Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Pare-feu neutralisé et plus de son

coolpif

Par coolpif
dans Analyses et éradication malwares

 Partager

Messages recommandés

coolpif Junior Member

coolpif

Posté(e)
Posté(e)

Salut vous tous,

Et surtout merçi a vous tous qui consacrez de votre temps pour les autres.

Mon pare feu Window n'est plus activé (window ne peut pas démarrer le serviçe pare feu window/partage connection internet),et le centre de sécurité est vide .

Coté périphérique,plus moyen d'utisliser les règlages de ma carte son.

Ma barre des taches change parfois d'apparençe(après le démarrage) et ma connection semble instable

Après une restauration(1 mois en arrière),tout semblait ètre rentré dans l'ordre;mais au démarrage suivant,retour a la case départ:mème pannes!

Ni mon anti virus(Mc Affée),ni PetPatrol,SpywareBlaster,Spybot S&D,&AdAware n'ont révélés d'anomalies!

J'ai donc suivi la procédure de pré-nettoyage suggérée par Mégataupe.

Et Antivir a décelé quelques souçis:

 

AntiVir PersonalEdition Classic

Report file date: jeudi 24 janvier 2008 03:25

 

Scanning for 1036370 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Username: steve

Computer name: P797II7N3J2ZLEG

 

Version information:

BUILD.DAT : 269 15604 Bytes 10/09/2007 14:31:00

AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29

AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51

LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47

LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20

ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 12:32:40

ANTIVIR1.VDF : 6.39.0.129 7251968 Bytes 10/07/2007 12:32:46

ANTIVIR2.VDF : 6.39.1.43 1542656 Bytes 25/08/2007 17:21:02

ANTIVIR3.VDF : 6.39.1.51 29696 Bytes 28/08/2007 07:22:36

AVEWIN32.DLL : 7.6.0.5 2789888 Bytes 29/08/2007 17:09:10

AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26

AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24

AVPACK32.DLL : 7.3.0.15 360488 Bytes 3/08/2007 08:46:00

AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06

AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33

AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18

NETNT.DLL : 7.0.0.0 7720 Bytes 8/03/2007 11:09:42

RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 7/08/2007 12:38:13

RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37

SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

 

Configuration settings for the scan:

Jobname..........................: Manual Selection

Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: off

Scan boot sector.................: on

Boot sectors.....................: E:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,

Macro heuristic..................: on

File heuristic...................: high

Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

 

Start of the scan: jeudi 24 janvier 2008 03:25

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

11 processes with 11 modules were scanned

 

Start scanning boot sectors:

Boot sector 'C:\'

[NOTE] No virus was found!

Boot sector 'D:\'

[NOTE] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '36' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\Documents and Settings\Alison\Local Settings\Temporary Internet Files\Content.IE5\GXUFW5YF\edito[2].htm

[DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud

[iNFO] The file was moved to '4800f8a5.qua'!

C:\Documents and Settings\Alison\Local Settings\Temporary Internet Files\Content.IE5\KZQPUROZ\philcouchard[1].htm

[DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud

[iNFO] The file was moved to '4800f8ed.qua'!

C:\Documents and Settings\Alison\Local Settings\Temporary Internet Files\Content.IE5\SDYZWT2B\main[2].htm

[DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud

[iNFO] The file was moved to '4800f929.qua'!

C:\Documents and Settings\Alison\Local Settings\Temporary Internet Files\Content.IE5\SDYZWT2B\philcouchard[1].htm

[DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud

[iNFO] The file was moved to '4800f937.qua'!

C:\Program Files\Common Files\SupportSoft\bin\sdcnetcheck.dll

[DETECTION] Contains suspicious code HEUR/Malware

[iNFO] The file was moved to '47fb727e.qua'!

C:\Program Files\support.com\bin\sdcnetcheck.dll

[DETECTION] Contains suspicious code HEUR/Malware

[iNFO] The file was moved to '47fb76df.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21540_597072294_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47cd76e1.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21540_5a70d4a66_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47cd76ea.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21588_546112c24_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47cd76f1.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21662_53024b6c1_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47ce76f8.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21706_5490046f4_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47cf76ff.qua'!

C:\Program Files\support.com\vault\en\EnableDisableCookiesForIE.vbs\21775_543406ae7_

[0] Archive type: CAB (Microsoft)

--> EnableDisableCookiesForIE.vbs

[DETECTION] Contains detection pattern of the HTML script virus HTML/Zones.Gen

[iNFO] The file was moved to '47cf7703.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13265_5e42c19a0_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47ca7709.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13283_508fcbcc0_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47ca7713.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13306_55ba94bf7_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb7719.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13308_571dd02d0_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb771c.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13309_592b0ba6c_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb7720.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13309_5d5748787_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb772a.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13328_58202654c_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb772e.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13373_5aff06491_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cb7733.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13374_5dc48ecab_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '46b6a14c.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\13419_58e17d088_

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '47cc7734.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\Copy of 13309_592b0ba6c_.cab

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '48087770.qua'!

