-
Compteur de contenus
10 -
Inscription
-
Dernière visite
À propos de ange_kebek
- Date de naissance 07/07/1967
Profile Information
-
Sexe
Female
-
Localisation
québec, canada
Autres informations
-
Mes langues
français
Visiteurs récents du profil
ange_kebek's Achievements
Junior Member (3/12)
0
Réputation sur la communauté
-
Fenêtre de MSDN qui s'ouvre toujours
ange_kebek a posté un sujet dans Analyses et éradication malwares
Bonjour/bonsoir, Cela faisait un bout que je n'avait pas eu besoin de vos précieux conseils....qui m'ont toujours beaucoup aidé ! ;o) Alors voilà mon problème: Depuis quelques temps, lorsque je navigue sur internet ( firefox ou explore ), une fenêtre de MSDN s'ouvre au lieu de la page voulue. Un message me dit que j'ai probablement un Malware... mais aucun code d'erreur pour m'aider ! À moins, comme je le pense, que ce soit ça le malware ???? J'aimerais avoir une analyse de mon HijackThis Svp, que voici: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:25:28, on 14/sept/2011 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe C:\Users\Guillaine\Desktop\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Canada - Le nouveau MSN Canada, fournisseur des services de qualité tels que Hotmail, Windows Live Messenger, services de nouvelles et de divertissements ocid=OIE9HP R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging \Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe \Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C: \PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java \jre6\bin\jp2ssv.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-21-325117601-3163651655-1951290665-1007\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar \Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-325117601-3163651655-1951290665-1007\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050- 81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416- 8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Envoyer à Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM \Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Envoyer au périphérique &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C: \Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: Google O15 - Trusted Zone: http://www.ilasalle.com O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files \Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: Akamai NetSession Interface (Akamai) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30011 (AppHostSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software \btwdins.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files \Creative Labs Shared\Service\AL6Licensing.exe O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files \Creative Labs Shared\Service\CTAELicensing.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update \GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google \Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater \GoogleUpdaterService.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: HP LaserJet Professional M1210 MFP Series Receive Fax Service (HPM1210RcvFaxSrvc) - Marvell - C: \Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing) O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com \x64\maconfservice.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows \system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows \system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows \SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows \system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink \Shared files\RichVideo64.exe O23 - Service: RoxMediaDB12 - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM \RoxMediaDB12.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows \system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows \System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard \SwitchBoard.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows \servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows \system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows \system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30003 (W3SVC) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30001 (WAS) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat \WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows \system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows \System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Windows Defender (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows \system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C: \Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: Centre de sécurité (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows \system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows \system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows \system32\svchost.exe -- End of file - 26943 bytes Merci à l'avance ! -
besoin d'aide ...analyse hijackthis s.v.p.
ange_kebek a posté un sujet dans Analyses et éradication malwares
