Hotmail infecté?

keilanette · le 30 août 2008

Alors voici le rapport :

--------------------\\ Lop S&D 4.2.3-6 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 1.73GHz )

BIOS : Phoenix FirstBIOS Notebook Pro Version 2.0 for IBM ThinkPad

USER : sandrine brouhard ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1229 [VPS 080829-0] 4.8.1229 (Not Activated)

"C:\Lop SD" ( MAJ : 27-08-2008|22:40 )

Option : [1] ( 30/08/2008|12:51 )

--------------------\\ Listing folders in APPLIC~1

[17/09/2004|16:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini

[07/09/2005|01:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities

[17/09/2004|16:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/09/2005|01:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic

[07/09/2005|01:55] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[12/06/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[17/09/2004|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini

[07/09/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ibm

[12/04/2006|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleErrorStyleShim

[20/02/2006|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installer.log

[14/09/2006|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel

[30/08/2008|00:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[22/10/2005|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[10/05/2008|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[30/08/2008|00:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller

[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real

[17/09/2004|17:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[22/10/2005|14:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[30/07/2007|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[10/10/2005|10:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[07/04/2007|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[17/04/2006|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2007|03:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAMAHA

[17/09/2004|16:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini

[07/09/2005|01:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[17/09/2004|16:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[07/09/2005|01:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic

[07/09/2005|01:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/09/2006|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/09/2006|17:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[27/09/2005|19:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[28/05/2008|18:18] C:\DOCUME~1\SANDRI~1\APPLIC~1\Adobe

[12/06/2007|10:01] C:\DOCUME~1\SANDRI~1\APPLIC~1\AdobeUM

[22/10/2005|15:07] C:\DOCUME~1\SANDRI~1\APPLIC~1\Apple Computer

[13/04/2007|23:10] C:\DOCUME~1\SANDRI~1\APPLIC~1\Command & Conquer 3 Tiberium Wars

[17/09/2004|16:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\desktop.ini

[15/04/2006|19:55] C:\DOCUME~1\SANDRI~1\APPLIC~1\Dumb creative

[11/07/2008|22:35] C:\DOCUME~1\SANDRI~1\APPLIC~1\dvdcss

[13/05/2008|22:33] C:\DOCUME~1\SANDRI~1\APPLIC~1\Flickr

[20/02/2006|00:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\FotoWire

[14/04/2007|17:19] C:\DOCUME~1\SANDRI~1\APPLIC~1\Hamachi

[05/09/2006|23:41] C:\DOCUME~1\SANDRI~1\APPLIC~1\Help

[14/02/2006|01:50] C:\DOCUME~1\SANDRI~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\SANDRI~1\APPLIC~1\Identities

[14/09/2006|15:22] C:\DOCUME~1\SANDRI~1\APPLIC~1\Intel

[30/10/2006|20:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\InterTrust

[07/10/2005|22:25] C:\DOCUME~1\SANDRI~1\APPLIC~1\InterVideo

[15/04/2006|19:58] C:\DOCUME~1\SANDRI~1\APPLIC~1\jump delete hold

[14/06/2007|17:58] C:\DOCUME~1\SANDRI~1\APPLIC~1\L84577898.5v1

[18/06/2006|18:36] C:\DOCUME~1\SANDRI~1\APPLIC~1\Macromedia

[30/08/2008|00:10] C:\DOCUME~1\SANDRI~1\APPLIC~1\Malwarebytes

[22/10/2005|15:05] C:\DOCUME~1\SANDRI~1\APPLIC~1\Media Player Classic

[12/06/2007|09:49] C:\DOCUME~1\SANDRI~1\APPLIC~1\Microsoft

[22/08/2008|13:50] C:\DOCUME~1\SANDRI~1\APPLIC~1\Mozilla

[15/05/2008|23:04] C:\DOCUME~1\SANDRI~1\APPLIC~1\My Battle for Middle-earth Files

[30/08/2008|12:23] C:\DOCUME~1\SANDRI~1\APPLIC~1\OpenOffice.org2

[07/05/2006|12:51] C:\DOCUME~1\SANDRI~1\APPLIC~1\Real

[13/04/2007|20:33] C:\DOCUME~1\SANDRI~1\APPLIC~1\SecuROM

[09/05/2007|00:06] C:\DOCUME~1\SANDRI~1\APPLIC~1\Skype

[05/10/2005|22:41] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sonic

[04/07/2006|20:56] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sphinx

[20/04/2006|12:45] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sun

[12/03/2007|17:30] C:\DOCUME~1\SANDRI~1\APPLIC~1\U3

[12/05/2008|01:54] C:\DOCUME~1\SANDRI~1\APPLIC~1\vlc

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[30/08/2008 12:42][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job

[30/08/2008 12:22][--a------] C:\WINDOWS\tasks\PMTask.job

[30/08/2008 12:22][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 05:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ MsgPlus SPONSOR INSTALLED !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]

"SponsorInstalled"=dword:00000000

--------------------\\ Listing Folders in C:\Program Files

[12/06/2007|09:58] C:\Program Files\Adobe

[10/05/2008|00:42] C:\Program Files\adslTV

[15/04/2006|20:03] C:\Program Files\Adverts

[10/10/2005|10:08] C:\Program Files\Alfa & Ariss

[09/10/2005|16:40] C:\Program Files\Alwil Software

[07/09/2005|01:45] C:\Program Files\ATI Technologies

[22/08/2008|13:48] C:\Program Files\bwin

[15/04/2006|19:14] C:\Program Files\CCleaner

[17/09/2004|17:02] C:\Program Files\ComPlus Applications

[07/09/2005|01:44] C:\Program Files\CONEXANT

[30/07/2007|16:49] C:\Program Files\DAEMON Tools

[07/09/2005|01:44] C:\Program Files\Digital Line Detect

[07/05/2006|16:46] C:\Program Files\EA GAMES

[03/07/2006|20:15] C:\Program Files\Easy CD-DA Extractor 9

[13/04/2007|20:25] C:\Program Files\Electronic Arts

[10/05/2008|00:35] C:\Program Files\eMule

[12/11/2005|20:09] C:\Program Files\ffdshow

[30/05/2008|18:01] C:\Program Files\Fichiers communs

[21/10/2005|22:54] C:\Program Files\GflSDK

[10/05/2008|00:41] C:\Program Files\GrabIt

[13/04/2007|23:01] C:\Program Files\Hamachi

[27/11/2006|16:44] C:\Program Files\HarmoTab

[07/07/2007|22:28] C:\Program Files\Hasbro Interactive

[07/09/2005|01:39] C:\Program Files\IBM

[07/09/2005|01:53] C:\Program Files\IBM DLA

[07/09/2005|01:52] C:\Program Files\IBM RecordNow!

[22/02/2007|03:44] C:\Program Files\InstallShield Installation Information

[07/09/2005|01:41] C:\Program Files\Intel

[28/05/2006|20:16] C:\Program Files\InterActual

[21/08/2008|02:16] C:\Program Files\Internet Explorer

[07/09/2005|01:53] C:\Program Files\InterVideo

[30/08/2008|02:12] C:\Program Files\Java

[24/03/2006|20:54] C:\Program Files\jump delete hold

[02/02/2006|19:01] C:\Program Files\Lgc

[20/02/2006|01:12] C:\Program Files\Logitech

[30/08/2008|00:10] C:\Program Files\Malwarebytes' Anti-Malware

[22/10/2005|15:07] C:\Program Files\Media Player Classic

[21/08/2008|02:21] C:\Program Files\Messenger

[01/10/2006|22:07] C:\Program Files\MessengerPlus! 3

[09/05/2007|03:10] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[17/09/2004|17:06] C:\Program Files\microsoft frontpage

[30/05/2008|17:36] C:\Program Files\Microsoft Office

[02/01/2006|21:51] C:\Program Files\Microsoft Visual Studio

[09/04/2007|01:59] C:\Program Files\Microsoft Works

[02/01/2006|21:45] C:\Program Files\Microsoft.NET

[17/09/2004|17:03] C:\Program Files\Movie Maker

[30/08/2008|12:25] C:\Program Files\Mozilla Firefox

[30/05/2008|17:36] C:\Program Files\MSECache

[10/10/2005|20:35] C:\Program Files\MSN

[17/09/2004|17:02] C:\Program Files\MSN Gaming Zone

[07/04/2007|21:29] C:\Program Files\MSN Messenger

[20/11/2006|04:02] C:\Program Files\MSXML 4.0

[10/05/2008|00:43] C:\Program Files\MtStudio

[17/09/2004|17:03] C:\Program Files\NetMeeting

[07/09/2005|01:44] C:\Program Files\NetWaiting

[31/05/2008|12:11] C:\Program Files\Norton AntiVirus

[13/04/2007|16:58] C:\Program Files\OO Software

[12/06/2007|11:10] C:\Program Files\OpenOffice.org 2.2

[14/06/2007|03:03] C:\Program Files\Outlook Express

[07/09/2005|02:02] C:\Program Files\PC-Doctor for Windows

[04/12/2007|18:42] C:\Program Files\PCFriendly

[18/10/2007|21:51] C:\Program Files\QuickPar

[28/12/2006|00:38] C:\Program Files\QuickTime

[22/10/2005|15:07] C:\Program Files\QuickTime Alternative

[22/10/2005|15:07] C:\Program Files\Real Alternative

[17/09/2004|17:04] C:\Program Files\Services en ligne

[22/10/2005|14:30] C:\Program Files\Skype

[07/09/2005|01:52] C:\Program Files\Sonic

[26/07/2008|16:41] C:\Program Files\Spybot - Search & Destroy

[07/09/2005|01:30] C:\Program Files\Synaptics

[07/09/2005|01:38] C:\Program Files\ThinkPad

[30/08/2008|02:18] C:\Program Files\trend micro

[17/09/2004|17:13] C:\Program Files\Uninstall Information

[09/05/2006|18:10] C:\Program Files\VideoLAN

[12/04/2007|19:37] C:\Program Files\Warcraft III Demo

[26/11/2005|17:53] C:\Program Files\Winamp

[25/12/2007|03:54] C:\Program Files\Windows Live Favorites

[29/08/2008|15:45] C:\Program Files\Windows Live Safety Center

[25/12/2007|03:54] C:\Program Files\Windows Live Toolbar

[07/09/2005|01:49] C:\Program Files\Windows Media Connect

[26/10/2006|18:47] C:\Program Files\Windows Media Player

[17/09/2004|17:01] C:\Program Files\Windows NT

[17/09/2004|17:04] C:\Program Files\WindowsUpdate

[09/10/2005|16:45] C:\Program Files\WinRAR

[17/09/2004|17:06] C:\Program Files\xerox

[27/04/2006|14:34] C:\Program Files\xp-AntiSpy

[15/04/2006|19:14] C:\Program Files\Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Fichiers communs