C:\Program Files\support.com\vault\ie\IEDefaultHomePage.vbs\Copy of 13374_5dc48ecab_.cab

[0] Archive type: CAB (Microsoft)

--> IEDefaultHomePage.vbs

[DETECTION] Contains suspicious code HEUR/Exploit.HTML

[iNFO] The file was moved to '4975a109.qua'!

C:\WINDOWS\system32\Serutpac.exe

[DETECTION] Contains suspicious code HEUR/Crypted

[iNFO] The file was moved to '480a7d1b.qua'!

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

C:\WINDOWS\system32\drivers\sptd7021.sys

[WARNING] The file could not be opened!

C:\WINDOWS\system32\Tools\Restart.exe

[DETECTION] Contains detection pattern of the SPR/Destart.A program

[iNFO] The file was moved to '480b7e90.qua'!

Begin scan in 'D:\'

D:\pagefile.sys

[WARNING] The file could not be opened!

Begin scan in 'E:\'

Search path E:\ could not be opened!

Le périphérique n'est pas prêt.

 

 

 

End of the scan: jeudi 24 janvier 2008 13:12

Used time: 9:46:29 min

 

The scan has been done completely.

 

14409 Scanning directories

411876 Files were scanned

5 viruses and/or unwanted programs were found

21 Files were classified as suspicious:

0 files were deleted

0 files were repaired

26 files were moved to quarantine

0 files were renamed

3 Files cannot be scanned

411871 Files not concerned

7178 Archives were scanned

3 Warnings

0 Notes

Ensuite le rapport HijackThis:

Logfile of HijackThis v1.99.1

Scan saved at 0:24:01, on 25/01/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\WINDOWS\System32\dllhost.exe

C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

C:\Program Files\Network Associates\VirusScan\Mcshield.exe

C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\VTTimer.exe

C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE

C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe

C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\PROGRA~1\PESTPA~1\PPControl.exe

C:\PROGRA~1\PESTPA~1\PPMemCheck.exe

C:\PROGRA~1\PESTPA~1\CookiePatrol.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\Program Files\SpywareGuard\sgmain.exe

C:\Program Files\SpywareGuard\sgbhp.exe

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.skynet.be/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)

O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe

O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe

O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"

O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background

O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = ?

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk.disabled

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html

O8 - Extra context menu item: &Search - ?p=ZSYYYYYYYYBE

O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html

O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html

O8 - Extra context menu item: View EXIF - C:\ViewEXIF\EXIF.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {01347765-1965-426B-91A4-AA6BB342B9A3} (InstallerObj Class) - http://www.1-click.com/common/files/instal...hidden-test.cab

O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqemea/downloads/sysinfo.cab

O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - http://sib1.od2.com/common/Member/ClientIn...2/OCI/setup.exe

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab

O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-583d42a8e21f2844.spaces.live.co...ad/MsnPUpld.cab

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by101fd.bay101.hotmail.msn.com/activex/HMAtchmt.ocx

O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab

O18 - Protocol: bw+0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw+0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: bwg0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwg0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0s - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: offline-8876480 - {058B26B9-9A26-4FC2-86E1-7C03EBE26056} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe

O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

O23 - Service: Serutpac - Unknown owner - C:\WINDOWS\system32\Serutpac.exe (file missing)

 

Merçi d'avance pour vos avis éclairés.

coolpif Junior Member

coolpif

Posté(e)
  • Auteur
Posté(e)

:P

Dans les outils d'administration,services,je parviens a démarrer l' Audio Window et le Service Sécurité...mais il me faut recommencer l'opération a chaque démarrages!!! :P:P

Par contre,le Pare feu ne veut rien entendre!! :P:P

L'exaspération a tendançe meurtrière destructriçe me guette.... :P

coolpif Junior Member

coolpif

Posté(e)
  • Auteur
Posté(e)

:P

Sinon?

Ben,l'autre jour j'ai trouvé un ver(de farine)dans ma soupe Forestière.

Ché po,non plus,comment il est arrivé la...mais j'ai réussi a le trouver seul celui la.

Comme quoi,la cuisine et l'informatique n'ont rien a voir... :P

  • Tonton a modifié le titre en Pare-feu neutralisé et plus de son

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...