bonjour comme mentionné, des virus ont été détectés avec mbam ( et supprimés ensuite....) mon protable est rendu très lent et aujourd'hui m'as surprise avec une alerte stridente et continue en ouvrant mon navigateur.... vous seriez très gentils de me venir en aide.... merci beaucoup ( d'avance... ))) rapport hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:53:06, on 2010-05-21 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18904) Boot mode: Normal Running processes: C:\Program Files (x86)\Bell\Services de sécurité Internet de Bell\rps.exe C:\Program Files (x86)\Bell\Internet Service Advisor\BISA.exe C:\Program Files (x86)\Bell\Internet Service Advisor\BISAComHandler.exe C:\Program Files (x86)\Bell\Services de sécurité Internet de Bell\AVG\Identity Protection\agent\Bin\AVGIDSMonitor.exe C:\Program Files (x86)\Common Files\Motive\McciContextHookShim.exe C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKLM\..\Run: [bISA.exe] "C:\Program Files (x86)\Bell\Internet Service Advisor\BISA.exe" /AUTORUN O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Startup: bloc-notes1982794216.lnk = riouxxxe et l'ange\Documents\bloc-notes-crystalxp.net-fr-14970\Bloc-notes\bloc-notes.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O13 - Gopher Prefix: O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resource/...a/wlscctrl2.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Unknown owner - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (file missing) O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files (x86)\ma-config.com\maconfservice.exe O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files (x86)\Common Files\Motive\McciCMService.exe O23 - Service: McciCMService64 - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Services de sécurité Internet de Bell (Radialpoint Security Services) - Bell - C:\Program Files (x86)\Bell\Services de sécurité Internet de Bell\RpsSecurityAwareR.exe O23 - Service: RadialpointIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\Bell\Services de sécurité Internet de Bell\AVG\Identity Protection\agent\Bin\AVGIDSAgent.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Services de sécurité Internet de Bell Coupe-feu (RP_FWS) - Bell - C:\Program Files (x86)\Bell\Services de sécurité Internet de Bell\Fws.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ServicepointService - Radialpoint Inc. - C:\Program Files (x86)\Bell\Internet Service Advisor\ServicepointService.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_0dfb7520\STacSV64.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Gestionnaire de sauvegarde du Coffre-fort personnel : Service (VaultClientSRV) - Bell Canada - C:\Program Files (x86)\Gestionnaire de sauvegarde du Coffre-fort personnel\VaultClientSRV.exe O23 - Service: Gestionnaire de sauvegarde du Coffre-fort personnel : Service de mise à niveau (VaultClientUpgrade) - Bell Canada - C:\Program Files (x86)\Gestionnaire de sauvegarde du Coffre-fort personnel\VaultClientUpgrade.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8841 bytes -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
bonjour à toi ! ouiiii, tout est ok pour moi ! cé supert et surtout..... un grand merci pour ton aide ! bonne journée ! ( et j'oublies pas de mettre résolu ,,) -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
allô toi, et bien voilà le rapport OTM, bien exécuté j'espère ! j'attends la suite... bonne journée à toi et merci ! All processes killed ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\ {3041d03e-fd4b-44e0-b742-2d9b88305f98}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: riouxxxe et l'ange ->Temp folder emptied: 744486 bytes ->Temporary Internet Files folder emptied: 13917516 bytes ->Java cache emptied: 26592325 bytes ->FireFox cache emptied: 148443608 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 548114 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 2400990 bytes %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 1049 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33237 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 184,00 mb OTM by OldTimer - Version 3.1.7.1 log created on 02042010_115701 Files moved on Reboot... File C:\Windows\temp\TMP00000013796F5BE30EAEBFCC not found! Registry entries deleted on Reboot... -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
bon.... je crois bien que celui-ci sera ok.. alors à toi le travail ! j'attends de tes nouvelles...et surtout, merci bonne journée ! Rapport de ZHPDiag v1.25.07 par Nicolas Coolman Run by riouxxxe et l'ange at 2010-01-30 20:00:13 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18882 MFIE: Mozilla Firefox (3.6) ---\\ System Information Platform : Windows Vista Home Premium (6.0.6002) Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4085 MB (62% free) System drive C: has 337 GB (76%) free of 438 GB ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 337 Go of 438 Go) D:\ CD-ROM drive (Not Inserted) ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=explorer.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\SysWOW64\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} . (.Pas de propriétaire - Pas de description.) -- ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\policies\Explorer: [NoActiveDesktop] . (.Pas de propriétaire - Pas de description.) -- Data=1 O4 - HKLM\..