247jz [10/07/2009|21:54] C:\ProgramData\Blah Find Find.m6brogp [11/07/2009|01:36] C:\ProgramData\Blah Find Find.mulrw [13/07/2009|20:57] C:\ProgramData\Blah Find Find.mxah4e [12/07/2009|16:45] C:\ProgramData\Blah Find Find.n587k [14/07/2009|17:09] C:\ProgramData\Blah Find Find.n64bs [11/07/2009|01:14] C:\ProgramData\Blah Find Find.ouldp [12/07/2009|15:40] C:\ProgramData\Blah Find Find.qjx3uh [12/07/2009|15:18] C:\ProgramData\Blah Find Find.qn8rui7 [10/07/2009|22:16] C:\ProgramData\Blah Find Find.qo9o0 [14/07/2009|21:38] C:\ProgramData\Blah Find Find.qt9893h [10/07/2009|22:38] C:\ProgramData\Blah Find Find.s6nvc0 [14/07/2009|18:06] C:\ProgramData\Blah Find Find.t2gv25v [11/07/2009|23:28] C:\ProgramData\Blah Find Find.tim725 [14/07/2009|22:22] C:\ProgramData\Blah Find Find.um7hdp [12/07/2009|22:52] C:\ProgramData\Blah Find Find.vf2oayy [14/07/2009|23:34] C:\ProgramData\Blah Find Find.vp65t85 [12/07/2009|23:14] C:\ProgramData\Blah Find Find.vrf07 [12/07/2009|16:23] C:\ProgramData\Blah Find Find.vvk9p3 [12/07/2009|23:58] C:\ProgramData\Blah Find Find.vw87ag [10/07/2009|19:43] C:\ProgramData\Blah Find Find.x142k [11/07/2009|23:50] C:\ProgramData\Blah Find Find.xn4s8tg [11/07/2009|22:25] C:\ProgramData\Blah Find Find.yxiw56 [12/07/2009|22:30] C:\ProgramData\Blah Find Find.z79uu [12/07/2009|14:12] C:\ProgramData\Blah Find Find.z7wgah [10/07/2009|20:05] C:\ProgramData\Blah Find Find.zbiw5 [10/07/2009|21:32] C:\ProgramData\Blah Find Find.zztldm [27/05/2008|03:08] C:\ProgramData\BM63c9d18f.txt [27/05/2008|00:32] C:\ProgramData\BM63c9d18f.xml [22/05/2008|21:56] C:\ProgramData\Bureau [14/07/2009|20:09] C:\ProgramData\Chic Bows [30/05/2008|13:42] C:\ProgramData\CyberLink [02/11/2006|15:02] C:\ProgramData\Desktop [02/11/2006|15:02] C:\ProgramData\Documents [08/06/2008|14:19] C:\ProgramData\Droppix [21/11/2008|00:58] C:\ProgramData\DVD Shrink [22/05/2008|22:09] C:\ProgramData\Electronic Arts [15/09/2007|18:42] C:\ProgramData\eMule [22/05/2008|21:56] C:\ProgramData\Favoris [02/11/2006|15:02] C:\ProgramData\Favorites [23/10/2008|20:40] C:\ProgramData\FLEXnet [04/04/2009|21:25] C:\ProgramData\Google [29/05/2008|22:56] C:\ProgramData\Hewlett-Packard [08/04/2009|22:48] C:\ProgramData\HP [08/04/2009|22:48] C:\ProgramData\HP Product Assistant [29/05/2008|23:11] C:\ProgramData\HPSSUPPLY [08/04/2009|22:54] C:\ProgramData\hpzinstall.log [30/07/2009|19:59] C:\ProgramData\Lavasoft [08/06/2008|14:25] C:\ProgramData\LightScribe [10/07/2009|19:43] C:\ProgramData\list rect mp3.sv8sv [27/05/2008|16:55] C:\ProgramData\Malwarebytes [22/05/2008|21:56] C:\ProgramData\Menu D‚marrer [20/04/2009|00:05] C:\ProgramData\Messenger Plus! [21/07/2009|02:25] C:\ProgramData\Microsoft [30/07/2009|22:09] C:\ProgramData\Microsoft Help [22/05/2008|21:56] C:\ProgramData\ModŠles [10/06/2008|12:32] C:\ProgramData\Motive [25/10/2007|00:46] C:\ProgramData\muvee Technologies [21/11/2008|05:54] C:\ProgramData\Nero [14/07/2009|22:48] C:\ProgramData\ntuser.pol [30/07/2009|22:35] C:\ProgramData\NVIDIA [30/07/2009|22:59] C:\ProgramData\nvModes.001 [30/07/2009|22:36] C:\ProgramData\nvModes.dat [27/05/2008|03:04] C:\ProgramData\pskt.ini [04/12/2008|17:50] C:\ProgramData\Sports Interactive [31/07/2009|01:55] C:\ProgramData\Spybot - Search & Destroy [02/11/2006|15:02] C:\ProgramData\Start Menu [24/07/2008|17:27] C:\ProgramData\Symantec [27/05/2008|14:55] C:\ProgramData\TEMP [02/11/2006|15:02] C:\ProgramData\Templates [10/07/2009|19:43] C:\ProgramData\Time Dead Warn Default [24/07/2009|14:22] C:\ProgramData\TuneUpMedia [25/10/2007|00:23] C:\ProgramData\Viewpoint [21/11/2008|00:43] C:\ProgramData\Vso [30/05/2008|14:12] C:\ProgramData\WEBREG [04/04/2009|21:28] C:\ProgramData\WildTangent [24/09/2007|23:08] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [25/10/2007|01:00] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [03/04/2009|21:21] C:\Program Files\Adobe [25/10/2007|00:23] C:\Program Files\AIM6 [24/05/2008|18:09] C:\Program Files\Alcohol Soft [26/05/2008|01:47] C:\Program Files\Alwil Software [27/05/2008|19:21] C:\Program Files\AOL [04/09/2008|01:39] C:\Program Files\Apple Software Update [24/11/2008|03:37] C:\Program Files\AskTBar [21/11/2008|00:52] C:\Program Files\Astonsoft [06/12/2007|23:01] C:\Program Files\Atheros [12/11/2008|22:05] C:\Program