probleme de pub priceminister est de cemtre de securiter windows qui s

[mthoms32]

bonjour a tous je vous esplique mon probleme j ai mon pc depuis un peit moment deja quand je navigue sur internet des ta de pub s affiche des pub priceminister des pub centre de securiter windows pub anti spyware je sais plus quoi faire ses insuportable je craque j ai vraiment besoin de votre aide .

aider moi s il vous plait j en serai extrement reconnaissant .je voulai avancer le travaille mais hijackthis ne veut pas s installer il me marque " cette application n'a pas pu demarrer car msvbm60.dll est introuvable. la reinstallation de cette application peut corriger le probleme. " voila aider moi merci d avance pour vos competence a m aider .

[robert somers]

Bonjour,

Commence par désinstaller Hijackthis et réinstalle le.

On te demandera sûrement d'envoyer un rapport.

[mthoms32]

Bonjour,

Commence par désinstaller Hijackthis et réinstalle le.

On te demandera sûrement d'envoyer un rapport.

 

bonjour j ai essayer mais sa ne marche pas j ai telecharger msvbm60.dll pour voir est ses bon sa marche donc je vous poste le rapport

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:00:38, on 27/12/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe

C:\APPS\Powercinema\PCMService.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

C:\WINDOWS\system32\updater\explorer.exe

C:\WINDOWS\system32\svchosts.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

D:\DOCUME~1\coralie\LOCALS~1\Temp\ir_ext_temp_8\autorun.exe

C:\Program Files\BitTorrent\bittorrent.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe

C:\Program Files\Google\Google Updater\GoogleUpdater.exe

c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe

c:\APPS\HIDSERVICE\HIDSERVICE.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE

c:\APPS\Powercinema\Kernel\TV\CLSched.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)

O1 - Hosts: 66.98.148.65 auto.search.msn.com

O1 - Hosts: 66.98.148.65 auto.search.msn.es

O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"

O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [updater] C:\WINDOWS\system32\updater\explorer.exe

O4 - HKLM\..\Run: [Generic Host Process for Win32 Services] svchosts.exe

O4 - HKLM\..\RunServices: [Generic Host Process for Win32 Services] svchosts.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [pqujgnbylw] c:\windows\system32\pqujgnbylw.exe pqujgnbylw

O4 - HKCU\..\Run: [bitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized

O4 - HKCU\..\Run: [Generic Host Process for Win32 Services] svchosts.exe

O4 - HKCU\..\Run: [Miro] C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe

O4 - HKCU\..\RunServices: [Generic Host Process for Win32 Services] svchosts.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab

O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - http://www.virginmega.fr/DownloadManager/R...rod/DownMan.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O18 - Protocol: bw+0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw+0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: bwg0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwg0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0s - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O18 - Protocol: offline-8876480 - {C837A27A-4603-48DA-9207-3BA51460F7FC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing)

 

--

End of file - 23818 bytes

[Thanos]

salut

 

Télécharge combofix.exe de sUBs

• Assure toi que tous les programmes sont fermés avant de lancer le fix!
  
• Fait un double clique sur combofix.exe.
  
• Note: Ne ferme pas la fenêtre qui vient de s'ouvrir , tu te retrouverais avec un bureau vide !
  
• Tape sur la touche 1 pour démarrer le scan.
  
• Lorsque le scan est terminé, un rapport sera généré : poste en le contenu dans ton prochain message.
  
• Si le rapport est trop long, poste le en deux fois.
  

[mthoms32]

salut

 

Télécharge combofix.exe de sUBs

• Assure toi que tous les programmes sont fermés avant de lancer le fix!
  
• Fait un double clique sur combofix.exe.
  
• Note: Ne ferme pas la fenêtre qui vient de s'ouvrir , tu te retrouverais avec un bureau vide !
  
• Tape sur la touche 1 pour démarrer le scan.
  
• Lorsque le scan est terminé, un rapport sera généré : poste en le contenu dans ton prochain message.
  
• Si le rapport est trop long, poste le en deux fois.
  