\policies\Explorer: [ForceActiveDesktopOn] . (.Pas de propriétaire - Pas de description.) -- Data=0 O4 - HKLM\..\policies\Explorer: [bindDirectlyToPropertySetStorage] . (.Pas de propriétaire - Pas de description.) -- Data=0 O4 - HKLM\..\policies\Explorer: [NoActiveDesktopChanges] . (.Pas de propriétaire - Pas de description.) -- Data=0 ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.no file.) - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.no file.) - (.not file.) ---\\ Onglet supplémentaire dans les options avancées d'Internet Explorer (O11) O11 - Options group: [accessibility] Accessibility. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [browse] Browsing. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [crypto] Security. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [http] HTTP 1.1 settings. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [international] International. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [multimedia] Multimedia. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [print] Printing. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [searching] Search from the Address bar. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - (.No file.) - http://cdn.scan.onecare.live.com/resource/...a/wlscctrl2.cab ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\SysWOW64\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- %ProgramFiles(x86)%\Windows Mail\WinMail.exe O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\Windows\SysWow64\Macromed\Flash\Flash10c.ocx ---\\ Logiciels installés (O42) O42 - Logiciel: Ad-Aware - (.Lavasoft.) O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) O42 - Logiciel: Apple Application Support - (.Apple Inc..) O42 - Logiciel: CCleaner - (.Piriform.) O42 - Logiciel: Camera Assistant Software for Gateway - (.Chicony Electronics Co.,Ltd..) O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) O42 - Logiciel: Folderico 3.7.2 - (.Shedko ( www.softq.org ).) O42 - Logiciel: Foxit Reader - (.Foxit Software Company.) O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Gateway Games - (.WildTangent.) O42 - Logiciel: GearDrvs - (.GEAR Software.) O42 - Logiciel: Glary Utilities 2.18.0.786 - (.Glarysoft Ltd.) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) O42 - Logiciel: IDT Audio - (.IDT.) O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Java 6 Update 16 - (.Sun Microsystems, Inc..) O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) O42 - Logiciel: MSVCRT - (.Microsoft.) O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) O42 - Logiciel: Messenger Plus! Live - (.Patchou.) O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) O42 - Logiciel: Mozilla Firefox (3.6) - (.Mozilla.) O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) O42 - Logiciel: PowerDVD - (.Acer Inc..) O42 - Logiciel: Realtek Ethernet Controller Driver For Windows Vista and Later - (.Realtek.) O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Brother O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Cisco O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CyberLink O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Folderico O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Foxit Software O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Gateway Games O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Glary Utilities O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Google O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\IDT O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Intel O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Java O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Lavasoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ma-config.com O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Messenger Plus! Live O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Antimalware O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Sync Framework O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MUSICMATCH O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Notepad++ O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Panda Security O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ScanSoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\SystemRequirementsLab O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Calendar O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Collaboration O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Defender O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live Safety Center O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live SkyDrive O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Mail O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows NT O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Photo Gallery O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Portable Devices O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Sidebar O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Zards software O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Apple O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\LogiShrd