[30/10/2006|20:57] C:\Program Files\Fichiers communs\Adobe

[02/01/2006|21:52] C:\Program Files\Fichiers communs\DESIGNER

[20/02/2006|00:57] C:\Program Files\Fichiers communs\FotoWire

[20/02/2006|00:52] C:\Program Files\Fichiers communs\InstallShield

[24/03/2006|21:40] C:\Program Files\Fichiers communs\Java

[20/02/2006|00:55] C:\Program Files\Fichiers communs\Logitech

[17/06/2008|02:26] C:\Program Files\Fichiers communs\Microsoft Shared

[17/09/2004|17:03] C:\Program Files\Fichiers communs\MSSoap

[15/05/2008|21:02] C:\Program Files\Fichiers communs\ODBC

[17/09/2004|17:03] C:\Program Files\Fichiers communs\Services

[07/09/2005|01:53] C:\Program Files\Fichiers communs\Sonic

[17/09/2004|16:57] C:\Program Files\Fichiers communs\SpeechEngines

[07/09/2005|01:52] C:\Program Files\Fichiers communs\SureThing Shared

[30/08/2008|00:54] C:\Program Files\Fichiers communs\Symantec Shared

[14/06/2007|03:03] C:\Program Files\Fichiers communs\System

--------------------\\ Process

( 65 Processus )

MsgPlus.exe ~ [PID:664]

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

C:\Program Files\Adverts

--------------------\\ Searching within the Registry

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN

--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-30 12:51:55

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 96

--------------------\\ Searching for other infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\SANDRI~1\Bureau\musique\metal\faith no more\angel dust\Faith No More-Angel Dust-Crack Hitler .mp3

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)\keygen.exe

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)\O&O Defrag 8 ProfessionalEn 8.0.1398.exe

[F:1333][D:116]-> C:\DOCUME~1\SANDRI~1\LOCALS~1\Temp

[F:32][D:0]-> C:\DOCUME~1\SANDRI~1\Cookies

[F:637][D:5]-> C:\DOCUME~1\SANDRI~1\LOCALS~1\TEMPOR~1\content.IE5

[F:2][D:0]-> C:\Recycled

--------------------\\ Scan completed at 12:53:23

Et le log.txt :

Logfile of random's system information tool (written by random/random)

Run by sandrine brouhard at 2008-08-30 12:54:24

Microsoft Windows XP Professionnel Service Pack 2

System drive C: has 4 GB (8%) free of 53 GB

Total RAM: 510 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:54:30, on 30/08/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\ibmpmsvc.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\IBM\Bluetooth Software\bin\btwdins.exe

C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\oodag.exe

C:\WINDOWS\System32\QCONSVC.EXE

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\TPHDEXLG.EXE

C:\WINDOWS\system32\TpKmpSVC.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\system32\TpShocks.exe

C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe

C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe

C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe

C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Program Files\IBM\Messages By IBM\ibmmessages.exe

C:\IBMTOOLS\UTILS\ibmprc.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\DAEMON Tools\daemon.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE

C:\PROGRA~1\ThinkPad\CONNEC~1\QCTray.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\IBM\Bluetooth Software\BTTray.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Digital Line Detect\DLG.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\Program Files\OpenOffice.org 2.2\program\soffice.exe

C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Documents and Settings\sandrine brouhard\Bureau\RSIT.exe

C:\Program Files\trend micro\sandrine brouhard.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper

O4 - HKLM\..\Run: [TpShocks] TpShocks.exe

O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe

O4 - HKLM\..\Run: [TP4EX] tp4ex.exe

O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [uC_Start] C:\Program Files\IBM\Updater\\ucstartup.exe

O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\\ibmmessages.exe

O4 - HKLM\..\Run: [iBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe

O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: rundll32 C:\PROGRA~1\Thin k Pad\UTILIT~1\BatLogEx.DLL,S tartBattLog

O4 - H K LM\..\Run: [QCWLIcon] C:\Program File s \Thin k Pad\ConnectUtilitie s \QCWLICON.EXE

O4 - H K LM\..\Run: [QCTray] C:\PROGRA~1\Thin k Pad\CONNEC~1\QCTray.exe

O4 - H K LM\..\Run: [ava s t!] C:\PROGRA~1\ALWIL S ~1\Ava s t4\a s hDi s p.exe

O4 - H K CU\..\Run: [CTFMON.EXE] C:\WINDOW S \s y s tem32\ctfmon.exe

O4 - H K CU\..\Run: [LDM] C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe

O4 - H K CU\..\Run: [Logitech S oftwareUpdate] "C:\Program File s \Logitech\Video\Manife s tEngine.exe" boot

O4 - H K CU\..\Run: [m s nm s gr] "C:\Program File s \M S N Me s s enger\m s nm s gr.exe" /bac k ground

O4 - H K CU\..\Run: [ibmme s s age s ] C:\Program File s \IBM\Me s s age s By IBM\ibmme s s age s .exe

O4 - H K U S \S -1-5-19\..\Run: [CTFMON.EXE] C:\WINDOW S \s y s tem32\CTFMON.EXE (U s er 'S ERVICE LOCAL')

O4 - H K U S \S -1-5-20\..\Run: [CTFMON.EXE] C:\WINDOW S \s y s tem32\CTFMON.EXE (U s er 'S ERVICE R É S EAU')

O4 - H K U S \S -1-5-18\..\Run: [CTFMON.EXE] C:\WINDOW S \s y s tem32\CTFMON.EXE (U s er 'S Y S TEM')

O4 - H K U S \.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOW S \s y s tem32\CTFMON.EXE (U s er 'Default u s er')

O4 - S tartup: OpenOffice.org 2.2.ln k = C:\Program File s \OpenOffice.org 2.2\program\quic k s tart.exe

O4 - Global S tartup: BTTray.ln k = ?

O4 - Global S tartup: Digital Line Detect.ln k = ?

O4 - Global S tartup: Lancement rapide d'Adobe Reader.ln k = C:\Program File s \Adobe\Acrobat 7.0\Reader\reader_s l.exe

O4 - Global S tartup: Logitech De s k top Me s s enger.ln k = C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LDMConf.exe

O8 - Extra context menu item: &Window s Live S earch - re s ://C:\Program File s \Window s Live Toolbar\m s ntb.dll/s earch.htm

O8 - Extra context menu item: Add to Window s &Live Favorite s - http://favorite s .live.com/quic k add.a s px

O8 - Extra context menu item: E&xporter ver s Micro s oft Excel - re s ://C:\PROGRA~1\MICRO S ~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program File s \IBM\Bluetooth S oftware\bt s endto_ie_ctx.htm

O8 - Extra context menu item: Ouvrir dan s un nouvel onglet d'arri è re-plan - re s ://C:\Program File s \Window s Live Toolbar\Component s \fr-fr\m s ntabre s .dll.mui/229?02c35ec9698f481c82d5651661680e8f

O8 - Extra context menu item: Ouvrir dan s un nouvel onglet de premier plan - re s ://C:\Program File s \Window s Live Toolbar\Component s \fr-fr\m s ntabre s .dll.mui/230?02c35ec9698f481c82d5651661680e8f

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program File s \Java\jre1.6.0_07\bin\s s v.dll

O9 - Extra 'Tool s ' menuitem: Con s ole Java (S un) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program File s \Java\jre1.6.0_07\bin\s s v.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICRO S ~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Mi s e à jour de logiciel s Thin k Pad - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program File s \Thin k Pad\P k gMgr\P k gMgr.exe

O9 - Extra button: Me s s enger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program File s \Me s s enger\m s m s g s .exe

O9 - Extra 'Tool s ' menuitem: Window s Me s s enger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program File s \Me s s enger\m s m s g s .exe

O11 - Option s group: [JAVA_IBM] Java (IBM)

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Window s Genuine Advantage Validation Tool) - http://go.micro s oft.com/fwlin k /?lin k id=39204

O18 - Protocol: bw+0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw+0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: bwg0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwg0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw k 0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw k 0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw s 0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw s 0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 s - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: offline-8876480 - {1F1DEE44-46A9-41FE-AC7D-2FD17131DCB8} - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\BWPlugProtocol-8876480.dll

O23 - S ervice: ava s t! iAV S 4 Control S ervice (a s wUpd S v) - ALWIL S oftware - C:\Program File s \Alwil S oftware\Ava s t4\a s wUpd S v.exe

O23 - S ervice: Ati Hot K ey Poller - ATI Technologie s Inc. - C:\WINDOW S \s y s tem32\Ati2evxx.exe

O23 - S ervice: ava s t! Antiviru s - ALWIL S oftware - C:\Program File s \Alwil S oftware\Ava s t4\a s h S erv.exe

O23 - S ervice: ava s t! Mail S canner - ALWIL S oftware - C:\Program File s \Alwil S oftware\Ava s t4\a s hMai S v.exe

O23 - S ervice: ava s t! Web S canner - ALWIL S oftware - C:\Program File s \Alwil S oftware\Ava s t4\a s hWeb S v.exe

O23 - S ervice: Bluetooth S ervice (btwdin s ) - Broadcom Corporation - C:\Program File s \IBM\Bluetooth S oftware\bin\btwdin s .exe

O23 - S ervice: Intel® PRO S et/Wirele s s Event Log (EvtEng) - Intel Corporation - C:\Program File s \Intel\Wirele s s \Bin\EvtEng.exe

O23 - S ervice: IBM Rapid Re s tore Ultra S ervice - Un k nown owner - C:\Program File s \IBM\IBM Rapid Re s tore Ultra\rrpc s b.exe

O23 - S ervice: Thin k Pad PM S ervice (IBMPM S VC) - Un k nown owner - C:\WINDOW S \s y s tem32\ibmpm s vc.exe

O23 - S ervice: In s tallDriver Table Manager (IDriverT) - Macrovi s ion Corporation - C:\Program File s \Fichier s commun s \In s tall S hield\Driver\11\Intel 32\IDriverT.exe

O23 - S ervice: iPod S ervice - Un k nown owner - C:\Program File s \iPod\bin\iPod S ervice.exe (file mi s s ing)

O23 - S ervice: O&O Defrag - O&O S oftware GmbH - C:\WINDOW S \s y s tem32\oodag.exe

O23 - S ervice: IBM P S A Acce s s Driver Control (P s a S rv) - Un k nown owner - C:\WINDOW S \s y s tem32\P s a S rv.exe (file mi s s ing)

O23 - S ervice: QCON S VC - IBM Corp. - C:\WINDOW S \S y s tem32\QCON S VC.EXE

O23 - S ervice: Intel® PRO S et/Wirele s s Regi s try S ervice (Reg S rvc) - Intel Corporation - C:\Program File s \Intel\Wirele s s \Bin\Reg S rvc.exe

O23 - S ervice: Intel® PRO S et/Wirele s s S ervice (S 24EventMonitor) - Intel Corporation - C:\Program File s \Intel\Wirele s s \Bin\S 24EvMon.exe