Files\Azureus [24/07/2009|14:05] C:\Program Files\BitTorrent [04/09/2008|01:41] C:\Program Files\Bonjour [26/05/2008|20:34] C:\Program Files\CCleaner [24/11/2008|03:21] C:\Program Files\CDBurnerXP [10/07/2009|19:43] C:\Program Files\Chic Bows [10/06/2008|21:50] C:\Program Files\Club-Internet [24/11/2008|03:28] C:\Program Files\Common Files [27/05/2008|19:21] C:\Program Files\Conduit [30/07/2009|22:24] C:\Program Files\CONEXANT [10/07/2009|19:42] C:\Program Files\Crcle Developement [10/06/2008|21:34] C:\Program Files\CyberLink [12/11/2008|17:30] C:\Program Files\DAEMON Tools Lite [12/11/2008|22:05] C:\Program Files\DAEMON Tools Toolbar [14/07/2009|22:46] C:\Program Files\DNA [08/06/2008|14:19] C:\Program Files\Droppix [29/09/2008|14:45] C:\Program Files\Electronic Arts [22/05/2008|21:56] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [24/11/2008|03:37] C:\Program Files\free-downloads.net [04/04/2009|21:25] C:\Program Files\Google [30/05/2008|13:13] C:\Program Files\Hewlett-Packard [29/05/2008|23:11] C:\Program Files\Hp [06/12/2007|23:15] C:\Program Files\HP Games [06/12/2007|23:06] C:\Program Files\HPQ [08/06/2008|14:20] C:\Program Files\illiminable [13/11/2008|17:15] C:\Program Files\InstallShield Installation Information [30/07/2009|13:35] C:\Program Files\Internet Explorer [13/11/2008|20:44] C:\Program Files\IrfanView [16/07/2009|19:40] C:\Program Files\Java [16/07/2009|19:55] C:\Program Files\JRE [15/11/2008|04:27] C:\Program Files\Konvertor [30/07/2009|19:59] C:\Program Files\Lavasoft [24/07/2009|12:37] C:\Program Files\LimeWire [27/05/2008|16:55] C:\Program Files\Malwarebytes' Anti-Malware [10/07/2009|19:42] C:\Program Files\Messenger Plus! Live [21/12/2008|01:19] C:\Program Files\Microsoft [02/11/2006|14:37] C:\Program Files\Microsoft Games [25/10/2007|00:59] C:\Program Files\Microsoft Office [23/07/2009|01:12] C:\Program Files\Microsoft Silverlight [18/04/2009|22:11] C:\Program Files\Microsoft SQL Server Compact Edition [18/04/2009|22:13] C:\Program Files\Microsoft Sync Framework [11/06/2009|03:07] C:\Program Files\Microsoft Works [25/10/2007|00:59] C:\Program Files\Microsoft.NET [25/10/2007|08:57] C:\Program Files\Movie Maker [26/07/2009|23:34] C:\Program Files\Mozilla Firefox [02/11/2006|14:37] C:\Program Files\MSBuild [02/11/2006|14:37] C:\Program Files\MSN [28/09/2008|21:43] C:\Program Files\MSN Messenger [24/05/2008|15:57] C:\Program Files\MSXML 4.0 [25/10/2007|00:46] C:\Program Files\muvee Technologies [30/07/2009|22:08] C:\Program Files\Navilog1 [21/11/2008|05:54] C:\Program Files\Nero [06/12/2007|22:59] C:\Program Files\NetWaiting [13/11/2008|17:15] C:\Program Files\Ontrack [16/07/2009|19:54] C:\Program Files\OpenOffice.org 2.4 [16/07/2009|19:55] C:\Program Files\OpenOffice.org 3 [04/09/2008|01:41] C:\Program Files\QuickTime [02/11/2006|14:37] C:\Program Files\Reference Assemblies [28/05/2008|21:42] C:\Program Files\Registry Easy [15/11/2008|04:31] C:\Program Files\Registry Mechanic [13/11/2008|03:14] C:\Program Files\Runtime Software [24/05/2009|14:03] C:\Program Files\Sports Interactive [15/07/2009|13:14] C:\Program Files\Spybot - Search & Destroy [06/12/2007|22:58] C:\Program Files\Synaptics [03/04/2009|13:38] C:\Program Files\Techcity [14/07/2009|22:42] C:\Program Files\TransVente [02/11/2006|15:01] C:\Program Files\Uninstall Information [24/05/2008|18:12] C:\Program Files\uTorrent [23/05/2008|01:00] C:\Program Files\VideoLAN [25/10/2007|00:23] C:\Program Files\Viewpoint [24/07/2009|14:21] C:\Program Files\Vuze [14/07/2009|22:41] C:\Program Files\WinamaxPoker [25/10/2007|00:17] C:\Program Files\Windows Calendar [25/10/2007|08:57] C:\Program Files\Windows Collaboration [25/10/2007|00:16] C:\Program Files\Windows Defender [25/10/2007|08:57] C:\Program Files\Windows Journal [18/04/2009|22:13] C:\Program Files\Windows Live [18/04/2009|22:10] C:\Program Files\Windows Live SkyDrive [16/07/2009|03:04] C:\Program Files\Windows Mail [12/03/2009|04:07] C:\Program Files\Windows Media Player [22/05/2008|21:56] C:\Program Files\Windows NT [25/10/2007|08:57] C:\Program Files\Windows Photo Gallery [24/05/2008|16:38] C:\Program Files\Windows Sidebar [23/05/2008|00:53] C:\Program Files\WinRAR [26/05/2008|20:34] C:\Program Files\Yahoo! [24/05/2008|17:56] C:\Program Files\Zero G Registry --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [03/04/2009|21:21] C:\Program Files\Common Files\Adobe [21/11/2008|05:57] C:\Program Files\Common Files\Ahead [25/10/2007|00:23] C:\Program Files\Common Files\AOL [25/10/2007|00:59] C:\Program Files\Common Files\DESIGNER [08/06/2008|14:20] C:\Program Files\Common Files\Droppix [29/05/2008|23:02] C:\Program Files\Common Files\Hewlett-Packard [29/05/2008|23:05] C:\Program Files\Common Files\HP [25/10/2007|01:13] C:\Program Files\Common Files\InstallShield [25/10/2007|01:25] C:\Program Files\Common Files\Java [10/06/2008|21:32] C:\Program Files\Common Files\LightScribe [30/07/2009|22:05] C:\Program Files\Common Files\microsoft shared [10/06/2008|12:29] C:\Program Files\Common Files\Motive [25/10/2007|00:46] C:\Program Files\Common Files\muvee Technologies [13/11/2008|19:51] C:\Program Files\Common Files\PX Storage Engine [02/11/2006|13:18] C:\Program Files\Common Files\Services [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines [16/04/2009|18:08] C:\Program Files\Common Files\Steam [24/07/2008|17:29] C:\Program Files\Common Files\Symantec Shared [25/10/2007|00:16] C:\Program Files\Common Files\System [27/09/2007|16:19] C:\Program Files\Common Files\Windows Live [22/05/2008|22:49] C:\Program Files\Common Files\WindowsLiveInstaller --------------------\\ Process ( 92 Processes ) iexplore.exe ~ [PID:4072] --------------------\\ Recherche avec S_Lop C:\ProgramData\Blah Find Find.0hd5a C:\ProgramData\Blah Find Find.3jetg C:\ProgramData\Blah Find Find.3vms5 C:\ProgramData\Blah Find Find.5mz09 C:\ProgramData\Blah Find Find.6ep7s C:\ProgramData\Blah Find Find.8rpcf C:\ProgramData\Blah Find Find.mulrw C:\ProgramData\Blah Find Find.n587k C:\ProgramData\Blah Find Find.n64bs C:\ProgramData\Blah Find Find.ouldp C:\ProgramData\Blah Find Find.qo9o0 C:\ProgramData\Blah Find Find.vrf07 C:\ProgramData\Blah Find Find.x142k C:\ProgramData\Blah Find Find.z79uu C:\ProgramData\Blah Find Find.zbiw5 C:\ProgramData\Blah Find Find.112xvx C:\ProgramData\Blah Find Find.31as9l C:\ProgramData\Blah Find Find.3awbin C:\ProgramData\Blah Find Find.5xeawa C:\ProgramData\Blah Find Find.a8syxb C:\ProgramData\Blah Find Find.dm24hx C:\ProgramData\Blah Find Find.jywq7j C:\ProgramData\Blah Find Find.k2ne3m C:\ProgramData\Blah Find Find.l7dni9 C:\ProgramData\Blah Find Find.mxah4e C:\ProgramData\Blah Find Find.qjx3uh C:\ProgramData\Blah Find Find.s6nvc0 C:\ProgramData\Blah Find Find.tim725 C:\ProgramData\Blah Find Find.um7hdp C:\ProgramData\Blah Find Find.vvk9p3 C:\ProgramData\Blah Find Find.vw87ag C:\ProgramData\Blah Find Find.yxiw56 C:\ProgramData\Blah Find Find.z7wgah C:\ProgramData\Blah Find Find.zztldm C:\ProgramData\Blah Find Find.1jf9mhy C:\ProgramData\Blah Find Find.51dxkrd C:\ProgramData\Blah Find Find.5pvsuld C:\ProgramData\Blah Find Find.6ae9xj3 C:\ProgramData\Blah Find Find.7d0lmk3 C:\ProgramData\Blah Find Find.92fqbdg C:\ProgramData\Blah Find Find.c1fh8g1 C:\ProgramData\Blah Find Find.clzrrqq C:\ProgramData\Blah Find Find.d9tsoyo C:\ProgramData\Blah Find Find.g23fleu C:\ProgramData\Blah Find Find.lu247jz C:\ProgramData\Blah Find Find.m6brogp C:\ProgramData\Blah Find Find.qn8rui7 C:\ProgramData\Blah Find Find.qt9893h C:\ProgramData\Blah Find Find.t2gv25v C:\ProgramData\Blah Find Find.vf2oayy C:\ProgramData\Blah Find Find.vp65t85 C:\ProgramData\Blah Find Find.xn4s8tg --------------------\\ Recherche de Fichiers / Dossiers Lop C:\ProgramData\Time Dead Warn Default C:\ProgramData\Time Dead Warn Default\Tons browse.dat C:\Users\Mike\AppData\Local\Temp\msgpl_4352.tmp C:\Users\Mike\AppData\Local\Temp\nsh6069.tmp C:\Users\Mike\AppData\Local\Temp\nspE320.tmp C:\Users\Mike\AppData\Local\Temp\nsz1C0B.tmp C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@advertstream[1].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@advertising[2].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@bigpoint[2].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@fr.deepolis.bigpoint[1].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@2xmoinscher[2].