O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Real O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Services O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\System O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Windows Live ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"vidc.i420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\SysWOW64\l3codeca.acm" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm O52 - TDSD: \Drivers32\"msacm.clmp3enc"="C:\PROGRA~2\CYBERL~1\Power2Go\CLMP3Enc.ACM" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\Windows\SysWOW64\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\PROGRA~2\CYBERL~1\Power2Go\CLMP3Enc.ACM"="MP3 PowerEncoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\Policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\Policies\Explorer] - "BindDirectlyToPropertySetStorage"=0 O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoActiveDesktopChanges"=0 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.F14215E37CF124104575073F782111D2] - 2008-01-20 - 21:46:53 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys O58 - SDL:[MD5.7D05A75E3066861A6610F7EE04FF085C] - 2008-01-20 - 21:46:54 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys O58 - SDL:[MD5.820A201FE08A0C345B3BEDBC30E1A77C] - 2008-01-20 - 21:46:54 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (X64).) -- C:\Windows\system32\drivers\adpu160m.sys O58 - SDL:[MD5.9B4AB6854559DC168FBB4C24FC52E794] - 2008-01-20 - 21:47:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys O58 - SDL:[MD5.3627A62B10284FFBF862BFD49928EDF4] - 2008-02-29 - 01:59:32 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\Windows\system32\drivers\agrsm64.sys O58 - SDL:[MD5.157D0898D4B73F075CE9FA26B482DF98] - 2008-01-20 - 21:46:50 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys O58 - SDL:[MD5.BA8417D4765F3988FF921F30F630E303] - 2008-01-20 - 21:46:52 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys O58 - SDL:[MD5.9D41C435619733B34CC16A511E644B11] - 2008-01-20 - 21:47:00 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 2006-09-18 - 16:30:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 2006-09-18 - 16:30:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys O58 - SDL:[MD5.F0F0BA4D815BE446AA6A4583CA3BCA9B] - 2006-11-02 - 03:43:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 2006-09-18 - 16:30:18 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 2006-09-18 - 16:30:18 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 2006-09-19 - 06:42:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys O58 - SDL:[MD5.E5D5499A1C50A54B5161296B6AFE6192] - 2008-01-20 - 21:46:50 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys O58 - SDL:[MD5.222CB641B4B8A1D1126F8033F9FD6A00] - 2006-11-02 - 06:50:06 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys O58 - SDL:[MD5.264CEE7B031A9D6C827F3D0CB031F2FE] - 2008-01-20 - 21:46:56 ---A- . (.Intel Corporation - Intel® PRO/1000 Adapter NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\E1G6032E.sys O58 - SDL:[MD5.C4636D6E10469404AB5308D9FD45ED07] - 2008-01-20 - 21:46:59 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys O58 - SDL:[MD5.CB121F1009623E83EBCC2C4DCEF6D3FE] - 2008-04-17 - 12:12:54 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys O58 - SDL:[MD5.D7109A1E6BD2DFDBCBA72A6BC626A13B] - 2008-01-20 - 21:46:59 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys O58 - SDL:[MD5.3E3BF3627D886736D0B4E90054F929F6] - 2008-01-20 - 21:46:59 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys O58 - SDL:[MD5.A124C87CD0B39C9E510E138534468383] - 2009-02-26 - 11:46:34 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd64.sys O58 - SDL:[MD5.8C3951AD2FE886EF76C7B5027C3125D3] - 2006-11-02 - 07:02:39 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys O58 - SDL:[MD5.8C7FA71CB1EBCD3EDE8958D27B1BF0B4] - 2008-07-16 - 12:56:06 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15_64.sys O58 - SDL:[MD5.BE1CB000C655396C9DEF09AEE3EA2D67] - 2008-09-22 - 05:49:58 ---A- . (.Intel® Corporation - Intel® High Definition Audio HDMI.) -- C:\Windows\system32\drivers\IntcHdmi.sys O58 - SDL:[MD5.63C766CDC609FF8206CB447A65ABBA4A] - 2006-11-02 - 07:02:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys O58 - SDL:[MD5.1281FE73B17664631D12F643CBEA3F59] - 2006-11-02 - 07:02:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys O58 - SDL:[MD5.4E76398AEF64CB6D782CFEB99B4EAE55] - 2008-11-29 - 06:19:28 ---A- . (.Windows ® Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\Windows\system32\drivers\KMWDFILTER.sys O58 - SDL:[MD5.A352CDB69AF6E18D60C0001D540D8478] - 2009-09-23 - 07:55:23 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\Windows\system32\drivers\Lbd.sys O58 - SDL:[MD5.B6552D382FF070B4ED34CBD6737277C0] - 2009-06-17 - 11:54:22 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.73C1F563AB73D459DFFE682D66476558] - 2009-06-17 - 11:54:30 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\Windows\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.ACBE1AF32D3123E330A07BFBC5EC4A9B] - 2008-01-20 - 21:46:51 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys O58 - SDL:[MD5.799FFB2FC4729FA46D2157C0065B3525] - 2008-01-20 - 21:46:56 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys O58 - SDL:[MD5.F445FF1DAAD8A226366BFAF42551226B] - 2008-01-20 - 21:47:01 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys O58 - SDL:[MD5.A5B0494409FB08DCDC42A216C6EAB0F7] - 2009-04-30 - 22:03:08 ---A- . (.Logitech Inc. - Logitech USB Video Class Driver.) -- C:\Windows\system32\drivers\lvuvc64.sys O58 - SDL:[MD5.989D47E8BD1D7539EB3976D3902E223E] - 2010-01-07 - 16:07:06 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys O58 - SDL:[MD5.5C5CD6AACED32FB26C3FB34B3DCF972F] - 2008-01-20 - 21:46:59 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys O58 - SDL:[MD5.859BC2436B076C77C159ED694ACFE8F8] - 2008-01-20 - 21:46:56 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys O58 - SDL:[MD5.3C200630A89EF2C0864D515B7A75802E] - 2006-11-02 - 07:02:24 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys O58 - SDL:[MD5.C75C966DEAD7A84E112A1F30C4781951] - 2007-08-07 - 19:31:16 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw4v64.sys O58 - SDL:[MD5.50D4C98BC85E87E5F38BD3960457C18B] - 2009-09-15 - 12:34:20 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw5v64.sys O58 - SDL:[MD5.4AC08BD6AF2DF42E0C3196D826C8AEA7] - 2006-11-02 - 07:03:03 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys O58 - SDL:[MD5.2C040B7ADA5B06F6FACADAC8514AA034] - 2008-01-20 - 21:46:54 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys O58 - SDL:[MD5.F7EA0FE82842D05EDA3EFDD376DBFDBA] - 2008-01-20 - 21:46:54 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys O58 - SDL:[MD5.0B83F4E681062F3839BE2EC1D98FD94A] - 2008-01-20 - 21:46:52 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys O58 - SDL:[MD5.E1C80F8D4D1E39EF9595809C1369BF2A] - 2006-11-02 - 06:50:27 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys O58 - SDL:[MD5.BFEB9C99AE9AE0C635AC1DC38A2B2F1D] - 2009-11-16 - 03:13:26 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS6 64-bit Driver.) -- C:\Windows\system32\drivers\Rtlh64.sys O58 - SDL:[MD5.4AD8464FECE8EBE276D4A7D75E418452] - 2009-03-26 - 07:00:16 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for Vista x64.) -- C:\Windows\system32\drivers\RTSTOR64.sys O58 - SDL:[MD5.72AECF54AAC22B20956D08610972B5A1] - 2009-11-03 - 02:08:38 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\Windows\system32\drivers\SBREDrv.sys O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 2006-09-29 - 18:51:44 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys O58 - SDL:[MD5.3A2F769FAB9582BC720E11EA1DFB184D] - 2008-01-20 - 21:47:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys O58 - SDL:[MD5.B195088C49B13D094DB6B28F9146F4CE] - 2008-05-06 - 03:04:42 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\system32\drivers\stwrt64.sys O58 - SDL:[MD5.2F26A2C6FC96B29BEFF5D8ED74E6625B] - 2006-11-02 - 07:02:52 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys O58 - SDL:[MD5.A909667976D3BCCD1DF813FED517D837] - 2006-11-02 - 07:02:37 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys O58 - SDL:[MD5.36887B56EC2D98B9C362F6AE4DE5B7B0] - 2006-11-02 - 07:02:47 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys O58 - SDL:[MD5.697F0446134CDC8F99E69306184FBBB4] - 2008-01-20 - 21:46:56 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys O58 - SDL:[MD5.31707F09846056651EA2C37858F5DDB0] - 2006-11-02 - 06:50:54 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys O58 - SDL:[MD5.85E5E43ED5B48C8376281BAB519271B7] - 2008-01-20 - 21:46:52 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series x64 Windows Driver.) -- C:\Windows\system32\drivers\ulsata2.sys O58 - SDL:[MD5.FA3CA291F80EE13A1AC210492A7DFBB9] - 2007-05-23 - 16:47:28 ---A- . (.Chicony Electronics Co., Ltd. - UVCFTR_S.sys.) -- C:\Windows\system32\drivers\UVCFTR_S.SYS O58 - SDL:[MD5.8294B6C3FDB6C33F24E150DE647ECDAA] - 2008-01-20 - 21:46:50 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys O58 - SDL:[MD5.A68F455ED2673835209318DD61BFBB0E] - 2008-01-20 - 21:47:25 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 2010-01-07 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 2010-01-27 - 03:48:06 ---A- C:\Users\riouxxxe et l'ange\AppData\Roaming\Leadertech\PowerRegister\PowerReg.dat O61 - LFC:Last File Created 2010-01-27 - 09:49:45 ---A- C:\Users\riouxxxe et l'ange\AppData\Roaming\GlarySoft\Glary Utilities\Backups\index.ini O61 - LFC:Last File Created 2010-01-29 - 13:31:05 ---A- C:\Users\All Users\ma-config.com\Temp\mc_E233.tmp O61 - LFC:Last File Created 2010-01-29 - 13:31:06 ---A- C:\Users\All Users\ma-config.com\Logs\maconfservice.txt O61 - LFC:Last File Created 2010-01-29 - 14:04:46 ---A- C:\Users\All Users\ma-config.com\Logs\npapi.txt O61 - LFC:Last File Created 2010-01-30 - 10:12:18 ---A- C:\Users\riouxxxe et l'ange\AppData\Local\Temp\MessengerCache\8ShRAQKAjP0GJEeKfcH9qc6slT8= O61 - LFC:Last File Created 2010-01-30 - 10:55:30 ---A- C:\Users\riouxxxe et l'ange\Pictures\guillou\Snapshot_20100124_4.jpg O61 - LFC:Last File Created 2010-01-30 - 13:50:53 ---A- C:\Users\riouxxxe et l'ange\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog O61 - LFC:Last File Created 2010-01-30 - 15:26:31 ---A- C:\Users\riouxxxe