O23 - S ervice: Thin k Pad HDD AP S Logging S ervice (TPHDEXLG S VC) - Lenovo. - C:\WINDOW S \S y s tem32\TPHDEXLG.EXE

O23 - S ervice: IBM K CU S ervice (Tp K mp S VC) - Un k nown owner - C:\WINDOW S \s y s tem32\Tp K mp S VC.exe

--

End of file - 23186 byte s

S cheduled ta s k s folder

C:\WINDOW S \ta s k s \PMTa s k .job

C:\WINDOW S \ta s k s \V é rifier le s mi s e s à jour de Window s Live Toolbar.job

Regi s try dump

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{02478D38-C3F9-4EFB-9B51-7695ECA05670}]

Yahoo! Toolbar Helper - C:\Program File s \Yahoo!\Companion\In s tall s \cpn\yt.dll [2005-12-07 399424]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

AcroIEHlprObj Cla s s - C:\Program File s \Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{53707962-6F74-2D53-2644-206D7942484F}]

C:\PROGRA~1\S PYBOT~1\S DHelper.dll [2005-05-31 853672]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{5CA3D70E-1895-11CF-8E15-001234567890}]

DriveLetterAcce s s - C:\WINDOW S \s y s tem32\dla\tf s w s hx.dll [2004-09-02 118842]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

S S VHelper Cla s s - C:\Program File s \Java\jre1.6.0_07\bin\s s v.dll [2008-06-10 509328]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Window s Live S ign-in Helper - C:\Program File s \Fichier s commun s \Micro s oft S hared\Window s Live\Window s LiveLogin.dll [2006-08-31 322368]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s \CurrentVer s ion\Explorer\Brow s er Helper Object s \{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]

Window s Live Toolbar Helper - C:\Program File s \Window s Live Toolbar\m s ntb.dll [2007-10-19 546320]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Internet Explorer\Toolbar]

{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program File s \Yahoo!\Companion\In s tall s \cpn\yt.dll [2005-12-07 399424]

{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Window s Live Toolbar - C:\Program File s \Window s Live Toolbar\m s ntb.dll [2007-10-19 546320]

[H K EY_LOCAL_MACHINE\S oftware\Micro s oft\Window s \CurrentVer s ion\Run]

"S ynTPLpr"=C:\Program File s \S ynaptic s \S ynTP\S ynTPLpr.exe [2004-11-08 110592]

"S ynTPEnh"=C:\Program File s \S ynaptic s \S ynTP\S ynTPEnh.exe [2004-11-08 512000]

"TP K MAPHELPER"=C:\Program File s \Thin k Pad\Utilitie s \Tp K mapAp.exe [2004-02-04 897024]

"Tp S hoc k s "=C:\WINDOW S \s y s tem32\Tp S hoc k s .exe [2005-11-07 106496]

"TPHOT K EY"=C:\PROGRA~1\Thin k Pad\P k gMgr\HOT K EY\TPH K MGR.exe [2005-03-03 94208]

"TP4EX"=C:\WINDOW S \s y s tem32\tp4ex.exe [2004-11-12 40960]

"EZEJMNAP"=C:\PROGRA~1\Thin k Pad\UTILIT~1\EzEjMnAp.Exe [2004-11-24 212992]

"ATIPTA"=C:\Program File s \ATI Technologie s \ATI Control Panel\atiptaxx.exe [2004-12-11 344064]

"UC_S tart"=C:\Program File s \IBM\Updater\\uc s tartup.exe [2004-07-14 36864]

"UC_S MB"= []

"UpdateManager"=C:\Program File s \Fichier s commun s \S onic\Update Manager\s gtray.exe [2003-08-19 110592]

"dla"=C:\WINDOW S \s y s tem32\dla\tf s wctrl.exe [2004-09-02 127035]

""= []

"ibmme s s age s "=C:\Program File s \IBM\Me s s age s By IBM\\ibmme s s age s .exe [2004-08-06 442368]

"IBMPRC"=C:\IBMTOOL S \UTIL S \ibmprc.exe [2004-12-16 90112]

"PWRMGRTR"=rundll32 C:\PROGRA~1\Thin k Pad\UTILIT~1\PWRMGRTR.DLL []

"iTune s Helper"=C:\Program File s \iTune s \iTune s Helper.exe []

"WinampAgent"=C:\Program File s \Winamp\winampa.exe [2004-12-20 33792]

"Me s s engerPlu s 3"=C:\Program File s \Me s s engerPlu s ! 3\M s gPlu s .exe [2006-10-01 190024]

"DAEMON Tool s "=C:\Program File s \DAEMON Tool s \daemon.exe [2005-11-09 128920]

"LVCOM S X"=C:\WINDOW S \s y s tem32\LVCOM S X.EXE [2005-07-19 221184]

"LogitechVideoRepair"=C:\Program File s \Logitech\Video\I S S tart.exe [2005-06-08 458752]

"LogitechVideoTray"=C:\Program File s \Logitech\Video\LogiTray.exe [2005-06-08 217088]

"S unJavaUpdate S ched"=C:\Program File s \Java\jre1.6.0_07\bin\ju s ched.exe [2008-06-10 144784]

"K ernelFaultChec k "=C:\WINDOW S \s y s tem32\dumprep 0 -k []

"BLOG"=rundll32 C:\PROGRA~1\Thin k Pad\UTILIT~1\BatLogEx.DLL []

"QCWLIcon"=C:\Program File s \Thin k Pad\ConnectUtilitie s \QCWLICON.EXE [2005-03-18 86016]

"QCTray"=C:\PROGRA~1\Thin k Pad\CONNEC~1\QCTray.exe [2005-03-18 745472]

"ava s t!"=C:\PROGRA~1\ALWIL S ~1\Ava s t4\a s hDi s p.exe [2008-07-19 78008]

[H K EY_CURRENT_U S ER\S oftware\Micro s oft\Window s \CurrentVer s ion\Run]

"CTFMON.EXE"=C:\WINDOW S \s y s tem32\ctfmon.exe [2004-08-05 15360]

"LDM"=C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe [2006-03-20 36864]

"Logitech S oftwareUpdate"=C:\Program File s \Logitech\Video\Manife s tEngine.exe [2005-06-08 196608]

"m s nm s gr"=C:\Program File s \M S N Me s s enger\m s nm s gr.exe [2007-01-19 5674352]

"ibmme s s age s "=C:\Program File s \IBM\Me s s age s By IBM\ibmme s s age s .exe [2004-08-06 442368]

C:\Document s and S etting s \All U s er s \Menu D é marrer\Programme s \D é marrage

BTTray.ln k - C:\Program File s \IBM\Bluetooth S oftware\BTTray.exe

Digital Line Detect.ln k - C:\Program File s \Digital Line Detect\DLG.exe

Lancement rapide d'Adobe Reader.ln k - C:\Program File s \Adobe\Acrobat 7.0\Reader\reader_s l.exe

Logitech De s k top Me s s enger.ln k - C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LDMConf.exe

C:\Document s and S etting s \s andrine brouhard\Menu D é marrer\Programme s \D é marrage

OpenOffice.org 2.2.ln k - C:\Program File s \OpenOffice.org 2.2\program\quic k s tart.exe

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s NT\CurrentVer s ion\Window s ]

"AppInit_DLL S "="M s gPlu s Loader.dll"

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s NT\CurrentVer s ion\Winlogon\Notify\AtiExtEvent]

C:\WINDOW S \s y s tem32\Ati2evxx.dll [2004-11-30 94208]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s NT\CurrentVer s ion\Winlogon\Notify\QConGina]

C:\WINDOW S \s y s tem32\QConGina.dll [2005-03-18 262144]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s NT\CurrentVer s ion\Winlogon\Notify\tphot k ey]

C:\WINDOW S \s y s tem32\tph k loc k .dll [2004-08-12 24576]

[H K EY_LOCAL_MACHINE\S OFTWARE\Micro s oft\Window s NT\CurrentVer s ion\Winlogon\Notify\WgaLogon]

C:\WINDOW S \s y s tem32\WgaLogon.dll [2007-03-15 236928]

[H K EY_LOCAL_MACHINE\S Y S TEM\CurrentControl S et\Control\L s a]

"authentication pac k age s "=s cecli

pwdmon

[H K EY_LOCAL_MACHINE\s y s tem\currentcontrol s et\control\s ecurityprovider s ]

"S ecurityProvider s "=m s ap s s pc.dll s channel.dll dige s t.dll m s n s s pc.dll

[H K EY_LOCAL_MACHINE\S oftware\Micro s oft\Window s \CurrentVer s ion\Policie s \S y s tem]

"dontdi s playla s tu s ername"=0

"legalnoticecaption"=

"legalnoticetext"=

"s hutdownwithoutlogon"=1

"undoc k withoutlogon"=1

[H K EY_LOCAL_MACHINE\s y s tem\currentcontrol s et\s ervice s \s haredacce s s \parameter s \firewallpolicy\s tandardprofile\authorizedapplication s \li s t]

"%windir%\s y s tem32\s e s s mgr.exe"="%windir%\s y s tem32\s e s s mgr.exe:*:enabled:@xp s p2re s .dll,-22019"

"C:\Program File s \IBM\Updater\jre\bin\java.exe"="C:\Program File s \IBM\Updater\jre\bin\java.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \IBM\Updater\jre\bin\javaw.exe"="C:\Program File s \IBM\Updater\jre\bin\javaw.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \IBM\Updater\uc s mb.exe"="C:\Program File s \IBM\Updater\uc s mb.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \Me s s enger\m s m s g s .exe"="C:\Program File s \Me s s enger\m s m s g s .exe:*:Enabled:Window s Me s s enger"

"C:\Program File s \iTune s \iTune s .exe"="C:\Program File s \iTune s \iTune s .exe:*:Enabled:iTune s "

"C:\Program File s \S oul s ee k \s l s k .exe"="C:\Program File s \S oul s ee k \s l s k .exe:*:Enabled:S oul S ee k "

"C:\Program File s \VideoLAN\VLC\vlc.exe"="C:\Program File s \VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"

"C:\Program File s \S oul s ee k -Te s t\s l s k .exe"="C:\Program File s \S oul s ee k -Te s t\s l s k .exe:*:Enabled:S oul S ee k "

"C:\Program File s \Logitech\VideoCall\VideoCall.exe"="C:\Program File s \Logitech\VideoCall\VideoCall.exe:*:Enabled:videocall.exe"

"C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe"="C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe:*:Enabled:Logitech De s k top Me s s enger"

"C:\S tubIn s taller.exe"="C:\S tubIn s taller.exe:*:Enabled:LimeWire s warmed in s taller"

"C:\Program File s \LimeWire\LimeWire.exe"="C:\Program File s \LimeWire\LimeWire.exe:*:Enabled:LimeWire"