 

 

bonjour et merci de votre aide voici le rapport de combofix

 

 

ComboFix 07-12-21.4 - coralie 2007-12-27 23:21:24.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.123 [GMT 1:00]

Running from: D:\Documents and Settings\coralie\Bureau\ComboFix.exe

* Created a new restore point

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\Program Files\messengerskinner

C:\WINDOWS\pack.epk

C:\WINDOWS\system32\clemqzvusb.dat

C:\WINDOWS\system32\clemqzvusb_nav.dat

C:\WINDOWS\system32\clemqzvusb_navps.dat

C:\WINDOWS\system32\nvs2.inf

C:\WINDOWS\system32\pqujgnbylw.dat

C:\WINDOWS\system32\pqujgnbylw_nav.dat

C:\WINDOWS\system32\pqujgnbylw_navps.dat

C:\WINDOWS\system32\svchosts.exe

c:\WINDOWS\system32\tofseau.dat

c:\windows\system32\tofseau.exe

c:\WINDOWS\system32\tofseau_nav.dat

c:\WINDOWS\system32\tofseau_navfx.dat

C:\WINDOWS\system32\tofseau_navps.dat

D:\Documents and Settings\coralie\Application Data\MessengerSkinner

D:\Documents and Settings\coralie\Application Data\MessengerSkinner\Userdata\defaultPack.cab

D:\Documents and Settings\coralie\Application Data\MessengerSkinner\Userdata\Install_MessengerSkinner.zip

D:\Documents and Settings\coralie\Application Data\MessengerSkinner\Userdata\languages.xml

D:\Documents and Settings\coralie\Application Data\MessengerSkinner\Userdata\languages_v2.xml

D:\Documents and Settings\coralie\Application Data\MessengerSkinner\Userdata\pack1.cab

 

.

((((((((((((((((((((((((((((( Fichiers créés 2007-11-27 to 2007-12-27 ))))))))))))))))))))))))))))))))))))

.

 

2007-12-27 02:03 . 2007-12-27 02:03 <REP> d-------- D:\Documents and Settings\coralie\Application Data\PCF-VLC

2007-12-27 01:53 . 2007-12-27 01:53 <REP> d-------- D:\Documents and Settings\coralie\Application Data\Participatory Culture Foundation

2007-12-27 01:12 . 2007-12-27 01:12 <REP> d-------- D:\Documents and Settings\coralie\Application Data\Todae

2007-12-26 22:12 . 2007-12-26 22:12 <REP> d-------- C:\Program Files\Trend Micro

2007-12-26 21:23 . 2007-12-26 21:23 291,840 --a------ C:\WINDOWS\system32\bnzwovmfab.exe

2007-12-26 20:58 . 2007-12-26 20:58 300,544 --a------ C:\WINDOWS\system32\dqmbmnhjz.exe

2007-12-26 20:57 . 2007-12-26 20:57 <REP> d-------- D:\Documents and Settings\LocalService.AUTORITE NT.000\Application Data\AVG7

2007-12-26 20:55 . 2007-12-26 20:55 <REP> d-------- C:\Program Files\QuickTime

2007-12-26 12:58 . 2007-12-26 12:58 304,640 --a------ C:\WINDOWS\system32\muxkorp.exe

2007-12-26 00:18 . 2007-12-26 00:18 <REP> d-------- C:\WINDOWS\system32\updater

2007-12-26 00:18 . 2007-12-26 00:18 10 --a------ C:\boot.inf

2007-12-23 22:51 . 2007-12-23 22:51 1,158 --a------ C:\WINDOWS\mozver.dat

2007-12-23 22:30 . 2007-12-27 19:55 <REP> d-------- D:\Documents and Settings\coralie\Application Data\BitTorrent

2007-12-23 22:30 . 2007-12-27 10:57 <REP> d-------- D:\Documents and Settings\coralie\Application Data\AVG7

2007-12-23 22:30 . 2007-12-23 22:41 <REP> d-------- C:\Program Files\BitTorrent

2007-12-23 22:29 . 2007-12-25 23:01 <REP> d-------- D:\Documents and Settings\All Users\Application Data\avg7

2007-12-23 20:57 . 2007-12-23 22:15 303,616 --a------ C:\WINDOWS\system32\bqwfxf.exe

2007-12-23 00:37 . 2007-12-23 00:37 305,152 --a------ C:\WINDOWS\system32\pqujgnbylw.ex_

2007-12-23 00:28 . 2007-12-23 00:28 362,173 --a------ C:\WINDOWS\system32\pqujgnbylw_nav.da_

2007-12-23 00:28 . 2007-12-23 00:34 4,982 --a------ C:\WINDOWS\system32\pqujgnbylw.da_