et l'ange\Documents\cc_20100130_152318.reg O61 - LFC:Last File Created 2010-01-30 - 15:39:39 --HA- C:\Users\riouxxxe et l'ange\AppData\Local\IconCache.db O61 - LFC:Last File Created 2010-01-30 - 15:40:47 ---A- C:\Users\riouxxxe et l'ange\AppData\Local\Temp\riouxxxe et l'ange.bmp O61 - LFC:Last File Created 2010-01-30 - 15:45:50 ---A- C:\Users\riouxxxe et l'ange\AppData\Local\Cooliris\c1bf4bf3-d5b3-714e-92e9-8c3fe6f46df8\hf_config.pb O61 - LFC:Last File Created 2010-01-30 - 15:46:50 ---A- C:\Users\riouxxxe et l'ange\AppData\Local\Cooliris\c1bf4bf3-d5b3-714e-92e9-8c3fe6f46df8\prefs.sqlite O61 - LFC:Last File Created 2010-01-30 - 19:53:17 ---A- C:\Users\riouxxxe et l'ange\AppData\Local\Google\firefox-toolbar.xml ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.) End of the scan: 352 lines -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
euhh, bonjour, qu'est-ce que tu veux dire par là ? et si c'est un problème, je fait quoi ? je n'ai pas l'impression de bien saisir.. et j'ai l'impression de te déranger ...ou je me fait des idées p-être ... merci de prendre le temps de me répondre -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
bon, voilà j'avait pourtant cliqué sur ton lien la 1ère fois, mais bon , j'ai la bonne là, et je voulait juste te mentionner que le curseur continue à tourner même quand le rapport est terminé. mais j'ai pu l'enregistrer sans problème. rapport: Rapport de ZHPDiag v1.25.05 par Nicolas Coolman Run by riouxxxe et l'ange at 2010-01-28 10:57:41 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Platform : Windows Vista Home Premium MSIE: Internet Explorer v8.0.6001.18882 MFIE: Mozilla Firefox (3.6) Boot mode: Normal (Normal boot) Total RAM: 4085 MB (63% free) System drive C: has 341 GB (77%) free of 438 GB ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 341 Go of 438 Go) D:\ CD-ROM drive (Not Inserted) ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=explorer.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\SysWOW64\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} . (.Pas de propriétaire - Pas de description.) -- ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.no file.) - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.no file.) - (.not file.) ---\\ Onglet supplémentaire dans les options avancées d'Internet Explorer (O11) O11 - Options group: [accessibility] Accessibility. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [browse] Browsing. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [crypto] Security. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [http] HTTP 1.1 settings. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [international] International. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [multimedia] Multimedia. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [print] Printing. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl O11 - Options group: [searching] Search from the Address bar. (.Microsoft Corporation - Panneau de configuration Internet .) - C:\Windows\SysWOW64\inetcpl.cpl ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - (.No file.) - http://cdn.scan.onecare.live.com/resource/...a/wlscctrl2.cab ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\msvidctl.dll O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\msvidctl.dll O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\SysWOW64\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Pas de propriétaire - Pas de description.) -- %SystemRoot%\system32\browseui.dll ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\system32\wmploc.dll O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\SysWOW64\ie4uinit.exe O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\SysWOW64\iedkcs32.dll O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\system32\themeui.dll O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- %ProgramFiles(x86)%\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\system32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\system32\wmploc.dll O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\system32\shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\Windows\SysWOW64\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\SysWOW64\mscories.dll O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\Windows\SysWow64\Macromed\Flash\Flash10c.ocx ---\\ Logiciels installés (O42) O42 - Logiciel: Ad-Aware - (.Lavasoft.) O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) O42 - Logiciel: Apple Application Support - (.Apple Inc..) O42 - Logiciel: CCleaner - (.Piriform.) O42 - Logiciel: Camera Assistant Software for Gateway - (.Chicony Electronics Co.,Ltd..) O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) O42 - Logiciel: Folderico 3.7.2 - (.Shedko ( www.softq.org ).) O42 - Logiciel: Foxit Reader - (.Foxit Software Company.) O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Gateway Games - (.WildTangent.) O42 - Logiciel: GearDrvs - (.GEAR Software.) O42 - Logiciel: Glary Utilities 2.18.0.786 - (.Glarysoft Ltd.) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) O42 - Logiciel: IDT Audio - (.IDT.) O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Java 6 Update 16 - (.Sun Microsystems, Inc..) O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) O42 - Logiciel: MSVCRT - (.Microsoft.) O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) O42 - Logiciel: Messenger Plus! Live - (.Patchou.) O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) O42 - Logiciel: Mozilla Firefox (3.6) - (.Mozilla.) O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) O42 - Logiciel: PowerDVD - (.Acer Inc..) O42 - Logiciel: Realtek Ethernet Controller Driver For Windows Vista and Later - (.Realtek.) O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Brother O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Cisco O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CyberLink O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Folderico O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Foxit Software O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Gateway Games O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Glary Utilities O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Google O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\IDT O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Intel O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Java O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Lavasoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ma-config.com O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Messenger Plus! Live O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Antimalware O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Sync Framework O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MUSICMATCH O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Notepad++ O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Panda Security O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ScanSoft O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\SystemRequirementsLab O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Calendar O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Collaboration O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Defender O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live Safety Center O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Live SkyDrive O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Mail O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows NT O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Photo Gallery O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Portable Devices O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Sidebar O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Zards software O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Apple O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\LogiShrd O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Real O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Services O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\System O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Windows Live ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
allô... pour ce qui est de la version, avant de poster ici sur le forum, je l'avait télécharger la semaine dernière ), mais je savait pas trop quoi en faire ! mais aujourd'hui avant de cliquer sur ton lien , j'ai pris la peine de le supprimer ( l'ancien )...il reste peut-être des traces je sais pas trop ! alors que me conseilles-tu ? ange_kébek -
demande pour analyse hijack,[ résolu ]
ange_kebek a répondu à un(e) sujet de ange_kebek dans Analyses et éradication malwares
bonjour à toi, et merci surtout de bien vouloir m'apporter de l'aide et pourquoi ceci dits-moi ? bon voilà, j'ai suivai tes instructions pour partir le diagnostic, mais au bout de quelques secondes, la fenêtre qui s'ouvre mentionne que '0-' n'est pas une valeur entière correcte au lieu de je voit quand même le rapport mais mon curseur tourne sans arrêter, donc incapable de l'enregistrer quel est le problème ? ange_kebek -
demande pour analyse hijack,[ résolu ]
ange_kebek a posté un sujet dans Analyses et éradication malwares
bonjour à vous qui connaissez la désinfections des " bébittes d'ordi ' loll je pense très sérieusement être infectée car c'est rendu " à pas de tortue " que ma machine avance ! pour l'ouverture et de la machine et du navigateur. elle a aussi gelé à quelques reprises, je devait l'éteindre pour qu'elle fonctionne je vous envoies un rapport hijackthis pour que vous puissiez p-être m'aider....enfin j'espère que oui merci bcp Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:23:11, on 2010-01-25 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\riouxxxe et l'ange\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG...9&m=p-6872h R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file) O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O13 - Gopher Prefix: O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Unknown owner - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (file missing) O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files (x86)\ma-config.com\maconfservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_0dfb7520\STacSV64.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 7222 bytes