"C:\Program File s \EA GAME S \The Battle for Middle-earth \game.dat"="C:\Program File s \EA GAME S \The Battle for Middle-earth \game.dat:*:Enabled:The Battle for Middle-earth "

"C:\Program File s \ad s lTV\vlc.exe"="C:\Program File s \ad s lTV\vlc.exe:*:Enabled:VLC media player"

"C:\Program File s \ad s lTV\ad s lTV.exe"="C:\Program File s \ad s lTV\ad s lTV.exe:*:Enabled:ad s lTV"

"C:\Program File s \EA GAME S \The Battle for Middle-earth \patchget.dat"="C:\Program File s \EA GAME S \The Battle for Middle-earth \patchget.dat:*:Enabled:patchgrabber"

"C:\Program File s \La s t.fm\La s tFM.exe"="C:\Program File s \La s t.fm\La s tFM.exe:*:Enabled:La s tFM"

"C:\WINDOW S \s y s tem32\dpv s etup.exe"="C:\WINDOW S \s y s tem32\dpv s etup.exe:*:Enabled:Micro s oft DirectPlay Voice Te s t"

"C:\WINDOW S \s y s tem32\rundll32.exe"="C:\WINDOW S \s y s tem32\rundll32.exe:*:Enabled:Ex é cuter une DLL en tant qu'application"

"C:\Program File s \M S N Me s s enger\m s nm s gr.exe"="C:\Program File s \M S N Me s s enger\m s nm s gr.exe:*:Enabled:Window s Live Me s s enger 8.1"

"C:\Program File s \M S N Me s s enger\livecall.exe"="C:\Program File s \M S N Me s s enger\livecall.exe:*:Enabled:Window s Live Me s s enger 8.1 (Phone)"

"C:\Program File s \Electronic Art s \Command & Conquer 3\RetailExe\1.4\cnc3game.dat"="C:\Program File s \Electronic Art s \Command & Conquer 3\RetailExe\1.4\cnc3game.dat:*:Enabled:Command & Conquer 3 Tiberium War s "

"C:\Program File s \S k ype\Phone\S k ype.exe"="C:\Program File s \S k ype\Phone\S k ype.exe:*:Enabled:S k ype"

"C:\Program File s \eMule\emule.exe"="C:\Program File s \eMule\emule.exe:*:Enabled:eMule"

"C:\Program File s \Micro s oft Office\OFFICE11\EXCEL.EXE"="C:\Program File s \Micro s oft Office\OFFICE11\EXCEL.EXE:*:Enabled:Micro s oft Office Excel"

"C:\Program File s \Micro s oft Office\OFFICE11\WINWORD.EXE"="C:\Program File s \Micro s oft Office\OFFICE11\WINWORD.EXE:*:Enabled:Micro s oft Office Word"

"C:\Document s and S etting s \s andrine brouhard\Local S etting s \Temp\WZ S E0.TMP\S ymNRT.exe"="C:\Document s and S etting s \s andrine brouhard\Local S etting s \Temp\WZ S E0.TMP\S ymNRT.exe:*:Enabled:Norton Removal Tool"

[H K EY_LOCAL_MACHINE\s y s tem\currentcontrol s et\s ervice s \s haredacce s s \parameter s \firewallpolicy\domainprofile\authorizedapplication s \li s t]

"%windir%\s y s tem32\s e s s mgr.exe"="%windir%\s y s tem32\s e s s mgr.exe:*:enabled:@xp s p2re s .dll,-22019"

"C:\Program File s \IBM\Updater\jre\bin\java.exe"="C:\Program File s \IBM\Updater\jre\bin\java.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \IBM\Updater\jre\bin\javaw.exe"="C:\Program File s \IBM\Updater\jre\bin\javaw.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \IBM\Updater\uc s mb.exe"="C:\Program File s \IBM\Updater\uc s mb.exe:*:Enabled:IBM Update Connector"

"C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe"="C:\Program File s \Logitech\De s k top Me s s enger\8876480\Program\LogitechDe s k topMe s s enger.exe:*:Enabled:Logitech De s k top Me s s enger"

"C:\Program File s \M S N Me s s enger\m s nm s gr.exe"="C:\Program File s \M S N Me s s enger\m s nm s gr.exe:*:Enabled:Window s Live Me s s enger 8.1"

"C:\Program File s \M S N Me s s enger\livecall.exe"="C:\Program File s \M S N Me s s enger\livecall.exe:*:Enabled:Window s Live Me s s enger 8.1 (Phone)"

[H K EY_CURRENT_U S ER\s oftware\micro s oft\window s \currentver s ion\explorer\mountpoint s 2\{60cd8932-d0ae-11db-ad1d-000e9bda5731}]

s hell\AutoRun\command - D:\LaunchU3.exe

File a s s ociation s

.reg - open - regedit.exe "%1" %*

.s cr - open - "%1" %*

Li s t of file s /folder s created in the la s t three month s

2008-08-30 12:50:56 ----A---- C:\lopR.txt

2008-08-30 12:50:18 ----D---- C:\Lop S D

2008-08-30 02:07:24 ----A---- C:\WINDOW S \s y s tem32\javaw s .exe

2008-08-30 02:07:24 ----A---- C:\WINDOW S \s y s tem32\javaw.exe

2008-08-30 02:07:24 ----A---- C:\WINDOW S \s y s tem32\java.exe

2008-08-30 00:53:57 ----D---- C:\Document s and S etting s \All U s er s \Application Data\NortonIn s taller

2008-08-30 00:10:03 ----D---- C:\Document s and S etting s \s andrine brouhard\Application Data\Malwarebyte s

2008-08-30 00:09:57 ----D---- C:\Document s and S etting s \All U s er s \Application Data\Malwarebyte s

2008-08-30 00:09:56 ----D---- C:\Program File s \Malwarebyte s ' Anti-Malware

2008-08-29 15:44:19 ----D---- C:\Program File s \Window s Live S afety Center

2008-08-29 01:16:41 ----D---- C:\Program File s \trend micro

2008-08-29 01:16:36 ----D---- C:\r s it

2008-08-21 02:21:16 ----HDC---- C:\WINDOW S \$NtUnin s tall K B952954$

2008-08-21 02:21:07 ----HDC---- C:\WINDOW S \$NtUnin s tall K B946648$

2008-08-21 02:20:57 ----HDC---- C:\WINDOW S \$NtUnin s tall K B953839$

2008-08-21 02:20:44 ----HDC---- C:\WINDOW S \$NtUnin s tall K B950974$

2008-08-21 02:17:34 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951072-v2$

2008-08-21 02:17:25 ----HDC---- C:\WINDOW S \$NtUnin s tall K B952287$

2008-08-21 02:17:14 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951066$

2008-08-21 02:15:54 ----HDC---- C:\WINDOW S \$NtUnin s tall K B953838$

2008-07-08 23:04:41 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951748$

2008-06-21 23:10:04 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951376-v2$

2008-06-12 02:54:10 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951698$

2008-06-12 02:54:02 ----HDC---- C:\WINDOW S \$NtUnin s tall K B950762$

2008-06-12 02:53:42 ----HDC---- C:\WINDOW S \$NtUnin s tall K B950759$

2008-06-12 02:53:28 ----HDC---- C:\WINDOW S \$NtUnin s tall K B950760$

2008-06-12 02:53:13 ----HDC---- C:\WINDOW S \$NtUnin s tall K B951376$

2008-06-05 00:23:15 ----D---- C:\Program File s \bwin

Li s t of driver s

R1 Aavm k er4;ava s t! A s ynchronou s Viru s Monitor; C:\WINDOW S \s y s tem32\driver s \Aavm k er4.s y s [2008-07-19 26944]

R1 ANC;ANC; C:\WINDOW S \S y s tem32\driver s \ANC.S Y S [2005-03-18 11520]

R1 a s w S P;ava s t! S elf Protection; C:\WINDOW S \s y s tem32\driver s \a s w S P.s y s [2008-07-19 78416]

R1 a s wTdi;ava s t! Networ k S hield S upport; C:\WINDOW S \s y s tem32\driver s \a s wTdi.s y s [2008-07-19 42912]

R1 IBMTPCH K ;IBMTPCH K ; C:\WINDOW S \S y s tem32\driver s \IBMBLDID.S Y S [2005-03-18 2432]

R1 intelppm;Pilote de proce s s eur Intel; C:\WINDOW S \s y s tem32\DRIVER S \intelppm.s y s [2004-08-05 40320]

R1 S hoc k Mgr;S hoc k Mgr; C:\WINDOW S \s y s tem32\driver s \S hoc k Mgr.s y s [2005-06-20 4736]

R1 S mapint;S mapint; C:\WINDOW S \S y s tem32\driver s \S mapint.s y s [2005-01-21 14848]

R1 s s cdbh k 5;s s cdbh k 5; C:\WINDOW S \s y s tem32\driver s \s s cdbh k 5.s y s [2004-07-14 5627]

R1 s s rtln;s s rtln; C:\WINDOW S \s y s tem32\driver s \s s rtln.s y s [2004-07-14 23545]

R1 TD S MAPI;TD S MAPI; C:\WINDOW S \S y s tem32\driver s \TD S MAPI.S Y S [2005-01-21 9340]

R1 TPH K DRV;TPH K DRV; C:\WINDOW S \s y s tem32\driver s \TPH K DRV.s y s [2004-09-06 16370]

R1 TPPWRIF;TPPWRIF; C:\WINDOW S \S y s tem32\driver s \Tppwrif.s y s [2006-05-26 4442]

R1 T S MAPIP;T S MAPIP; C:\WINDOW S \S y s tem32\driver s \T S MAPIP.S Y S [2004-12-01 7168]

R2 Aegi s P;AEGI S Protocol (IEEE 802.1x) v3.4.10.0; C:\WINDOW S \s y s tem32\DRIVER S \Aegi s P.s y s [2006-09-14 21275]

R2 a s wF s Bl k ;a s wF s Bl k ; C:\WINDOW S \s y s tem32\DRIVER S \a s wF s Bl k .s y s [2008-07-19 20560]

R2 a s wMon2;ava s t! S tandard S hield S upport; C:\WINDOW S \s y s tem32\driver s \a s wMon2.s y s [2008-07-19 94416]

R2 drvnddm;drvnddm; C:\WINDOW S \s y s tem32\driver s \drvnddm.s y s [2004-07-14 40448]

R2 ibmfilter;ibmfilter; \??\C:\WINDOW S \s y s tem32\driver s \ibmfilter.s y s []

R2 irda;Protocole IrDA; C:\WINDOW S \s y s tem32\DRIVER S \irda.s y s [2004-08-03 87424]

R2 mdmx s d k ;mdmx s d k ; C:\WINDOW S \s y s tem32\DRIVER S \mdmx s d k .s y s [2004-03-17 13059]

R2 PMEM;PMEM; \??\C:\WINDOW S \S Y S TEM32\Driver s \PMEMNT.S Y S []