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@cc.2xmoinscher[1].txt C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@888[1].txt --------------------\\ Verification du Registre [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AmenStart"="\"C:\\ProgramData\\Blah Find Find.vp65t85\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AmenStart"="\"C:\\ProgramData\\Blah Find Find.um7hdp\"" --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-31 01:57:02 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections C:\Users\Mike\AppData\Local\gyuie.dat C:\Users\Mike\AppData\Local\gyuie.exe C:\Users\Mike\AppData\Local\gyuie_nav.dat C:\Users\Mike\AppData\Local\gyuie_navps.dat ==> EGDACCESS <== --------------------\\ Cracks & Keygens .. C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\fm2009-crack&patch.lnk C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\Fmkeygen.lnk C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm234.exe C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm234.rar C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm91_t1.exe [F:274][D:40]-> C:\Users\Mike\AppData\Local\Temp [F:230][D:1]-> C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies [F:10598][D:16]-> C:\Users\Mike\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:204][D:9]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 31/07/2009| 2:04 - Option : [1] --------------------\\ Fin du rapport a 2:04:50 [ UAC => 1 ] --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6000 ) X86-based PC ( Multiprocessor Free : AMD Turion 64 X2 Mobile Technology TL-60 ) BIOS : PhoenixBIOS 4.0 Release 6.1 USER : Mike ( Not Administrator ! ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090730-0] 4.8.1335 (Activated) C:\ (Local Disk) - NTFS - Total:137 Go (Free:50 Go) D:\ (Local Disk) - NTFS - Total:11 Go (Free:2 Go) E:\ (CD or DVD) F:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 31/07/2009| 2:07 ) [ UAC => 1 ] \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\ProgramData\Time Dead Warn Default\Tons browse.dat Supprime! - C:\Users\Mike\AppData\Local\Temp\msgpl_4352.tmp Supprime! - C:\Users\Mike\AppData\Local\Temp\nsh6069.tmp Supprime! - C:\Users\Mike\AppData\Local\Temp\nspE320.tmp Supprime! - C:\Users\Mike\AppData\Local\Temp\nsz1C0B.tmp Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@advertstream[1].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@advertising[2].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@bigpoint[2].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@fr.deepolis.bigpoint[1].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@2xmoinscher[2].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@cc.2xmoinscher[1].txt Supprime! - C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies\mike@888[1].txt Supprime! - C:\ProgramData\Blah Find Find.0hd5a Supprime! - C:\ProgramData\Blah Find Find.3jetg Supprime! - C:\ProgramData\Blah Find Find.3vms5 Supprime! - C:\ProgramData\Blah Find Find.5mz09 Supprime! - C:\ProgramData\Blah Find Find.6ep7s Supprime! - C:\ProgramData\Blah Find Find.8rpcf Supprime! - C:\ProgramData\Blah Find Find.mulrw Supprime! - C:\ProgramData\Blah Find Find.n587k Supprime! - C:\ProgramData\Blah Find Find.n64bs Supprime! - C:\ProgramData\Blah Find Find.ouldp Supprime! - C:\ProgramData\Blah Find Find.qo9o0 Supprime! - C:\ProgramData\Blah Find Find.vrf07 Supprime! - C:\ProgramData\Blah Find Find.x142k Supprime! - C:\ProgramData\Blah Find Find.z79uu Supprime! - C:\ProgramData\Blah Find Find.zbiw5 Supprime! - C:\ProgramData\Blah Find Find.112xvx Supprime! - C:\ProgramData\Blah Find Find.31as9l Supprime! - C:\ProgramData\Blah Find Find.3awbin Supprime! - C:\ProgramData\Blah Find Find.5xeawa Supprime! - C:\ProgramData\Blah Find Find.a8syxb Supprime! - C:\ProgramData\Blah Find Find.dm24hx Supprime! - C:\ProgramData\Blah Find Find.jywq7j Supprime! - C:\ProgramData\Blah Find Find.k2ne3m Supprime! - C:\ProgramData\Blah Find Find.l7dni9 Supprime! - C:\ProgramData\Blah Find Find.mxah4e Supprime! - C:\ProgramData\Blah Find Find.qjx3uh Supprime! - C:\ProgramData\Blah Find Find.s6nvc0 Supprime! - C:\ProgramData\Blah Find Find.tim725 Supprime! - C:\ProgramData\Blah Find Find.um7hdp Supprime! - C:\ProgramData\Blah Find Find.vvk9p3 Supprime! - C:\ProgramData\Blah Find Find.vw87ag Supprime! - C:\ProgramData\Blah Find Find.yxiw56 Supprime! - C:\ProgramData\Blah Find Find.z7wgah Supprime! - C:\ProgramData\Blah Find Find.zztldm Supprime! - C:\ProgramData\Blah Find Find.1jf9mhy Supprime! - C:\ProgramData\Blah Find Find.51dxkrd Supprime! - C:\ProgramData\Blah Find Find.5pvsuld Supprime! - C:\ProgramData\Blah Find Find.6ae9xj3 Supprime! - C:\ProgramData\Blah Find Find.7d0lmk3 Supprime! - C:\ProgramData\Blah Find Find.92fqbdg Supprime! - C:\ProgramData\Blah Find Find.c1fh8g1 Supprime! - C:\ProgramData\Blah Find Find.clzrrqq Supprime! - C:\ProgramData\Blah Find Find.d9tsoyo Supprime! - C:\ProgramData\Blah Find Find.g23fleu Supprime! - C:\ProgramData\Blah Find Find.lu247jz Supprime! - C:\ProgramData\Blah Find Find.m6brogp Supprime! - C:\ProgramData\Blah Find Find.qn8rui7 Supprime! - C:\ProgramData\Blah Find Find.qt9893h Supprime! - C:\ProgramData\Blah Find Find.t2gv25v Supprime! - C:\ProgramData\Blah Find Find.vf2oayy Supprime! - C:\ProgramData\Blah Find Find.vp65t85 Supprime! - C:\ProgramData\Blah Find Find.xn4s8tg Supprime! - C:\ProgramData\Time Dead Warn Default - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Supprime! - C:\Program Files\Viewpoint Supprime! - C:\PROGRA~2\Viewpoint \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans Local [23/10/2008|21:02] C:\Users\Mike\AppData\Local\Adobe [05/12/2008|01:49] C:\Users\Mike\AppData\Local\Ahead [04/09/2008|01:40] C:\Users\Mike\AppData\Local\Apple [01/10/2008|15:48] C:\Users\Mike\AppData\Local\Apple Computer [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Application Data [22/05/2008|22:14] C:\Users\Mike\AppData\Local\AtStart.txt [10/06/2008|15:36] C:\Users\Mike\AppData\Local\CDBurnerXP_Soft [23/06/2009|14:41] C:\Users\Mike\AppData\Local\d3d9caps.dat [31/07/2009|00:09] C:\Users\Mike\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [11/11/2008|01:16] C:\Users\Mike\AppData\Local\DNA [22/05/2008|22:07] C:\Users\Mike\AppData\Local\Downloaded Installations [22/05/2008|22:14] C:\Users\Mike\AppData\Local\DSwitch.txt [08/06/2009|01:58] C:\Users\Mike\AppData\Local\eMule [30/07/2009|20:11] C:\Users\Mike\AppData\Local\gcamame.bat [31/07/2009|02:06] C:\Users\Mike\AppData\Local\GDIPFONTCACHEV1.DAT [18/07/2009|01:11] C:\Users\Mike\AppData\Local\Google [31/07/2009|02:09] C:\Users\Mike\AppData\Local\gyuie.dat [26/07/2009|14:06] C:\Users\Mike\AppData\Local\gyuie.exe [30/07/2009|16:37] C:\Users\Mike\AppData\Local\gyuie_nav.dat [31/07/2009|02:09] C:\Users\Mike\AppData\Local\gyuie_navps.dat [22/05/2008|22:14] C:\Users\Mike\AppData\Local\Hewlett-Packard [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Historique [23/08/2008|20:09] C:\Users\Mike\AppData\Local\HP [30/07/2009|20:08] C:\Users\Mike\AppData\Local\IconCache.db [18/07/2009|00:13] C:\Users\Mike\AppData\Local\kyouu.bat [21/07/2009|02:25] C:\Users\Mike\AppData\Local\Microsoft [17/02/2009|20:04] C:\Users\Mike\AppData\Local\Microsoft Games [30/07/2009|22:07] C:\Users\Mike\AppData\Local\Microsoft Help [25/08/2008|17:04] C:\Users\Mike\AppData\Local\Mozilla [22/05/2008|22:14] C:\Users\Mike\AppData\Local\QSwitch.txt [29/10/2008|15:30] C:\Users\Mike\AppData\Local\QuickPlay [16/11/2008|23:29] C:\Users\Mike\AppData\Local\Seven Zip [31/07/2009|02:07] C:\Users\Mike\AppData\Local\Temp [22/05/2008|22:00] C:\Users\Mike\AppData\Local\Temporary Internet Files [24/05/2008|19:32] C:\Users\Mike\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [14/07/2009 23:06][--a------] C:\Windows\tasks\Ad-Aware Update (Weekly).job [30/07/2009 20:10][--ah-----] C:\Windows\tasks\SA.DAT [30/07/2009 20:09][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [25/10/2007|01:00] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [03/04/2009|21:21] C:\ProgramData\Adobe [21/11/2008|05:57] C:\ProgramData\Ahead [04/09/2008|01:38] C:\ProgramData\Apple [04/09/2008|01:42] C:\ProgramData\Apple Computer [02/11/2006|15:02] C:\ProgramData\Application Data [06/12/2007|23:01] C:\ProgramData\Atheros [22/05/2008|15:58] C:\ProgramData\Azureus [27/05/2008|03:08] C:\ProgramData\BM63c9d18f.txt [27/05/2008|00:32] C:\ProgramData\BM63c9d18f.xml [22/05/2008|21:56] C:\ProgramData\Bureau [14/07/2009|20:09] C:\ProgramData\Chic Bows [30/05/2008|13:42] C:\ProgramData\CyberLink [02/11/2006|15:02] C:\ProgramData\Desktop [02/11/2006|15:02] C:\ProgramData\Documents [08/06/2008|14:19] C:\ProgramData\Droppix [21/11/2008|00:58] C:\ProgramData\DVD Shrink [22/05/2008|22:09] C:\ProgramData\Electronic Arts [15/09/2007|18:42] C:\ProgramData\eMule [22/05/2008|21:56] C:\ProgramData\Favoris [02/11/2006|15:02] C:\ProgramData\Favorites [23/10/2008|20:40] C:\ProgramData\FLEXnet [04/04/2009|21:25] C:\ProgramData\Google [29/05/2008|22:56] C:\ProgramData\Hewlett-Packard [08/04/2009|22:48] C:\ProgramData\HP [08/04/2009|22:48] C:\ProgramData\HP Product Assistant [29/05/2008|23:11] C:\ProgramData\HPSSUPPLY [08/04/2009|22:54] C:\ProgramData\hpzinstall.log [30/07/2009|19:59] C:\ProgramData\Lavasoft [08/06/2008|14:25] C:\ProgramData\LightScribe [10/07/2009|19:43] C:\ProgramData\list rect mp3.sv8sv [27/05/2008|16:55] C:\ProgramData\Malwarebytes [22/05/2008|21:56] C:\ProgramData\Menu D‚marrer [20/04/2009|00:05] C:\ProgramData\Messenger Plus! [21/07/2009|02:25] C:\ProgramData\Microsoft [30/07/2009|22:09] C:\ProgramData\Microsoft Help [22/05/2008|21:56] C:\ProgramData\ModŠles [10/06/2008|12:32] C:\ProgramData\Motive [25/10/2007|00:46] C:\ProgramData\muvee Technologies [21/11/2008|05:54] C:\ProgramData\Nero [14/07/2009|22:48] C:\ProgramData\ntuser.pol [30/07/2009|22:35] C:\ProgramData\NVIDIA [30/07/2009|22:59] C:\ProgramData\nvModes.001 [30/07/2009|22:36] C:\ProgramData\nvModes.dat [27/05/2008|03:04] C:\ProgramData\pskt.ini [04/12/2008|17:50] C:\ProgramData\Sports Interactive [31/07/2009|01:55] C:\ProgramData\Spybot - Search & Destroy [02/11/2006|15:02] C:\ProgramData\Start Menu [24/07/2008|17:27] C:\ProgramData\Symantec [27/05/2008|14:55] C:\ProgramData\TEMP [02/11/2006|15:02] C:\ProgramData\Templates [24/07/2009|14:22] C:\ProgramData\TuneUpMedia [21/11/2008|00:43] C:\ProgramData\Vso [30/05/2008|14:12] C:\ProgramData\WEBREG [04/04/2009|21:28] C:\ProgramData\WildTangent [24/09/2007|23:08] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [25/10/2007|01:00] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites [03/04/2009|21:21] C:\Program Files\Adobe [25/10/2007|00:23] C:\Program Files\AIM6 [24/05/2008|18:09] C:\Program Files\Alcohol Soft [26/05/2008|01:47] C:\Program Files\Alwil Software [27/05/2008|19:21] C:\Program Files\AOL [04/09/2008|01:39] C:\Program Files\Apple Software Update [24/11/2008|03:37] C:\Program Files\AskTBar [21/11/2008|00:52] C:\Program Files\Astonsoft [06/12/2007|23:01] C:\Program Files\Atheros [12/11/2008|22:05] C:\Program Files\Azureus [24/07/2009|14:05] C:\Program Files\BitTorrent [04/09/2008|01:41] C:\Program Files\Bonjour [26/05/2008|20:34] C:\Program Files\CCleaner [24/11/2008|03:21] C:\Program Files\CDBurnerXP [10/07/2009|19:43] C:\Program Files\Chic Bows [10/06/2008|21:50] C:\Program Files\Club-Internet [24/11/2008|03:28] C:\Program Files\Common Files [27/05/2008|19:21] C:\Program Files\Conduit [30/07/2009|22:24] C:\Program Files\CONEXANT [10/07/2009|19:42] C:\Program Files\Crcle Developement [10/06/2008|21:34] C:\Program Files\CyberLink [12/11/2008|17:30] C:\Program Files\DAEMON Tools Lite [12/11/2008|22:05] C:\Program Files\DAEMON Tools Toolbar [14/07/2009|22:46] C:\Program Files\DNA [08/06/2008|14:19] C:\Program Files\Droppix [29/09/2008|14:45] C:\Program Files\Electronic Arts [22/05/2008|21:56] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [24/11/2008|03:37] C:\Program Files\free-downloads.net [04/04/2009|21:25] C:\Program Files\Google [30/05/2008|13:13] C:\Program Files\Hewlett-Packard [29/05/2008|23:11] C:\Program Files\Hp [06/12/2007|23:15] C:\Program Files\HP Games [06/12/2007|23:06] C:\Program Files\HPQ [08/06/2008|14:20] C:\Program Files\illiminable [13/11/2008|17:15] C:\Program Files\InstallShield Installation Information [30/07/2009|13:35] C:\Program Files\Internet Explorer [13/11/2008|20:44] C:\Program Files\IrfanView [16/07/2009|19:40] C:\Program Files\Java [16/07/2009|19:55] C:\Program Files\JRE [15/11/2008|04:27] C:\Program Files\Konvertor [30/07/2009|19:59] C:\Program Files\Lavasoft [24/07/2009|12:37] C:\Program Files\LimeWire [27/05/2008|16:55] C:\Program Files\Malwarebytes' Anti-Malware [10/07/2009|19:42] C:\Program Files\Messenger Plus! Live [21/12/2008|01:19] C:\Program Files\Microsoft [02/11/2006|14:37] C:\Program Files\Microsoft Games [25/10/2007|00:59] C:\Program Files\Microsoft Office [23/07/2009|01:12] C:\Program Files\Microsoft Silverlight [18/04/2009|22:11] C:\Program Files\Microsoft SQL Server Compact Edition [18/04/2009|22:13] C:\Program Files\Microsoft Sync Framework [11/06/2009|03:07] C:\Program Files\Microsoft Works [25/10/2007|00:59] C:\Program Files\Microsoft.NET [25/10/2007|08:57] C:\Program Files\Movie Maker [26/07/2009|23:34] C:\Program Files\Mozilla Firefox [02/11/2006|14:37] C:\Program Files\MSBuild [02/11/2006|14:37] C:\Program Files\MSN [28/09/2008|21:43] C:\Program Files\MSN Messenger [24/05/2008|15:57] C:\Program Files\MSXML 4.0 [25/10/2007|00:46] C:\Program Files\muvee Technologies [30/07/2009|22:08] C:\Program Files\Navilog1 [21/11/2008|05:54] C:\Program Files\Nero [06/12/2007|22:59] C:\Program Files\NetWaiting [13/11/2008|17:15] C:\Program Files\Ontrack [16/07/2009|19:54] C:\Program Files\OpenOffice.org 2.4 [16/07/2009|19:55] C:\Program Files\OpenOffice.org 3 [04/09/2008|01:41] C:\Program Files\QuickTime [02/11/2006|14:37] C:\Program Files\Reference Assemblies [28/05/2008|21:42] C:\Program Files\Registry Easy [15/11/2008|04:31] C:\Program Files\Registry Mechanic [13/11/2008|03:14] C:\Program Files\Runtime Software [24/05/2009|14:03] C:\Program Files\Sports Interactive [15/07/2009|13:14] C:\Program Files\Spybot - Search & Destroy [06/12/2007|22:58] C:\Program Files\Synaptics [03/04/2009|13:38] C:\Program Files\Techcity [14/07/2009|22:42] C:\Program Files\TransVente [02/11/2006|15:01] C:\Program Files\Uninstall Information [24/05/2008|18:12] C:\Program Files\uTorrent [23/05/2008|01:00] C:\Program Files\VideoLAN [24/07/2009|14:21] C:\Program Files\Vuze [14/07/2009|22:41] C:\Program Files\WinamaxPoker [25/10/2007|00:17] C:\Program Files\Windows Calendar [25/10/2007|08:57] C:\Program Files\Windows Collaboration [25/10/2007|00:16] C:\Program Files\Windows Defender [25/10/2007|08:57] C:\Program Files\Windows Journal [18/04/2009|22:13] C:\Program Files\Windows Live [18/04/2009|22:10] C:\Program Files\Windows Live SkyDrive [16/07/2009|03:04] C:\Program Files\Windows Mail [12/03/2009|04:07] C:\Program Files\Windows Media Player [22/05/2008|21:56] C:\Program Files\Windows NT [25/10/2007|08:57] C:\Program Files\Windows Photo Gallery [24/05/2008|16:38] C:\Program Files\Windows Sidebar [23/05/2008|00:53] C:\Program Files\WinRAR [26/05/2008|20:34] C:\Program Files\Yahoo! [24/05/2008|17:56] C:\Program Files\Zero G Registry --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [03/04/2009|21:21] C:\Program Files\Common Files\Adobe [21/11/2008|05:57] C:\Program Files\Common Files\Ahead [25/10/2007|00:23] C:\Program Files\Common Files\AOL [25/10/2007|00:59] C:\Program Files\Common Files\DESIGNER [08/06/2008|14:20] C:\Program Files\Common Files\Droppix [29/05/2008|23:02] C:\Program Files\Common Files\Hewlett-Packard [29/05/2008|23:05] C:\Program Files\Common Files\HP [25/10/2007|01:13] C:\Program Files\Common Files\InstallShield [25/10/2007|01:25] C:\Program Files\Common Files\Java [10/06/2008|21:32] C:\Program Files\Common Files\LightScribe [30/07/2009|22:05] C:\Program Files\Common Files\microsoft shared [10/06/2008|12:29] C:\Program Files\Common Files\Motive [25/10/2007|00:46] C:\Program Files\Common Files\muvee Technologies [13/11/2008|19:51] C:\Program Files\Common Files\PX Storage Engine [02/11/2006|13:18] C:\Program Files\Common Files\Services [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines [16/04/2009|18:08] C:\Program Files\Common Files\Steam [24/07/2008|17:29] C:\Program Files\Common Files\Symantec Shared [25/10/2007|00:16] C:\Program Files\Common Files\System [27/09/2007|16:19] C:\Program Files\Common Files\Windows Live [22/05/2008|22:49] C:\Program Files\Common Files\WindowsLiveInstaller --------------------\\ Process ( 88 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-31 02:10:09 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections C:\Users\Mike\AppData\Local\gyuie.dat C:\Users\Mike\AppData\Local\gyuie.exe C:\Users\Mike\AppData\Local\gyuie_nav.dat C:\Users\Mike\AppData\Local\gyuie_navps.dat ==> EGDACCESS <== --------------------\\ Cracks & Keygens .. C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\fm2009-crack&patch.lnk C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Recent\Fmkeygen.lnk C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm234.exe C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm234.rar C:\Users\Mike\Desktop\Mike\Jeux\FM\Crack\fm91_t1.exe [F:269][D:40]-> C:\Users\Mike\AppData\Local\Temp [F:223][D:1]-> C:\Users\Mike\AppData\Roaming\MICROS~1\Windows\Cookies [F:10604][D:16]-> C:\Users\Mike\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:204][D:9]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 31/07/2009| 2:04 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 31/07/2009| 2:30 - Option : [2] --------------------\\ Fin du rapport a 2:30:46 [ UAC => 1 ] Fix Navipromo version 4.0.1 commencé le 31/07/2009 2:32:43,49 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6000 ) X86-based PC ( Multiprocessor Free : AMD Turion 64 X2 Mobile Technology TL-60 ) BIOS : PhoenixBIOS 4.0 Release 6.1 USER : Mike ( Not Administrator ! ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090730-0] 4.8.1335 (Activated) C:\ (Local Disk) - NTFS - Total:137 Go (Free:50 Go) D:\ (Local Disk) - NTFS - Total:11 Go (Free:2 Go) E:\ (CD or DVD) F:\ (CD or DVD) Recherche executée en mode normal Nettoyage exécuté au redémarrage de l'ordinateur C:\Windows\prefetch\qsiskeq*.pf supprimé ! C:\Users\Mike\AppData\Local\gyuie.exe supprimé ! C:\Users\Mike\AppData\Local\gyuie.dat supprimé ! C:\Users\Mike\AppData\Local\gyuie_nav.dat supprimé ! C:\Users\Mike\AppData\Local\gyuie_navps.dat supprimé ! C:\Users\Mike\AppData\Local\kyouu.bat supprimé ! Nettoyage contenu C:\Windows\Temp effectué ! Nettoyage contenu C:\Users\Mike\AppData\Local\Temp effectué ! *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Scan terminé 31/07/2009 3:24:23,38 *** Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 03:31:57, on 31/07/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Windows\system32\wuauclt.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Hp\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Users\Mike\Program Files\DNA\btdna.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\TransVente\TransVente.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\OpenOffice.org 3\program\swriter.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Mike\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...o&pf=laptop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: D - {AE5619CA-D637-3A0E-B048-83627B096D00} - C:\Windows\system32\xwr97477.dll (file missing) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [synTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Users\Mike\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [TransVente] C:\PROGRA~1\TRANSV~1\TransVente.exe 1 O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 11201 bytes ....................... Merci encore de votre aide.

Bonjour, à chaque fois que je connecte sur internet je suis envahi de pages de pubs intespestives,alors si quelqu'un peux m'aider j'en serai ravi. Merci d'avance. Voilà mon rapport hijackthis : Scan saved at 22:33:02, on 30/07/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16890) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\mobsync.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Hp\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Mike\Program Files\DNA\btdna.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\TransVente\TransVente.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Users\Mike\AppData\Local\gyuie.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Mike\Downloads\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101764&l=dis R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...o&pf=laptop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: D - {AE5619CA-D637-3A0E-B048-83627B096D00} - C:\Windows\system32\xwr97477.dll (file missing) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [synTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AmenStart] "C:\ProgramData\Blah Find Find.um7hdp" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Users\Mike\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [kyouu] "c:\users\mike\appdata\local\kyouu.exe" kyouu O4 - HKCU\..\Run: [TransVente] C:\PROGRA~1\TRANSV~1\TransVente.exe 1 O4 - HKCU\..\Run: [AmenStart] "C:\ProgramData\Blah Find Find.vp65t85" O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [qsiskeq] "c:\users\mike\appdata\local\qsiskeq.exe" qsiskeq O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [gyuie] "c:\users\mike\appdata\local\gyuie.exe" gyuie O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 11886 bytes