2007-12-23 00:28 . 2007-12-23 00:34 306 --a------ C:\WINDOWS\system32\pqujgnbylw_navps.da_

2007-12-23 00:12 . 2007-01-18 13:00 3,968 --a------ C:\WINDOWS\system32\drivers\AvgArCln.sys

2007-12-22 21:25 . 2007-12-22 21:25 <REP> d-------- C:\Program Files\CCleaner

2007-12-22 20:53 . 2007-12-22 20:53 736 --a------ C:\WINDOWS\DigimaxMaster.INI

2007-12-22 17:43 . 2007-12-16 11:09 362,173 --a------ C:\WINDOWS\system32\eegriruaer_nav.da_

2007-12-22 17:43 . 2007-12-22 17:43 281,088 --a------ C:\WINDOWS\system32\eegriruaer.ex_

2007-12-22 17:43 . 2007-12-23 00:24 7,521 --a------ C:\WINDOWS\system32\eegriruaer.da_

2007-12-22 17:43 . 2007-12-23 00:25 1,121 --a------ C:\WINDOWS\system32\eegriruaer_navps.da_

2007-12-22 16:24 . 2007-12-22 16:24 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Awem

2007-12-21 20:42 . 2007-12-21 20:42 300,032 --a------ C:\WINDOWS\system32\fgrcpi.exe

2007-12-21 19:04 . 2007-12-27 02:07 <REP> d-------- C:\Program Files\Neuf

2007-12-21 13:04 . 2007-12-21 13:04 283,648 --a------ C:\WINDOWS\system32\qhtkthd.exe

2007-12-17 17:40 . 2007-12-17 17:40 311,808 --a------ C:\WINDOWS\system32\oarkvq.exe

2007-12-16 11:09 . 2007-12-16 11:09 309,760 --a------ C:\WINDOWS\system32\xvtayjz.exe

2007-12-13 10:08 . 2007-12-13 10:08 297,984 --a------ C:\WINDOWS\system32\iwxsyu.exe

2007-12-11 17:36 . 2007-12-11 17:36 282,112 --a------ C:\WINDOWS\system32\sazliiw.exe

2007-12-06 18:38 . 2007-12-06 18:38 305,152 --a------ C:\WINDOWS\system32\bwuggy.exe

2007-12-02 22:02 . 2007-12-02 22:02 296,960 --a------ C:\WINDOWS\system32\ykcsii.exe

2007-12-01 11:16 . 2007-12-01 11:16 281,600 --a------ C:\WINDOWS\system32\bogdfi.exe

2007-11-30 12:54 . 2007-11-30 12:54 296,960 --a------ C:\WINDOWS\system32\uokvumydc.exe

2007-11-29 19:32 . 2007-11-29 19:32 286,720 --a------ C:\WINDOWS\system32\ksjpsbseuk.exe

2007-11-29 16:16 . 2007-11-29 16:16 298,496 --a------ C:\WINDOWS\system32\vuoijvw.exe

2007-11-28 16:22 . 2007-11-28 16:22 285,696 --a------ C:\WINDOWS\system32\zcxrxpvtk.exe

2007-11-27 11:19 . 2007-11-27 11:19 280,064 --a------ C:\WINDOWS\system32\aruhtozuk.exe

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-12-26 23:16 --------- d-----w D:\Documents and Settings\All Users\Application Data\Google Updater

2007-12-26 20:12 --------- d-----w D:\Documents and Settings\All Users\Application Data\WLInstaller

2007-12-26 19:50 --------- d-----w C:\Program Files\MSN Messenger

2007-12-23 21:29 --------- d-----w D:\Documents and Settings\All Users\Application Data\Grisoft

2007-12-23 21:07 --------- d-----w C:\Program Files\Java

2007-12-23 21:05 --------- d-----w C:\Program Files\Fichiers communs\Adobe

2007-12-22 19:52 --------- d-----w C:\Program Files\Windows Live

2007-12-22 19:51 --------- d--h--w C:\Program Files\InstallShield Installation Information

2007-12-22 19:50 --------- d-----w C:\Program Files\Fichiers communs\Real

2007-12-22 19:49 --------- d-----w C:\Program Files\MSN Games

2007-12-22 13:20 --------- d---a-w D:\Documents and Settings\All Users\Application Data\TEMP