R2 s 24tran s ;Tran s port RLAN; C:\WINDOW S \s y s tem32\DRIVER S \s 24tran s .s y s [2006-04-14 13568]

R2 tf s nboio;tf s nboio; C:\WINDOW S \s y s tem32\dla\tf s nboio.s y s [2004-09-02 25723]

R2 tf s ncof s ;tf s ncof s ; C:\WINDOW S \s y s tem32\dla\tf s ncof s .s y s [2004-09-02 34843]

R2 tf s ndrct;tf s ndrct; C:\WINDOW S \s y s tem32\dla\tf s ndrct.s y s [2004-09-02 4123]

R2 tf s ndre s ;tf s ndre s ; C:\WINDOW S \s y s tem32\dla\tf s ndre s .s y s [2004-09-02 2271]

R2 tf s nif s ;tf s nif s ; C:\WINDOW S \s y s tem32\dla\tf s nif s .s y s [2004-09-02 86202]

R2 tf s nopio;tf s nopio; C:\WINDOW S \s y s tem32\dla\tf s nopio.s y s [2004-09-02 14715]

R2 tf s npool;tf s npool; C:\WINDOW S \s y s tem32\dla\tf s npool.s y s [2004-09-02 6363]

R2 tf s nudf;tf s nudf; C:\WINDOW S \s y s tem32\dla\tf s nudf.s y s [2004-09-02 98714]

R2 tf s nudfa;tf s nudfa; C:\WINDOW S \s y s tem32\dla\tf s nudfa.s y s [2004-09-02 100603]

R3 aeaudio;aeaudio; C:\WINDOW S \s y s tem32\driver s \aeaudio.s y s [2004-05-17 133200]

R3 a s wRdr;a s wRdr; C:\WINDOW S \s y s tem32\driver s \a s wRdr.s y s [2008-07-19 23152]

R3 ati2mtag;ati2mtag; C:\WINDOW S \s y s tem32\DRIVER S \ati2mtag.s y s [2004-11-30 873984]

R3 b57w2 k ;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOW S \s y s tem32\DRIVER S \b57xp32.s y s [2004-12-06 126720]

R3 btaudio;P é riph é rique audio Bluetooth; C:\WINDOW S \s y s tem32\driver s \btaudio.s y s [2004-10-01 17024]

R3 BTDriver;Pilote de communication s virtuelle s Bluetooth; C:\WINDOW S \s y s tem32\DRIVER S \btport.s y s [2004-10-01 30299]

R3 CmBatt;Pilote d'adaptateur s ecteur Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \CmBatt.s y s [2004-08-03 14080]

R3 dt s c s i;dt s c s i; C:\WINDOW S \s y s tem32\S y s tem32\Driver s \dt s c s i.s y s []

R3 GEARA s piWDM;GEARA s piWDM; C:\WINDOW S \S y s tem32\Driver s \GEARA s piWDM.s y s [2005-02-02 14408]

R3 H S F_DP;H S F_DP; C:\WINDOW S \s y s tem32\DRIVER S \H S F_DP.s y s [2004-11-10 1041664]

R3 H S FHWICH;H S FHWICH; C:\WINDOW S \s y s tem32\DRIVER S \H S FHWICH.s y s [2004-11-10 200448]

R3 IBMPMDRV;IBMPMDRV; C:\WINDOW S \s y s tem32\DRIVER S \ibmpmdrv.s y s [2005-11-11 10112]

R3 N S CIRDA;Pilote de p é riph é rique infrarouge N S C; C:\WINDOW S \s y s tem32\DRIVER S \n s cirda.s y s [2004-08-03 28672]

R3 Pfc;Padu s A S PI S hell; C:\WINDOW S \s y s tem32\driver s \pfc.s y s [2003-09-19 10368]

R3 portio;TPM S ervice; C:\WINDOW S \s y s tem32\DRIVER S \N s cTpmDD.s y s [2004-05-19 13757]

R3 Ra s irda;Miniport r é s eau é tendu (IrDA); C:\WINDOW S \s y s tem32\DRIVER S \ra s irda.s y s [2001-08-17 19584]

R3 s mwdm;s mwdm; C:\WINDOW S \s y s tem32\driver s \s mwdm.s y s [2004-09-01 259648]

R3 S ynTP;S ynaptic s TouchPad Driver; C:\WINDOW S \s y s tem32\DRIVER S \S ynTP.s y s [2004-11-08 177504]

R3 TPInput;TPInput; C:\WINDOW S \S y s tem32\DRIVER S \TPInput.s y s [2006-03-30 6784]

R3 u s behci;Pilote miniport de contr ô leur d'h ô te am é lior é Micro s oft U S B 2.0; C:\WINDOW S \s y s tem32\DRIVER S \u s behci.s y s [2004-08-03 26624]

R3 u s bhub;Concentrateur U S B2; C:\WINDOW S \s y s tem32\DRIVER S \u s bhub.s y s [2004-09-16 57856]

R3 u s buhci;Pilote miniport de contr ô leur h ô te univer s el U S B Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \u s buhci.s y s [2004-08-05 20480]

R3 w29n51;Pilote de carte de connexion r é s eau Intel® PRO/Wirele s s 2200BG pour Window s XP; C:\WINDOW S \s y s tem32\DRIVER S \w29n51.s y s [2006-04-05 2208512]

R3 winach s f;winach s f; C:\WINDOW S \s y s tem32\DRIVER S \H S F_CNXT.s y s [2004-11-10 685184]

S 3 ac97intc;S ervice d'in s tallation du pilote audio Intel® 82801 (WDM); C:\WINDOW S \s y s tem32\driver s \ac97intc.s y s [2001-08-17 96256]

S 3 BTWDNDI S ;S erveur d'acc è s au r é s eau local Bluetooth; C:\WINDOW S \s y s tem32\DRIVER S \btwdndi s .s y s [2004-10-01 147896]

S 3 BTWU S B;WIDCOMM U S B Bluetooth Driver; C:\WINDOW S \S y s tem32\Driver s \btwu s b.s y s [2004-10-01 54488]

S 3 CCDECODE;D é codeur s ou s -titre ferm é ; C:\WINDOW S \s y s tem32\DRIVER S \CCDECODE.s y s [2004-08-04 17024]

S 3 E100B;Pilote de carte Intel ® PRO; C:\WINDOW S \s y s tem32\DRIVER S \e100b325.s y s [2001-08-23 117760]

S 3 fbxu s b;FreeBox U S B Networ k Adapter; C:\WINDOW S \s y s tem32\DRIVER S \fbxu s b.s y s [2003-12-31 18848]

S 3 hamachi;Hamachi Networ k Interface; C:\WINDOW S \s y s tem32\DRIVER S \hamachi.s y s [2007-04-13 26056]

S 3 HidU s b;Pilote de cla s s e HID Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \hidu s b.s y s [2001-08-17 9600]

S 3 LVU S B S ta;Logitech U S B Monitor Filter; C:\WINDOW S \s y s tem32\driver s \lvu s b s ta.s y s [2005-05-27 22016]

S 3 mouhid;Pilote HID de s ouri s ; C:\WINDOW S \s y s tem32\DRIVER S \mouhid.s y s [2001-08-23 12288]

S 3 M S TEE;Converti s s eur en T/s ite-à -s ite de r é partition Micro s oft; C:\WINDOW S \s y s tem32\driver s \M S TEE.s y s [2004-08-03 5504]

S 3 NABT S FEC;Codec NABT S /FEC VBI; C:\WINDOW S \s y s tem32\DRIVER S \NABT S FEC.s y s [2004-08-04 85376]

S 3 Ndi s IP;Connection TV/vid é o Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \Ndi s IP.s y s [2004-08-04 10880]

S 3 nv;nv; C:\WINDOW S \s y s tem32\DRIVER S \nv4_mini.s y s [2004-08-03 1897408]

S 3 pepifilter;Volume Adapter; C:\WINDOW S \s y s tem32\DRIVER S \lv302af.s y s [2005-05-27 7136]

S 3 PID_08A0;Quic k Cam IM(PID_08A0); C:\WINDOW S \s y s tem32\DRIVER S \LV302AV.S Y S [2005-05-27 913280]

S 3 p s add;IBM P S A Acce s s Driver; \??\C:\WINDOW S \s y s tem32\Driver s \p s add.s y s []

S 3 QCNDI S IF;QCNDI S IF; C:\WINDOW S \S y s tem32\driver s \qcndi s if.S Y S [2005-03-18 12288]

S 3 S LIP;D é trameur d é calage BDA; C:\WINDOW S \s y s tem32\DRIVER S \S LIP.s y s [2004-08-04 11136]

S 3 s treamip;BDA IP S in k ; C:\WINDOW S \s y s tem32\DRIVER S \S treamIP.s y s [2004-08-04 15360]

S 3 u s baudio;Pilote U S B audio (WDM); C:\WINDOW S \s y s tem32\driver s \u s baudio.s y s [2004-08-04 59264]

S 3 u s bccgp;Pilote parent g é n é rique U S B Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \u s bccgp.s y s [2004-08-04 31616]

S 3 u s bprint;Cla s s e d'imprimante s U S B Micro s oft; C:\WINDOW S \s y s tem32\DRIVER S \u s bprint.s y s [2004-08-04 25856]

S 3 u s b s can;Pilote de s canneur U S B; C:\WINDOW S \s y s tem32\DRIVER S \u s b s can.s y s [2004-08-03 15104]

S 3 U S B S TOR;Pilote de s toc k age de ma s s e U S B; C:\WINDOW S \s y s tem32\DRIVER S \U S B S TOR.S Y S [2004-08-03 26496]

S 3 W S TCODEC;Codec Teletext s tandard; C:\WINDOW S \s y s tem32\DRIVER S \W S TCODEC.S Y S [2004-08-04 19328]

S 3 YMIDU S B;YAMAHA Corporation U S B MIDI Driver; C:\WINDOW S \S y s tem32\Driver s \ymidu s b.s y s [2005-07-25 14464]

S 4 agp440;Filtre de bu s AGP Intel; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \agp440.s y s []

S 4 agpCPQ;Filtre de bu s AGP Compaq; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \agpCPQ.s y s []

S 4 alim1541;Filtre de bu s AGP ALI; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \alim1541.s y s []

S 4 amdagp;Pilote de filtre du bu s AMD AGP; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \amdagp.s y s []

S 4 cbidf;cbidf; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \cbidf2 k .s y s []

S 4 IntelIde;IntelIde; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \intelide.s y s []

S 4 s i s agp;Filtre de bu s AGP S I S ; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \s i s agp.s y s []

S 4 viaagp;Filtre de bu s AGP VIA; C:\WINDOW S \s y s tem32\s y s tem32\DRIVER S \viaagp.s y s []

Li s t of s ervice s

R2 a s wUpd S v;ava s t! iAV S 4 Control S ervice; C:\Program File s \Alwil S oftware\Ava s t4\a s wUpd S v.exe [2008-07-19 16056]

R2 Ati Hot K ey Poller;Ati Hot K ey Poller; C:\WINDOW S \s y s tem32\Ati2evxx.exe [2004-11-30 425984]

R2 ava s t! Antiviru s ;ava s t! Antiviru s ; C:\Program File s \Alwil S oftware\Ava s t4\a s h S erv.exe [2008-07-19 147640]

R2 btwdin s ;Bluetooth S ervice; C:\Program File s \IBM\Bluetooth S oftware\bin\btwdin s .exe [2004-10-01 163840]

R2 EvtEng;Intel® PRO S et/Wirele s s Event Log; C:\Program File s \Intel\Wirele s s \Bin\EvtEng.exe [2006-04-14 114753]

R2 IBM Rapid Re s tore Ultra S ervice;IBM Rapid Re s tore Ultra S ervice; C:\Program File s \IBM\IBM Rapid Re s tore Ultra\rrpc s b.exe [2004-12-16 385024]

R2 IBMPM S VC;Thin k Pad PM S ervice; C:\WINDOW S \s y s tem32\ibmpm s vc.exe [2005-11-11 73782]

R2 Irmon;Moniteur infrarouge; C:\WINDOW S \s y s tem32\s vcho s t.exe [2004-08-05 14336]

R2 MDM;Machine Debug Manager; C:\Program File s \Fichier s commun s \Micro s oft S hared\V S 7DEBUG\MDM.EXE [2003-06-20 322120]

R2 O&O Defrag;O&O Defrag; C:\WINDOW S \s y s tem32\oodag.exe [2005-05-11 225280]

R2 QCON S VC;QCON S VC; C:\WINDOW S \S y s tem32\QCON S VC.EXE [2005-03-18 77824]

R2 Reg S rvc;Intel® PRO S et/Wirele s s Regi s try S ervice; C:\Program File s \Intel\Wirele s s \Bin\Reg S rvc.exe [2006-04-14 217164]

R2 S 24EventMonitor;Intel® PRO S et/Wirele s s S ervice; C:\Program File s \Intel\Wirele s s \Bin\S 24EvMon.exe [2006-04-14 540745]

R2 TPHDEXLG S VC;Thin k Pad HDD AP S Logging S ervice; C:\WINDOW S \S y s tem32\TPHDEXLG.EXE [2005-06-20 77824]

R2 Tp K mp S VC;IBM K CU S ervice; C:\WINDOW S \s y s tem32\Tp K mp S VC.exe [2003-07-11 32768]

R2 UMWdf;Window s U s er Mode Driver Framewor k ; C:\WINDOW S \s y s tem32\wdfmgr.exe [2004-08-10 38912]

S 3 a s pnet_s tate;S ervice d'é tat A S P.NET; C:\WINDOW S \Micro s oft.NET\Framewor k \v1.1.4322\a s pnet_s tate.exe [2004-07-15 32768]

S 3 ava s t! Mail S canner;ava s t! Mail S canner; C:\Program File s \Alwil S oftware\Ava s t4\a s hMai S v.exe [2008-07-19 250040]

S 3 ava s t! Web S canner;ava s t! Web S canner; C:\Program File s \Alwil S oftware\Ava s t4\a s hWeb S v.exe [2008-07-23 348344]

S 3 IDriverT;In s tallDriver Table Manager; C:\Program File s \Fichier s commun s \In s tall S hield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S 3 iPod S ervice;iPod S ervice; C:\Program File s \iPod\bin\iPod S ervice.exe []

S 3 o s e;Office S ource Engine; C:\Program File s \Fichier s commun s \Micro s oft S hared\S ource Engine\O S E.EXE [2003-07-28 89136]

S 3 P s a S rv;IBM P S A Acce s s Driver Control; C:\WINDOW S \s y s tem32\P s a S rv.exe []

S 3 u s nj s vc;S ervice Me s s enger S haring Folder s U S N Journal Reader; C:\Program File s \M S N Me s s enger\u s n s vc.exe [2007-01-19 97136]

S 3 WmcCd s ;Window s Media Connect (WMC); c:\program file s \window s media connect\m s wmccd s .exe [2004-08-11 483328]

S 3 WmcCd s L s ;Aide de Window s Media Connect (WMC); C:\Program File s \Window s Media Connect\m s wmcl s .exe [2004-08-10 28160]

-----------------EOF-----------------

Et non je n'ai pa s branch é de s upport s amovible s , je n'en ai pa s ! En tout ca s pa s de d é fini, j'utili s e ju s te de temp s en temp s le s cl é s U S B d'autre s per s onne s .

Thanos · le 30 août 2008

Salut

Ok le fichier fix .reg a fait son petit nettoyage La manipulation visait à nettoyer les restes d'une infection par supports amovibles.

Je rebondis sur ceci qui est très important >>

Et non je n'ai pas branché de supports amovibles, je n'en ai pas! En tout cas pas de défini, j'utilise juste de temps en temps les clés USB d'autres personnes.

Ok si tu n'as pas de clé usb/ disque dur externe etc... il faut retenir ceci: il y a un certain nombre d'infections qui se propagent grace à ces fameux supports amovibles (clés usb principalement en fait).

Lorsque quelqu'un insère une clé usb (ou que tu empruntes la clé d'un ami) dans ton pc, et si cette clé a été infectée, il suffit de double-cliquer sur l'icône de la clé en question dans l'explorateur Windows pour infecter ton propre pc !!

Il faut donc être très vigileant de ce côté là!! Ce qu'il faut faire ?

-Tu insères la clé en question sur ton pc, mais tu ne double-cliques pas dessus surtout!

-Tu fais un clic droit avec ta souris sur l'icône de la clé.

-Dans le menu qui se déroule, tu peux à présent sélectionner MBAM afin qu'il fasse une analyse du contenu de la clé > Examiner avec MalwareBytes' Anti-Malware

-Après ca seulement, tu peux ouvrir la clé si rien n'a été détecté (ou si l'infection a été éradiquée)

Note: tu pourras conserver MBAM après notre désinfection. Il ne protègera pas ton pc (il faut payer une licence pour cela), mais on peux l'utiliser pour scanner et nettoyer le pc! A mettre à jour avant utilisation.

Voici un très bon article de Gof qui t'en dira plus sur ces infections via support amovible (c'est très clair et bien conçu pour les novices ) >> http://forum.zebulon.fr/infections-par-sup...es-t131959.html

(tu peux au passage vacciner ton pc grace au petit programme VaccinUSB.exe comme indiqué).

**************************

Continuons Il y a une petite infection pas bien méchante sur ton pc que l'on nomme CID (ex LOP).

Cette infection, on la crée nous même sans le savoir lors de l'installation de MessengerPlus! 3. (et de certains programmes du type BitTorrent)

Lorsque tu installes ce programme, il ne faut surtout pas accepter les sponsors > il faut cocher le bouton radio "Je refuse d'apporter mon soutien...." >>

Voilà comment virer l'infection (on vire quelques dossiers restants de Norton au passage!) >>

Sélectionne entièrement l'encadré ci-dessous , puis clique droit et choisis Copier ( ne sélectionne pas le mot "code")

C:\DOCUME~1\SANDRI~1\APPLIC~1\Dumb creative
C:\DOCUME~1\SANDRI~1\APPLIC~1\jump delete hold
C:\Program Files\Adverts
C:\Program Files\jump delete hold
C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec
C:\Program Files\Norton AntiVirus
C:\Program Files\Fichiers communs\Symantec Shared

Relance Lop S&D

Choisis cette fois ci l'Option 4 ( LopScript )

Une page blanche va s'ouvrir , clique droit dessus et choisis Coller

Ferme la page , il te sera demandé de l'enregistrer , clique sur [Enregistrer]

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

Note: Une info importante keilanette >>

Dans le rapport LOP S&D, on voit ceci ....=>

--------------------\\ Cracks & Keygens ..

Ce qui suit n'est pas pour faire la morale, mais vise plutôt à te faire prendre conscience des risques liés à l'utilisation de ce type de programmes.

Fais gaffe avec l'utilisation des carcks et des logiciels P2P!! ce sont les principaux vecteurs d'infection! Un crack est une infection déguisée les 3/4 du temps...

Pour t'en convaincre, lis ces deux topics très clairs:

-le premier est de Malekal et concerne les cracks => http://forum.malekal.com/viewtopic.php?f=33&t=893

-le second de Tesgaz concerne le P2P en général => http://forum.zebulon.fr/prevention-le-p2p-...ces-t85544.html

Les infections véhiculées pas le p2p sont une menace réelle!! par exemple le vers Worm.Win32_Sumom-A qui est un ver de messagerie instantanée et de réseaux peer-to-peer,se met dans le dossier incoming/Shared afin d'être expédié à toutes les personnes qui partagent tes téléchargements...=> http://www.virustraq.com/info_virus/10134/details/

Maintenant que tu sais, c'est à toi de voir... est ce que ca vaut le coup de risquer une grosse infection(et mettre tes données en peril)? La plupart des logiciels payants ont un équivalent en freeware.

Voilà j'arrête mon laïus

En attente du rapport

Modifié le 30 août 2008 par Thanos

keilanette · le 30 août 2008

Thanos tu es mon sauveur, tu me désinfectes tout mon pc dis donc!!!

Pour les clés usb, c'est bien noté, je ferai attention!

Par contre pour l'histoire du Cracks & Keygens, je ne sais même pas ce que c'est, donc je ne sais même pas comment c'est apparu sur mon pc...