2007-12-13 19:03 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help

2007-11-26 10:39 281,600 ----a-w C:\WINDOWS\system32\dgdaipd.exe

2007-11-26 08:24 292,352 ----a-w C:\WINDOWS\system32\sgebfbwoq.exe

2007-11-25 23:04 292,864 ----a-w C:\WINDOWS\system32\nnbock.exe

2007-11-25 13:33 283,136 ----a-w C:\WINDOWS\system32\mbukol.exe

2007-11-23 18:07 287,232 ----a-w C:\WINDOWS\system32\egjtpii.exe

2007-11-23 08:21 288,768 ----a-w C:\WINDOWS\system32\mjvpqob.exe

2007-11-22 07:08 283,648 ----a-w C:\WINDOWS\system32\rnapamdus.exe

2007-11-21 19:36 --------- d-----w D:\Documents and Settings\coralie\Application Data\Zylom

2007-11-21 19:32 --------- d-----w D:\Documents and Settings\All Users\Application Data\Zylom

2007-11-21 12:59 292,352 ----a-w C:\WINDOWS\system32\edfyckga.exe

2007-11-21 09:33 302,592 ----a-w C:\WINDOWS\system32\yqwthwh.exe

2007-11-20 12:03 --------- d-----w D:\Documents and Settings\coralie\Application Data\PlayFirst

2007-11-20 12:03 --------- d-----w D:\Documents and Settings\All Users\Application Data\PlayFirst

2007-11-19 18:03 --------- d-----w D:\Documents and Settings\All Users\Application Data\Fugazo

2007-11-18 19:45 295,936 ----a-w C:\WINDOWS\system32\gmummljrr.exe

2007-11-18 11:35 279,040 ----a-w C:\WINDOWS\system32\rxbgaehin.exe

2007-11-17 12:36 294,912 ----a-w C:\WINDOWS\system32\cpilyu.exe

2007-11-15 09:36 304,640 ----a-w C:\WINDOWS\system32\peksxiprk.exe

2007-11-14 09:39 295,936 ----a-w C:\WINDOWS\system32\ultsslqfe.exe

2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys

2007-11-12 09:35 300,544 ----a-w C:\WINDOWS\system32\gqognok.exe

2007-11-11 21:26 296,960 ----a-w C:\WINDOWS\system32\brbhebb.exe

2007-11-10 11:43 291,328 ----a-w C:\WINDOWS\system32\bvrnln.exe

2007-11-09 09:46 269,312 ----a-w C:\WINDOWS\system32\gqaolkw.exe

2007-11-07 12:36 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller

2007-11-07 12:30 --------- d-----w D:\Documents and Settings\coralie\Application Data\MSNInstaller

2007-11-06 18:37 286,208 ----a-w C:\WINDOWS\system32\tdlsyml.exe

2007-11-06 08:36 302,080 ----a-w C:\WINDOWS\system32\lgameuwffl.exe

2007-11-05 23:10 --------- d-----w D:\Documents and Settings\All Users\Application Data\MumboJumbo

2007-11-04 12:42 288,256 ----a-w C:\WINDOWS\system32\ylsbrou.exe

2007-11-02 08:57 295,424 ----a-w C:\WINDOWS\system32\gjtmqo.exe

2007-10-30 23:23 3,590,656 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll

2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll

2007-10-29 22:43 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll

2007-10-29 13:42 278,528 ----a-w C:\WINDOWS\system32\fmujxkup.exe

2007-10-28 16:57 293,376 ----a-w C:\WINDOWS\system32\lndtxz.exe

2007-10-27 07:11 291,840 ----a-w C:\WINDOWS\system32\ceyyaqhep.exe

2007-10-25 18:37 288,768 ----a-w C:\WINDOWS\system32\wohmlbelje.exe

2007-10-25 16:43 8,516,608 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll

2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll

2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll

2007-10-23 17:51 287,232 ----a-w C:\WINDOWS\system32\ilekpoa.exe

2007-10-23 16:49 586,752 ----a-w C:\WINDOWS\WLXPGSS.SCR

2007-10-23 08:17 299,520 ----a-w C:\WINDOWS\system32\cvycqtogff.exe

2007-10-21 11:35 303,104 ----a-w C:\WINDOWS\system32\jgknxcjjlz.exe

2007-10-19 08:46 297,984 ----a-w C:\WINDOWS\system32\nodrtqpreh.exe

2007-10-18 10:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll

2007-10-17 08:32 270,848 ----a-w C:\WINDOWS\system32\sycwbo.exe

2007-10-14 15:25 265,216 ----a-w C:\WINDOWS\system32\fyfkca.exe

2007-10-13 09:45 265,216 ----a-w C:\WINDOWS\system32\opodbk.exe

2007-10-12 07:42 267,776 ----a-w C:\WINDOWS\system32\gelfophzm.exe

2007-10-11 18:34 280,576 ----a-w C:\WINDOWS\system32\dqhzch.exe

2007-10-10 23:49 824,832 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll

2007-10-10 23:49 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll

2007-10-10 23:49 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll

2007-10-10 23:49 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll

2007-10-10 23:49 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll

2007-10-10 23:49 478,208 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll

2007-10-10 23:49 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll

2007-10-10 23:49 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll

2007-10-10 23:49 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll

2007-10-10 23:49 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll

2007-10-10 23:49 27,648 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll

2007-10-10 23:49 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll

2007-10-10 23:49 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll

2007-10-10 23:49 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll

2007-10-10 23:49 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll

2007-10-10 23:49 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll

2007-10-10 23:49 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll

2007-10-10 23:49 132,608 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll

2007-10-10 23:49 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll

2007-10-10 23:49 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll

2007-10-10 23:49 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll

2007-10-10 23:49 1,159,680 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll

2007-10-10 11:00 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe

2007-10-10 11:00 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe

2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe

2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll

2007-10-09 16:25 268,288 ----a-w C:\WINDOWS\system32\wiardvxlm.exe

2007-10-07 16:09 263,168 ----a-w C:\WINDOWS\system32\fwsnup.exe

2007-10-06 06:07 279,040 ----a-w C:\WINDOWS\system32\uaivtzqu.exe

2007-09-30 17:28 345,600 ----a-w C:\WINDOWS\system32\hlhrbtk.exe

2007-09-30 12:01 340,992 ----a-w C:\WINDOWS\system32\utjogngv.exe

2007-09-29 09:16 337,920 ----a-w C:\WINDOWS\system32\uzflxqr.exe

2007-09-28 07:25 343,040 ----a-w C:\WINDOWS\system32\nuszdxqs.exe

.

 

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00]

"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-03-11 01:12]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 16:14]

"BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" [2007-09-08 00:01]

"Generic Host Process for Win32 Services"="svchosts.exe" []

"Miro"="C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe" []

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

"Generic Host Process for Win32 Services"="svchosts.exe" []

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 13:00]

"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]

"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]

"SoundMan"="SOUNDMAN.EXE" [2005-01-20 20:04 C:\WINDOWS\SOUNDMAN.EXE]

"Vade Retro Outlook Express"="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 12:03]

"PCMService"="c:\APPS\Powercinema\PCMService.exe" [2006-02-23 11:08]

"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]

"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-25 12:52]

"EoWeather"="" []

"Lexmark X1100 Series"="C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" [2003-08-19 15:48]

"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 16:42]

"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-26 12:35]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00]

"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-12-26 13:02]

"Updater"="C:\WINDOWS\system32\updater\explorer.exe" [2007-11-15 15:59]

"Generic Host Process for Win32 Services"="svchosts.exe" []

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

"Generic Host Process for Win32 Services"="svchosts.exe" []

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00]

"AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-12-26 13:02]

 

D:\Documents and Settings\coralie\Menu D‚marrer\Programmes\D‚marrage\

OneNote 2007 - Capture d'‚cran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54]

 

D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\

Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-03-11 01:12:40]

Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-03-11 01:11:23]

Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-08-15 23:34:40]

 

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2004-07-06 22:45]

S3 Via4in1;Via4in1;C:\Via4in1.sys []

 

*Newly Created Service* - CATCHME

*Newly Created Service* - PROCEXP90

.

**************************************************************************

 

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-12-27 23:24:58

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2007-12-27 23:25:34

.

2007-12-13 19:04:48 --- E O F ---

[Thanos]

ok! il y a pas mal de fichiers à éliminer: je te poste un script à exécuter sous peu...

[Thanos]

on va s'occuper de l'infection Magic Control Agent avec un programme dédié pour bien nettoyer >

 

Télécharge navilog1 de IL-MAFIOSO

• Choisis Enregistrer la cible (du lien) sous et enregistre-le fichier sur ton bureau.
  
• Ensuite double clique sur navilog1.exe pour lancer l'installation.
  
• Une fois l'installation terminée, le fix s'exécutera automatiquement.
  (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
  
• Laisse-toi guider. Au menu principal, choisis 1 et valides.
  (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
  
• Patiente jusqu'au message :

  *** Analyse Termine le ..... ***

• Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
  
• Copie-colle l'intégralité dans une réponse. Referme le bloc note.
  
• Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
  

[mthoms32]

on va s'occuper de l'infection Magic Control Agent avec un programme dédié pour bien nettoyer >

 

Télécharge navilog1 de IL-MAFIOSO

• Choisis Enregistrer la cible (du lien) sous et enregistre-le fichier sur ton bureau.
  
• Ensuite double clique sur navilog1.exe pour lancer l'installation.
  
• Une fois l'installation terminée, le fix s'exécutera automatiquement.
  (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
  
• Laisse-toi guider. Au menu principal, choisis 1 et valides.
  (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
  
• Patiente jusqu'au message :
   
  
• Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
  
• Copie-colle l'intégralité dans une réponse. Referme le bloc note.
  
• Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
  

 

 

 

 

 

voici le rapport

 

 

 

Search Navipromo version 3.3.8 commencé le 28/12/2007 à 0:11:00,31

 

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!

!!! Postez ce rapport sur le forum pour le faire analyser !!!

!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

 

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 11.12.2007 à 18h00 par IL-MAFIOSO

 

 

Microsoft Windows XP [version 5.1.2600]

Internet Explorer : 7.0.5730.11

Système de fichiers : NTFS

 

Executé en mode normal

 

*** Recherche Programmes installés ***

 

 

 

 

*** Recherche dossiers dans C:\WINDOWS ***

 

 

 

*** Recherche dossiers dans C:\Program Files ***

 

 

 

*** Recherche dossiers dans D:\DOCUME~1\ALLUSE~1\APPLIC~1 ***

 

 

 

 

*** Recherche dossiers dans "D:\Documents and Settings\coralie\APPLIC~1" ***

 

 

*** Recherche dossiers dans D:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***

 

 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***

pour + d'infos : http://www.gmer.net

 

Aucun Fichier trouvé

 

 

 

*** Recherche avec GenericNaviSearch ***

!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!

!!! A vérifier impérativement avant toute suppression manuelle !!!

 

* Recherche dans C:\WINDOWS\system32 *

 

Fichiers trouvés :

 

cllydt.exe trouvé !

cmofyvzty.exe trouvé !

ctxksbvbp.exe trouvé !

 

Fichiers suspects :

 

 

* Recherche dans "D:\Documents and Settings\coralie\LOCALS~1\APPLIC~1" *

 

 

 

*** Recherche fichiers ***

 

 

 

 

*** Recherche clés spécifiques dans le Registre ***

 

 

*** Module de Recherche complémentaire ***

(Recherche fichiers spécifiques)

 

1)Recherche nouveaux fichiers Instant Access :

 

 

2)Recherche Heuristique :

 

* Dans C:\WINDOWS\system32 :

 

 

* Dans "D:\Documents and Settings\coralie\LOCALS~1\APPLIC~1" :

 

 

3)Recherche Certificats :

 

Certificat Egroup absent !

 

4)Recherche fichiers connus :

 

 

 

*** Analyse terminée le 28/12/2007 à 0:15:29,73 ***

[Thanos]

ok: je vais te demander de faire ceci le temps que le prépare le script >

 

Rend toi dans le répertoire C:\ et fais un clic doit sur ce dossier > Qoobox > dans le menu qui se déroule, choisis Envoyer vers > Dossiers Compressés > un nouveau fichier va apparaitre dans C:\ il se nomme Qoobox.zip

 

Stp rend toi sur cette page afin d'héberger le fichier ici > http://www.sendspace.com

Clique sur Parcourir pour chercher C:\Qoobox.zip . Une fois trouvé, sélectionne le puis clique sur le bouton Ouvrir.

Coche la case "I have read and agree to the terms of service."

Clique enfin sur le bouton Upload File .

Une nouvelle fenêtre va s'ouvrir et te donner le lien d'upload : envoie le moi par MP stp

[mthoms32]

ses en cour ses quoi par mp