Alors le rapport lopR.txt :

--------------------\\ Lop S&D 4.2.3-6 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2

X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 1.73GHz )

BIOS : Phoenix FirstBIOS Notebook Pro Version 2.0 for IBM ThinkPad

USER : sandrine brouhard ( Administrator )

BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1229 [VPS 080830-0] 4.8.1229 (Not Activated)

"C:\Lop SD" ( MAJ : 27-08-2008|22:40 )

Option : [4] ( 30/08/2008|22:33 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Lop Script

C:\DOCUME~1\SANDRI~1\APPLIC~1\Dumb creative

C:\DOCUME~1\SANDRI~1\APPLIC~1\jump delete hold

C:\Program Files\Adverts

C:\Program Files\jump delete hold

C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller

C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

C:\Program Files\Norton AntiVirus

C:\Program Files\Fichiers communs\Symantec Shared

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\SANDRI~1\APPLIC~1\Dumb creative

Supprime! - C:\DOCUME~1\SANDRI~1\APPLIC~1\jump delete hold

Supprime! - C:\Program Files\Adverts

Supprime! - C:\Program Files\jump delete hold

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller

Supprime! - C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

Supprime! - C:\Program Files\Norton AntiVirus

Supprime! - C:\Program Files\Fichiers communs\Symantec Shared

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[17/09/2004|16:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini

[07/09/2005|01:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities

[17/09/2004|16:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/09/2005|01:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic

[07/09/2005|01:55] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

[12/06/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer

[17/09/2004|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini

[07/09/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ibm

[12/04/2006|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IdleErrorStyleShim

[20/02/2006|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installer.log

[14/09/2006|15:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel

[30/08/2008|00:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes

[22/10/2005|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[10/05/2008|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[22/10/2005|15:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real

[17/09/2004|17:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI

[22/10/2005|14:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[30/07/2007|17:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[10/10/2005|10:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[07/04/2007|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[17/04/2006|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[22/02/2007|03:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAMAHA

[17/09/2004|16:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini

[07/09/2005|01:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities

[17/09/2004|16:56] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[07/09/2005|01:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic

[07/09/2005|01:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/09/2006|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/09/2006|17:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[28/05/2008|18:18] C:\DOCUME~1\SANDRI~1\APPLIC~1\Adobe

[12/06/2007|10:01] C:\DOCUME~1\SANDRI~1\APPLIC~1\AdobeUM

[22/10/2005|15:07] C:\DOCUME~1\SANDRI~1\APPLIC~1\Apple Computer

[13/04/2007|23:10] C:\DOCUME~1\SANDRI~1\APPLIC~1\Command & Conquer 3 Tiberium Wars

[17/09/2004|16:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\desktop.ini

[11/07/2008|22:35] C:\DOCUME~1\SANDRI~1\APPLIC~1\dvdcss

[13/05/2008|22:33] C:\DOCUME~1\SANDRI~1\APPLIC~1\Flickr

[20/02/2006|00:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\FotoWire

[14/04/2007|17:19] C:\DOCUME~1\SANDRI~1\APPLIC~1\Hamachi

[05/09/2006|23:41] C:\DOCUME~1\SANDRI~1\APPLIC~1\Help

[14/02/2006|01:50] C:\DOCUME~1\SANDRI~1\APPLIC~1\IBM

[17/09/2004|17:13] C:\DOCUME~1\SANDRI~1\APPLIC~1\Identities

[14/09/2006|15:22] C:\DOCUME~1\SANDRI~1\APPLIC~1\Intel

[30/10/2006|20:57] C:\DOCUME~1\SANDRI~1\APPLIC~1\InterTrust

[07/10/2005|22:25] C:\DOCUME~1\SANDRI~1\APPLIC~1\InterVideo

[14/06/2007|17:58] C:\DOCUME~1\SANDRI~1\APPLIC~1\L84577898.5v1

[18/06/2006|18:36] C:\DOCUME~1\SANDRI~1\APPLIC~1\Macromedia

[30/08/2008|00:10] C:\DOCUME~1\SANDRI~1\APPLIC~1\Malwarebytes

[22/10/2005|15:05] C:\DOCUME~1\SANDRI~1\APPLIC~1\Media Player Classic

[12/06/2007|09:49] C:\DOCUME~1\SANDRI~1\APPLIC~1\Microsoft

[22/08/2008|13:50] C:\DOCUME~1\SANDRI~1\APPLIC~1\Mozilla

[15/05/2008|23:04] C:\DOCUME~1\SANDRI~1\APPLIC~1\My Battle for Middle-earth Files

[30/08/2008|12:23] C:\DOCUME~1\SANDRI~1\APPLIC~1\OpenOffice.org2

[07/05/2006|12:51] C:\DOCUME~1\SANDRI~1\APPLIC~1\Real

[13/04/2007|20:33] C:\DOCUME~1\SANDRI~1\APPLIC~1\SecuROM

[09/05/2007|00:06] C:\DOCUME~1\SANDRI~1\APPLIC~1\Skype

[05/10/2005|22:41] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sonic

[04/07/2006|20:56] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sphinx

[20/04/2006|12:45] C:\DOCUME~1\SANDRI~1\APPLIC~1\Sun

[12/03/2007|17:30] C:\DOCUME~1\SANDRI~1\APPLIC~1\U3

[12/05/2008|01:54] C:\DOCUME~1\SANDRI~1\APPLIC~1\vlc

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/08/2008 21:42][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job

[30/08/2008 12:22][--a------] C:\WINDOWS\tasks\PMTask.job

[30/08/2008 12:22][--ah-----] C:\WINDOWS\tasks\SA.DAT

[05/08/2004 05:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ MsgPlus SPONSOR INSTALLED !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]

"SponsorInstalled"=dword:00000000

--------------------\\ Listing des dossiers dans C:\Program Files

[12/06/2007|09:58] C:\Program Files\Adobe

[10/05/2008|00:42] C:\Program Files\adslTV

[10/10/2005|10:08] C:\Program Files\Alfa & Ariss

[09/10/2005|16:40] C:\Program Files\Alwil Software

[07/09/2005|01:45] C:\Program Files\ATI Technologies

[30/08/2008|16:03] C:\Program Files\bwin

[15/04/2006|19:14] C:\Program Files\CCleaner

[17/09/2004|17:02] C:\Program Files\ComPlus Applications

[07/09/2005|01:44] C:\Program Files\CONEXANT

[30/07/2007|16:49] C:\Program Files\DAEMON Tools

[07/09/2005|01:44] C:\Program Files\Digital Line Detect

[07/05/2006|16:46] C:\Program Files\EA GAMES

[03/07/2006|20:15] C:\Program Files\Easy CD-DA Extractor 9

[13/04/2007|20:25] C:\Program Files\Electronic Arts

[10/05/2008|00:35] C:\Program Files\eMule

[12/11/2005|20:09] C:\Program Files\ffdshow

[30/08/2008|22:34] C:\Program Files\Fichiers communs

[21/10/2005|22:54] C:\Program Files\GflSDK

[10/05/2008|00:41] C:\Program Files\GrabIt

[13/04/2007|23:01] C:\Program Files\Hamachi

[27/11/2006|16:44] C:\Program Files\HarmoTab

[07/07/2007|22:28] C:\Program Files\Hasbro Interactive

[07/09/2005|01:39] C:\Program Files\IBM

[07/09/2005|01:53] C:\Program Files\IBM DLA

[07/09/2005|01:52] C:\Program Files\IBM RecordNow!

[22/02/2007|03:44] C:\Program Files\InstallShield Installation Information

[07/09/2005|01:41] C:\Program Files\Intel

[28/05/2006|20:16] C:\Program Files\InterActual

[21/08/2008|02:16] C:\Program Files\Internet Explorer

[07/09/2005|01:53] C:\Program Files\InterVideo

[30/08/2008|02:12] C:\Program Files\Java

[02/02/2006|19:01] C:\Program Files\Lgc

[20/02/2006|01:12] C:\Program Files\Logitech

[30/08/2008|00:10] C:\Program Files\Malwarebytes' Anti-Malware

[22/10/2005|15:07] C:\Program Files\Media Player Classic

[21/08/2008|02:21] C:\Program Files\Messenger

[01/10/2006|22:07] C:\Program Files\MessengerPlus! 3

[09/05/2007|03:10] C:\Program Files\Microsoft CAPICOM 2.1.0.2

[17/09/2004|17:06] C:\Program Files\microsoft frontpage

[30/05/2008|17:36] C:\Program Files\Microsoft Office

[02/01/2006|21:51] C:\Program Files\Microsoft Visual Studio

[09/04/2007|01:59] C:\Program Files\Microsoft Works

[02/01/2006|21:45] C:\Program Files\Microsoft.NET

[17/09/2004|17:03] C:\Program Files\Movie Maker

[30/08/2008|18:05] C:\Program Files\Mozilla Firefox

[30/05/2008|17:36] C:\Program Files\MSECache

[10/10/2005|20:35] C:\Program Files\MSN

[17/09/2004|17:02] C:\Program Files\MSN Gaming Zone

[07/04/2007|21:29] C:\Program Files\MSN Messenger

[20/11/2006|04:02] C:\Program Files\MSXML 4.0

[10/05/2008|00:43] C:\Program Files\MtStudio

[17/09/2004|17:03] C:\Program Files\NetMeeting

[07/09/2005|01:44] C:\Program Files\NetWaiting

[13/04/2007|16:58] C:\Program Files\OO Software

[12/06/2007|11:10] C:\Program Files\OpenOffice.org 2.2

[14/06/2007|03:03] C:\Program Files\Outlook Express

[07/09/2005|02:02] C:\Program Files\PC-Doctor for Windows

[04/12/2007|18:42] C:\Program Files\PCFriendly

[18/10/2007|21:51] C:\Program Files\QuickPar

[28/12/2006|00:38] C:\Program Files\QuickTime

[22/10/2005|15:07] C:\Program Files\QuickTime Alternative

[22/10/2005|15:07] C:\Program Files\Real Alternative

[17/09/2004|17:04] C:\Program Files\Services en ligne

[22/10/2005|14:30] C:\Program Files\Skype

[07/09/2005|01:52] C:\Program Files\Sonic

[26/07/2008|16:41] C:\Program Files\Spybot - Search & Destroy

[07/09/2005|01:30] C:\Program Files\Synaptics

[07/09/2005|01:38] C:\Program Files\ThinkPad

[30/08/2008|12:54] C:\Program Files\trend micro

[17/09/2004|17:13] C:\Program Files\Uninstall Information

[09/05/2006|18:10] C:\Program Files\VideoLAN

[12/04/2007|19:37] C:\Program Files\Warcraft III Demo

[26/11/2005|17:53] C:\Program Files\Winamp

[25/12/2007|03:54] C:\Program Files\Windows Live Favorites

[29/08/2008|15:45] C:\Program Files\Windows Live Safety Center

[25/12/2007|03:54] C:\Program Files\Windows Live Toolbar

[07/09/2005|01:49] C:\Program Files\Windows Media Connect

[26/10/2006|18:47] C:\Program Files\Windows Media Player

[17/09/2004|17:01] C:\Program Files\Windows NT

[17/09/2004|17:04] C:\Program Files\WindowsUpdate

[09/10/2005|16:45] C:\Program Files\WinRAR

[17/09/2004|17:06] C:\Program Files\xerox

[27/04/2006|14:34] C:\Program Files\xp-AntiSpy

[15/04/2006|19:14] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/10/2006|20:57] C:\Program Files\Fichiers communs\Adobe

[02/01/2006|21:52] C:\Program Files\Fichiers communs\DESIGNER

[20/02/2006|00:57] C:\Program Files\Fichiers communs\FotoWire

[20/02/2006|00:52] C:\Program Files\Fichiers communs\InstallShield

[24/03/2006|21:40] C:\Program Files\Fichiers communs\Java

[20/02/2006|00:55] C:\Program Files\Fichiers communs\Logitech

[17/06/2008|02:26] C:\Program Files\Fichiers communs\Microsoft Shared

[17/09/2004|17:03] C:\Program Files\Fichiers communs\MSSoap

[15/05/2008|21:02] C:\Program Files\Fichiers communs\ODBC

[17/09/2004|17:03] C:\Program Files\Fichiers communs\Services

[07/09/2005|01:53] C:\Program Files\Fichiers communs\Sonic

[17/09/2004|16:57] C:\Program Files\Fichiers communs\SpeechEngines

[07/09/2005|01:52] C:\Program Files\Fichiers communs\SureThing Shared

[14/06/2007|03:03] C:\Program Files\Fichiers communs\System

--------------------\\ Process

( 66 Processus )

MsgPlus.exe ~ [PID:664]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-30 22:35:06

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 96

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\SANDRI~1\Bureau\musique\metal\faith no more\angel dust\Faith No More-Angel Dust-Crack Hitler .mp3

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)\keygen.exe

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)\O&O Defrag 8 ProfessionalEn 8.0.1398.exe

[F:1338][D:117]-> C:\DOCUME~1\SANDRI~1\LOCALS~1\Temp

[F:35][D:0]-> C:\DOCUME~1\SANDRI~1\Cookies

[F:638][D:5]-> C:\DOCUME~1\SANDRI~1\LOCALS~1\TEMPOR~1\content.IE5

[F:2][D:0]-> C:\Recycled

--------------------\\ Fin du rapport a 22:36:30

Thanos · le 30 août 2008

Par contre pour l'histoire du Cracks & Keygens, je ne sais même pas ce que c'est, donc je ne sais même pas comment c'est apparu sur mon pc...

En fait il s'agit du programme O&O Defrag qui est installé ur ton pc et qui sert à défragmenter des disques durs >>

C:\DOCUME~1\ALLUSE~1\Documents\O&O Defrag Professional Edition v8.0.1398 Incl Keygen (Osloskop Net)

ce programme est en version d'évaluation 30 jours puis il devient payant. LE "keygen" en question permet de contourner cette limitation de durée manifestement...le problème, c'est qu'utiliser ce type de programme (cracks/keygens/serials) c'est jouer avec le feu!

Si ce n'est pas toi qui a installé ce crack, parle en autour de toi

Très bien, les dossiers en question ont été éliminés

Je vais te laisser quelques conseils pour sécuriser ton pc pour terminer.

Il y a pas mal d'application inutiles qui se lancent au démarrage: veux tu qu'on fasse le ménage? ca libèrera des ressources et ton pc n'en sera que plus rapide!

keilanette · le 31 août 2008

Ah bah écoute, je veux bien, merci beaucoup c'est hyper sympa!!!

Thanos · le 1 septembre 2008

salut

Ok, allons y pour le nettoyage d'automne >>

On va fixer quelques lignes sur ce rapport hijackthis, la conséquence c'est que certaines applications ne se lanceront plus au démarrage de Windows:ce sont évidemment des applications inutiles au bon fonctionnement du pc et que tu pourras lancer manuellement si tu en a besoin(ca liberera des ressources!)

Si les changement ne te conviennent pas, tu peux revenir en arrière!

Démarre Hijackthis, clique sur "Do a system scan only", et coche les lignes suivantes :

O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe

O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [uC_Start] C:\Program Files\IBM\Updater\\ucstartup.exe

O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r

O4 - HKLM\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\\ibmmessages.exe

O4 - HKLM\..\Run: [iBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe >> installé par Logitech QuickCam, ne pas cocher si tu utilises le programme pour prendre des photos et des captures vidéos

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: Digital Line Detect.lnk = ?

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

-Ferme tous les programmes et clique sur "Fix Checked"

********************

Le pc est protégé par AVast...Je te conseille de lire ce comparatif très intéressant de Malekal Morte afin de te faire une idée quant à l'efficacité de cet antivirus > http://forum.malekal.com/ftopic3528.php

C'est une étude indépendante et sérieuse! Je ne saurais que te conseiller de désinstaller avast et d'installer Antivir afin de protéger ton pc au mieux. Il faut aussi installer un parefeu car celui de Windows n'est pas efficace! >

Voila quelques liens pour des pare-feux gratuits

Zone Alarm (2 versions )

Lien de téléchargement de la version FREE : http://dl2.zonelabs.com/bin/free/3301_fr/z..._737_000_fr.exe

Lien de téléchargement de la version PRO : http://www.zonelabs.com/store/content/cata...lid=dbtopnav_za

La version pro est payante après une période d'essai.

Tuto de Tesgaz pour la version pro : http://speedweb1.free.fr/frames2.php?page=tuto1

Tuto de Odsen pour la version free : http://benoit.aun.free.fr/securite-facile-php/zonealarm.php

Kerio

Lien de téléchargement : http://www.sunbelt-software.com/evaluation/440/kerio.exe

Tuto de Malekal_morte : http://www.malekal.com/kerio_firewall.html

Jetico

Lien de téléchargement éditeur : http://www.jetico.com/

Lien de téléchargement sur Zebulon (en fr) : http://telechargement.zebulon.fr/license-1-225.html

Tuto de Odsen (lien site) : http://benoit.aun.free.fr/securite-facile-php/jetico.php

Tuto de Odsen (lien zeb) : http://forum.zebulon.fr/index.php?showtopic=93489

Outpost firewall free

Lien de téléchargement éditeur : http://www.agnitum.com/products/outpostfree/download.php

Tuto de Odsen (lien site) : http://securite-facile.ovh.org/outpost.php

La liste n'est pas exhaustive, il en existe d'autres gratuits, et d'autres avec plus de fonctions payants. Télécharge l'exécutable d'installation du pare-feu que tu auras choisi. Déconnecte toi, débranche physiquement ta connexion, et lance l'installation de ton pare-feu. Puis reconnecte toi et suis les instructions supplémentaires s'il y en a. Aide toi des tutos.

Je te conseille Zone Alarme ou Kério en version gratuite pour commencer, tu pourras en changer par la suite pour un pare-feu plus élaboré quand tu auras le temps de t'y plonger. Un pare-feu bien configuré, est garant de la sécurité du pc et de ta tranquilité .

Si tu décides d'installer Antivir procède ainsi >

-Télécharge Antivir sur le bureau, mais ne le lance pas encore!

-Télécharge aussi Zone Alarm (par ex) et met le de côté.

-Désinstalle Avast et redémarre le pc.

-Installe Antivir et Zone Alarm.

-Met Antivir à jour et configure le en suivant les indications du Tutoriel de tesgaz

Le pc est protégé à présent.Ceci dit, toute protection est inutile si tu ne surfes pas prudemment!

Si tu as besoin de faire un scan du pc avec Antivir, voilà ce qu'il faudra faire >>

Double-clique sur son icône près de l'horloge, cela ouvre l'interface principale, puis clique sur "Scan system now" à droite de "Last complete system scan".

/!\ Cela peut être long.

Tu peux sauvegarder le rapport en fin de parcours (bouton "Report").

Si Antivir détecte des fichiers infectés, mets les en quarantaine (choisis "Move to quarantine" dans la liste des actions.

Tu peux automatiser ce type d'action en cochant une case), comme ci dessous :

Cela permet de ne pas rester à la surveiller.

********************

On se débarrasse des outils téléchargés à présent.

Tu peux éliminer >>

Le fichier RSIT.exe sur ton Bureau ainsi que le dossier C:\rsit.

Le fichier Lop S&D.exe sur ton Bureau ainsi que le dossier C:\Lop SD.

Le fichier Norton_Removal_Tool sur ton Bureau.

Tu peux conserver >>

-JavaRa qui te permettra de rechercher/installer la dernière mise à jour de la console Java de Sun (il te suffira de refaire la manipulation décrite quelques posts plus haut): il est important de bien mettre la console Java de Sun à jour car elle est la cible d'attaques par les malwares. Les mises à jour visent en partie à combler des failles de sécurité.

D'une manière générale, il est important d'utiliser la dernière version des programmes installés sur le pc.

-MBAM ne protègera pas ton pc (il faut payer une licence pour cela), mais on peux l'utiliser pour scanner et nettoyer le pc! Il est donc un outil de désinfection intéressant. A mettre à jour avant utilisation.

Pour terminer le nettoyage (ca prend 5 secondes!), deux manipulations à faire >>

* Ce petit programme que tu peux conserver et qui permet d'éliminer les fichiers inutiles (cookies etc...) >>

Télécharge ATF Cleaner by Atribune sur ton bureau.

Double-clique sur ATF Cleaner afin de lancer le programme.

Sous l'onglet Main, choisis : Select All
Clique sur le bouton Empty Selected

Si tu utilises le navigateur Firefox :
Clique Firefox au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :
Clique Opera au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Clique Exit, du menu prinicipal, afin de fermer le programme.

* Désactive puis réactive la restauration système comme ceci => aide visuelle

Clique sur Démarrer.
Clique avec le bouton droit sur l'icône Poste de travail, puis cliquez sur Propriétés.

Clique sur l'onglet «Restauration du système».

Sélectionne «Désactiver la Restauration du système» ou «Désactiver la Restauration du système sur tous les lecteurs»

Clique sur "Appliquer".

Comme le dit le message, ceci supprimera tous les points de restauration existants. Pour faire cela, clique sur Oui.

Clique sur OK.Redémarre ton PC. Fais l'opération inverse, et réactive la restauration:un nouveau point sera automatiquement créé.

********************

Des conseils pour sécuriser ton pc au mieux et comprendre les dangers liés à l'utilisation de l'internet dans les deux lien ci-dessous. Je t'invite à prendre le temps de bien lire tout cela, de t'informer, d'essayer... Pour trouver quels sont les softs qui te conviennent le mieux.

Malekal_Morte : http://www.malekal.com/

Ipl_001 : http://IPL001.free.fr/IT/IT-AM0.html

Windows Update parfaitement à jour (catégorie critique, Services Pack et Services Release )
- pare-feu bien paramétré- antivirus bien paramétré et mis à jour régulièrement(quotidiennement s'il le faut) avec un scan complet régulier.

- IMPORTANT :une attitude prudente vis à vis de la navigation (pas de sites douteux:cracks, warez, etc) et vis à vis de la messagerie (fichiers joints aux messages doivent être scanné avant d'être ouvert ainsi que les fichiers téléchargés dont la provenance n'est pas sûre!!)

- une attitude vigilante (être l'affût de fonctionnements inhabituels de ton système)

- nettoyage hebdomadaire du système (suppression des fichiers inutiles avec ATF cleaner, nettoyage de la base de registre avec jv16, scandisk, defragmentation du disque dur régulière)

- scan hebdomadaire antispyware

***

Pense à changer le titre et y rajouter " Résolu" stp.

Sous ton premier message, clique sur le bouton "Editer" puis "Edition complête".

Là, tu aura la possibilité d'éditer ton titre et d'y ajouter [résolu]

bon surf @ toi

A bientot sur les forums de sans malwares!

Connexion

Pas encore inscrit ?

Hotmail infecté?

Messages recommandés

keilanette

Thanos

keilanette

Thanos

keilanette

Thanos

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer