Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[RESOLU] MAchine avec plein de Symptômes anormaux - sais même pas fair

Wisewise3

Par Wisewise3
dans Analyses et éradication malwares

 Partager

Messages recommandés

Le sioux Full Patch Member

Le sioux

Posté(e)
Posté(e)

Bonjour Wisewise3

 

Pour

Pour la connexion Wifi, oui elle refonctionne depuis le changement de valeur dans la base de registre mais la touche qui doit allumer ou éteindre le Wifi elle ne fonctionne plus. Enfin, le principale c'est que le wifi refonctionne.

Yes, c'est le principal, tu pourras néanmoins posée la question ultérieurement dans le forum hardware ou Windows, voir si l'on peut t'aider plus efficacement que moi pour ce soucis.

 

Plus de rapport nécessaire?

Non, pour moi tout es OK.

 

Si de ton coté, cela l'est aussi, on conclut avec des conseils de sécurité. Dis moi :P

 

@ suivre.

Wisewise3 Mega Power Member

Wisewise3

Posté(e)
  • Auteur
Posté(e)

Re Le Sioux

 

Ok pour la partie Hardware mais je pense que je vais laisser comme çà.

 

C'est parti pour des conseils de sécurités alors.

Peut être essayer de résoudre dans un premier temps le souci de mise à jour automatique d'antivir afin d'aviter une mise à jour manuel qui pourrait être oubliée...

 

Je note résolu dans le sujet?

 

Bien à toi,

WiseWise3

Le sioux Full Patch Member

Le sioux

Posté(e)
Posté(e) (modifié)

Re

 

Ne note pas résolu de suite, je te dirais quand le faire :P

 

Pour Antivir, essaye cela :

 

Ouvre le Bloc-Notes et fais un copier coller de ce qui est en citation ci-dessous (copie tout d'un trait) :

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Shell Folders]

"Common AppData"="C:\\ProgramData"

/!\ Important : Windows Registry Editor Version 5.00 doit être sur la toute 1ere ligne sinon le fix ne fonctionnera pas. /!\

 

Puis "Fichier"/"Enregistrer sous" :

dans : sur le Bureau

Nom du fichier : Update.reg

Type de fichier : "Tous les fichiers"

Clique sur "Enregistrer"

 

/!\ Lors de l'enregistrement, il faut choisir pour le champ "Type": "Tous les fichiers"./!\

  • Clique droit sur le Update.reg sur ton Bureau et "Exécuter en tant qu'administrateur"
  • Tu dois obligatoirement avoir un message "Voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
  • Si c'est bien le cas, clique sur "Oui"

Fais redémarrer ton PC et dis moi si Antivir veut bien se mettre à jour à présent.

 

@ suivre.

Modifié par Le sioux
Le sioux Full Patch Member

Le sioux

Posté(e)
Posté(e) (modifié)

Re

 

Quand tu fais un clic droit sur Antivir, puis Start update est ce que cela fonctionne ?

 

* Fait apparaître la touche Exécuter avec Vista :

 

Clique droit sur ton bouton Démarrer puis Propriétés / onglet Menu Démarrer / Personnaliser / onglet Avancés coche la touche Exécuter puis clique sur OK puis sur Appliquer et enfin de nouveau sur OK

http://www.generation-nt.com/windows-vista...ce-41574-1.html

 

* Vérification du service Antivir PersonnalEditon Classique Sheduler

  • Menu Démarrer / Exécuter tapes services.msc
  • Navigue jusqu'au Service: Antivir PersonnalEditon Classique Sheduler
  • Double-clique sur la ligne du service en question Antivir PersonnalEditon Classique Sheduler
    Vérifie à Type de Démarrage que ce soit bien sur Automatique sinon, mets le en Automatique puis valide par Appliquer et OK et puis clique sur Démarrer.
  • Ferme la fenêtre des services.

Ré essaie de mettre à jour Antivir et dis moi ce qu'il en est.

 

@ suivre.

Modifié par Le sioux
Wisewise3 Mega Power Member

Wisewise3

Posté(e)
  • Auteur
Posté(e)

Re,

 

plus de deux heures que je cherche... JE trouve pas pourquoi il veut pas se mettre à jour.

Un reste du virus ? Possible?

 

je colle le rapport d'antivir pour la mise à jour.

 

09.10.2008 22:40:54 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\

09.10.2008 22:40:54 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\

09.10.2008 22:40:54 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_48ee6c55\

09.10.2008 22:40:54 - Using System's global Proxy settings

09.10.2008 22:40:54 - Launching GUI... display mode: 0

09.10.2008 22:40:54 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll

09.10.2008 22:40:54 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll

09.10.2008 22:40:54 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\

09.10.2008 22:40:54 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\

09.10.2008 22:40:54 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_48ee6c55\

09.10.2008 22:40:54 - Using System's global Proxy settings

09.10.2008 22:40:54 - Launching GUI... display mode: 0

09.10.2008 22:40:54 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll

09.10.2008 22:40:54 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll

09.10.2008 22:40:54 - Avira AntiVir Personal - Free Antivirus

09.10.2008 22:40:55 - Connection failed while downloading via the system proxy the file http://dl5.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:55 - Switching to next update server

09.10.2008 22:40:55 - Connection failed while downloading via the system proxy the file http://dl9.freeav.net/upd/idx/master.idx.

09.10.2008 22:40:55 - Switching to next update server

09.10.2008 22:40:56 - Connection failed while downloading via the system proxy the file http://dl10.freeav.net/upd/idx/master.idx.

09.10.2008 22:40:56 - Switching to next update server

09.10.2008 22:40:56 - Connection failed while downloading via the system proxy the file http://dl4.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:56 - Switching to next update server

09.10.2008 22:40:57 - Connection failed while downloading via the system proxy the file http://dl3.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:57 - Switching to next update server

09.10.2008 22:40:57 - Connection failed while downloading via the system proxy the file http://dl6.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:57 - Switching to next update server

09.10.2008 22:40:58 - Connection failed while downloading via the system proxy the file http://dl8.freeav.net/upd/idx/master.idx.

09.10.2008 22:40:58 - Switching to next update server

09.10.2008 22:40:58 - Connection failed while downloading via the system proxy the file http://dl2.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:58 - Switching to next update server

09.10.2008 22:40:59 - Connection failed while downloading via the system proxy the file http://dl7.avgate.net/upd/idx/master.idx.

09.10.2008 22:40:59 - Switching to next update server

09.10.2008 22:41:05 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |UpdateInProgress

09.10.2008 22:41:05 - Critical error: Connection failed while downloading via the system proxy the file http://dl1.avgate.net/upd/idx/master.idx.

Wisewise3 Mega Power Member

Wisewise3

Posté(e)
  • Auteur
Posté(e) (modifié)

Bonjour,

 

j'ai désinstallé Antivir et installé Avast pour voir si mise à jour se faisait.... et bien non, impossible aussi. Il doit encore y avoir une trace du virus alors.

 

Ou alors, quand j'essaye dde remettre la gestion des compte utilisateur il ne me recoche jamais la case m^me après un redémarrage.

 

Je n'avais modifier qu'une valeur dans la base e registre pour ravoir la connexion internet, il y a peut etre autre chose qui a été modifé qui empeche la mise à jour des antivirus non?

 

WiseWise3

 

Faut il que je remette un rapport de quelque chose? Le Sioux Help!!!!

Modifié par Wisewise3
Le sioux Full Patch Member

Le sioux

Posté(e)
Posté(e) (modifié)

Bonjour Wisewise3

 

Excuse moi, je n'étais pas présent .

 

Étrange ce probleme de mise à jour, on va voir si cela ne serait pas du à un piratage du fichier Hosts :

 

Télécharge Runscanner sur ton Bureau.

  • Extrais son contenu sur ton Bureau(Clic droit sur le fichier .zip >> "Extraire tout...")
  • Clique droit sur Runscanner et "Exécuter en tant qu'administrateur"
  • Laisse coché Expert Mode et clique sur OK
  • Efface ce qui s'y trouve en appuyant sur Delete.
  • Clique sur ExtraStuff puis sur Host file editor
  • Clique sur Reset to default et confirme par Yes
  • Ferme Runscanner.
  • Ré-essaie de faire les mises à jour de ton antivirus et dis moi ce que cela donne.

@ suivre

Modifié par Le sioux
Wisewise3 Mega Power Member

Wisewise3

Posté(e)
  • Auteur
Posté(e) (modifié)

Re Le Sioux,

 

content de te lire à nouveau :P

 

Je ne comprends pas par :

 

Efface ce qui s'y trouve en appuyant sur Delete...

 

Il a plein de lignes.

 

J'ai fait reset du host mais çà ne fait toujours pas les mises à jour.

 

Je colle le rapport de celui ci ainsi que le journal de avast par exemple en espérant que cela te dise quelque chose...

 

Ainsi qu'un new rapport hijackthis... en dernier

 

Runscanner logfile http://www.runscanner.net

 

* = signed file

- = file not found

 

General info

------------

Computer name : PC-DE-MATTHIEU

Creation time : 2008-10-11 13:39:57

Hosts <> 127.0.0.1 : 0

Hosts file location : %SystemRoot%\System32\drivers\etc

IE version : 7.0.6001.18000

OS : Windows Vista Home Basic

OS Build : 6001

OS SP : Service Pack 1

RunScanner Version : 1.7.0.0

User Language : Français (France)

User rights : Administrator

Windows folder : C:\Windows

 

Running processes

-----------------

* C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)

* C:\Windows\system32\wininit.exe (Microsoft Corporation)

* C:\Windows\system32\winlogon.exe (Microsoft Corporation)

* C:\Windows\System32\spoolsv.exe (Microsoft Corporation)

* C:\Windows\system32\services.exe (Microsoft Corporation)

* C:\Windows\system32\Ati2evxx.exe (ATI Technologies Inc.)

* C:\Windows\system32\Ati2evxx.exe (ATI Technologies Inc.)

* C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)

* C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)

* C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)

* C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)

* C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)

* C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe (Logitech Inc.)

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE (ATI Technologies Inc.)

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)

* C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

* C:\Windows\system32\conime.exe (Microsoft Corporation)

* C:\Windows\system32\UI0Detect.exe (Microsoft Corporation)

* C:\Windows\Explorer.EXE (Microsoft Corporation)

* C:\Windows\system32\Dwm.exe (Microsoft Corporation)

* C:\Windows\system32\SearchIndexer.exe (Microsoft Corporation)

* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

* C:\Windows\system32\audiodg.exe (Microsoft Corporation)

* C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)

* C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)

* C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)

* C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)

* C:\Windows\system32\SearchFilterHost.exe (Microsoft Corporation)

* C:\Windows\system32\SearchProtocolHost.exe (Microsoft Corporation)

* C:\Windows\system32\taskeng.exe (Microsoft Corporation)

* C:\Windows\system32\taskeng.exe (Microsoft Corporation)

* C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe (Microsoft Corporation)

* C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)

* C:\Windows\system32\lsass.exe (Microsoft Corporation)

* C:\Windows\system32\csrss.exe (Microsoft Corporation)

* C:\Windows\system32\csrss.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\System32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\system32\svchost.exe (Microsoft Corporation)

* C:\Windows\System32\svchost.exe (Microsoft Corporation)

* C:\Windows\System32\svchost.exe (Microsoft Corporation)

* C:\Program Files\Logitech\QuickCam\Quickcam.exe

* C:\Users\matthieu\Desktop\runscanner\RunScanner.exe (Runscanner.net)

* C:\Windows\system32\SLsvc.exe (Microsoft Corporation)

* C:\Windows\system32\lsm.exe (Microsoft Corporation)

* C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (Microsoft Corporation)

* C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)

* C:\Windows\system32\wbem\unsecapp.exe (Microsoft Corporation)

* C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)

* C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)

* C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe (Microsoft Corporation)

* c:\windows\System32\smss.exe (Microsoft Corporation)

* C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe (Microsoft Corporation)

* C:\Windows\system32\wbem\wmiprvse.exe (Microsoft Corporation)

 

Unrated items

-------------

002 * C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (ALWIL Software)

002 * C:\Windows\KHALMNPR.EXE (Logitech Inc.)

002 * C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

002 * C:\Program Files\Logitech\QuickCam\Quickcam.exe

002 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

010 * C:\Program Files\Alwil Software\Avast4\ashServ.exe (avast! Antivirus)

010 * C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (avast! iAVS4 Control Service)

010 * C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (avast! Mail Scanner)

010 * C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (avast! Web Scanner)

010 * C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (LVCOMSer)

010 * C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (LVSrvLauncher)

010 * C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Process Monitor)

010 C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (ServiceLayer)

010 C:\Program Files\Windows Live\installer\WLSetupSvc.exe (Windows Live Setup Service)

011 * C:\Windows\system32\DRIVERS\aswMonFlt.sys (aswMonFlt)

011 * C:\Windows\system32\drivers\aswRdr.sys (aswRdr)

011 * C:\Windows\system32\drivers\aswTdi.sys (avast! Network Shield Support)

011 * C:\Windows\system32\DRIVERS\LVcKap.sys (Logitech AEC Driver)

011 * C:\Windows\system32\DRIVERS\LVPr2Mon.sys (Logitech LVPr2Mon Driver)

011 * C:\Windows\system32\DRIVERS\LVMVDrv.sys (Logitech Machine Vision Engine Loader)

011 * C:\Windows\system32\DRIVERS\lvpopflt.sys (Logitech POP Suppression Filter)

011 * C:\Windows\system32\DRIVERS\L8042Kbd.sys (Logitech SetPoint Keyboard Driver)

011 * C:\Windows\system32\drivers\LVUSBSta.sys (Logitech USB Monitor Filter)

011 * C:\Windows\System32\Drivers\PxHelp20.sys (PxHelp20)

011 * C:\Windows\system32\DRIVERS\lvuvc.sys (QuickCam for Notebooks Deluxe(UVC))

011 * C:\Windows\system32\DRIVERS\ssm_bus.sys (SAMSUNG Mobile USB Device II 1.0 driver (WDM))

011 * C:\Windows\system32\DRIVERS\ssm_mdfl.sys (SAMSUNG Mobile USB Modem II 1.0 Filter)

011 * C:\Windows\system32\DRIVERS\ssm_mdm.sys (SAMSUNG Mobile USB Port II 1.0 Drivers)

011 * C:\Windows\system32\DRIVERS\LMouKE.Sys (SetPoint Mouse Filter Driver)

011 * C:\Windows\system32\DRIVERS\L8042mou.Sys (SetPoint PS/2 Mouse Filter Driver)

011 C:\Windows\system32\drivers\StarOpen.sys (StarOpen)

042 GUID / CLSID not found {08B0E5C0-4FCB-11CF-AAA5-00401C608501}

042 C:\Windows\bdoscandel.exe {85d1f590-48f4-11d9-9669-0800200c9a66}

042 GUID / CLSID not found {219C3416-8CB2-491a-A3C7-D9FCDDC9D600}

052 GUID / CLSID not found {02478D38-C3F9-4efb-9B51-7695ECA05670}

052 GUID / CLSID not found {7E853D72-626A-48EC-A868-BA8D5E23E045}

052 GUID / CLSID not found {AA58ED58-01DD-4d91-8333-CF10577473F7}

052 * C:\Program Files\Tracker Software\PDF-XChange Viewer\pdf-viewer\PDFXCviewIEPlugin.dll (Tracker Software Products Ltd.) {C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F}

061 * C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

061 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll {5E2121EE-0300-11D4-8D3B-444553540000}

061 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

062 GUID / CLSID not found {7D4D6379-F301-4311-BEBA-E26EB0561882}

062 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}

100 Default_Page_URL HKLM : http://fr.yahoo.com

100 Start Page HKCU : http://www.google.be/

100 Start Page HKLM : http://www.msn.com/

104 C:\Windows\DOWNLO~1\oscan8.ocx (SOFTWIN) {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}

104 GUID / CLSID not found {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}

105 &Windows Live Search : res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

105 Add to Windows &Live Favorites : http://favorites.live.com/quickadd.aspx

170 {8c11ee42-221b-11dd-8879-001d60cf77ef} : E:\nideiect.com

170 {ed3f507b-0ecd-11dd-a59a-806e6f6e6963} : D:\SETUP.EXE

173 * C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

173 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

221 * C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

221 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

225 * C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

225 * C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

227 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

229 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll {5E2121EE-0300-11D4-8D3B-444553540000}

231 GUID / CLSID not found NeroDigitalExt.NeroDigitalColumnHandler

231 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) PDF Column Info

 

Missing files

-------------

010 C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

011 c:\windows\system32\drivers\blbdrive.sys

011 C:\Users\matthieu\AppData\Local\Temp\catchme.sys

011 c:\windows\system32\DRIVERS\ipinip.sys

011 c:\windows\system32\DRIVERS\nwlnkflt.sys

011 c:\windows\system32\DRIVERS\nwlnkfwd.sys

032 rdpclip

 

 

 

 

 

Rapport erreur avast:

 

 

11.10.2008 13:35:31 general: Started: 11.10.2008, 13:35:31

11.10.2008 13:35:31 general: Running setup_av_pro-44a (1098)

11.10.2008 13:35:31 system: Operating system: Windows Vista ver 6.0, build 6001, sp 1.0 [service Pack 1]

11.10.2008 13:35:31 system: Memory: 72% load. Phys:217672/784856K free, Page:894388/1842704K free, Virt:2027324/2097024K free

11.10.2008 13:35:31 system: Computer WinName: PC-DE-MATTHIEU

11.10.2008 13:35:31 system: Windows Net User: PC-de-matthieu\matthieu

11.10.2008 13:35:31 general: Cmdline: /downloadpkgs /noreboot /updatevps /silent /progress

11.10.2008 13:35:31 general: DldSrc set to inet

11.10.2008 13:35:31 general: Operation set to INST_OP_UPDATE_GET_PACKAGES

11.10.2008 13:35:31 general: Old version: 44a (1098)

11.10.2008 13:35:31 system: Using temp: C:\Users\matthieu\AppData\Local\Temp\_av_proI.tm~a02936 (58255M free)

11.10.2008 13:35:31 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1

11.10.2008 13:35:31 internet: SYNCER: Agent=Syncer/4.70 (av_pro-1098;p)

11.10.2008 13:35:31 system: Computer DnsName: PC-de-matthieu

11.10.2008 13:35:31 system: Computer Ip Addr: 192.168.1.15

11.10.2008 13:35:31 system: Installed in: C:\Program Files\Alwil Software\Avast4 (58255M free)

11.10.2008 13:35:31 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:31 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:31 package: Part prg_av_pro-44a is installed

11.10.2008 13:35:31 package: Part vps-8010700 is installed

11.10.2008 13:35:31 package: Part news-4b is installed

11.10.2008 13:35:31 package: Part setup_av_pro-44a is installed

11.10.2008 13:35:31 package: Part jrog-28 is installed

11.10.2008 13:35:31 general: Old version: 44a (1098)

11.10.2008 13:35:44 file: SetExistingFilesBitmap: 1045->151->151

11.10.2008 13:35:44 general: GUID: 75036736-a501-478b-8f90-90956aa63d13

11.10.2008 13:35:44 general: Server definition(s) loaded for 'main': 165 (maintenance:0)

11.10.2008 13:35:44 general: SelectCurrent: selected server 'Download979 AVAST Server' from 'main'

11.10.2008 13:35:44 package: GetPackages - set proxy for inet

11.10.2008 13:35:44 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:44 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:45 general: Entered SetupProcessPro::Do( INST_OP_UPDATE_GET_PACKAGES )

11.10.2008 13:35:45 general: Entered SetupProcessWin32Avast::Do( INST_OP_UPDATE_GET_PACKAGES )

11.10.2008 13:35:45 general: Entered SetupProcessWin32::Do( INST_OP_UPDATE_GET_PACKAGES )

11.10.2008 13:35:45 general: Entered SetupProcess::Do( INST_OP_UPDATE_GET_PACKAGES )

11.10.2008 13:35:45 general: progress thread start

11.10.2008 13:35:45 general: progress start - 1

11.10.2008 13:35:45 internet: SYNCER: Agent=Syncer/4.70 (av_pro-1098;p)

11.10.2008 13:35:45 general: progress start - 2

11.10.2008 13:35:45 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:45 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:45 general: InvalidateCurrent: invalidated server 'Download979 AVAST Server' from 'main'

11.10.2008 13:35:45 general: SelectCurrent: selected server 'Download952 AVAST Server' from 'main'

11.10.2008 13:35:45 package: GetPackages - set proxy for inet

11.10.2008 13:35:45 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:45 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:45 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 1

11.10.2008 13:35:46 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:46 general: InvalidateCurrent: invalidated server 'Download952 AVAST Server' from 'main'

11.10.2008 13:35:46 general: SelectCurrent: selected server 'Download955 AVAST Server' from 'main'

11.10.2008 13:35:46 package: GetPackages - set proxy for inet

11.10.2008 13:35:46 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:46 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:46 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 2

11.10.2008 13:35:48 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:48 general: InvalidateCurrent: invalidated server 'Download955 AVAST Server' from 'main'

11.10.2008 13:35:48 general: SelectCurrent: selected server 'Download78 AVAST Server' from 'main'

11.10.2008 13:35:48 package: GetPackages - set proxy for inet

11.10.2008 13:35:48 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:48 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:48 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 3

11.10.2008 13:35:50 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:50 general: InvalidateCurrent: invalidated server 'Download78 AVAST Server' from 'main'

11.10.2008 13:35:50 general: SelectCurrent: selected server 'Download916 AVAST Server' from 'main'

11.10.2008 13:35:50 package: GetPackages - set proxy for inet

11.10.2008 13:35:50 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:50 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:50 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 4

11.10.2008 13:35:52 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:52 general: InvalidateCurrent: invalidated server 'Download916 AVAST Server' from 'main'

11.10.2008 13:35:52 general: SelectCurrent: selected server 'Download87 AVAST Server' from 'main'

11.10.2008 13:35:52 package: GetPackages - set proxy for inet

11.10.2008 13:35:52 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:52 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:52 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 5

11.10.2008 13:35:54 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:54 general: InvalidateCurrent: invalidated server 'Download87 AVAST Server' from 'main'

11.10.2008 13:35:54 general: SelectCurrent: selected server 'Download204 AVAST Server' from 'main'

11.10.2008 13:35:54 package: GetPackages - set proxy for inet

11.10.2008 13:35:54 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:54 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:54 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 6

11.10.2008 13:35:56 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:56 general: InvalidateCurrent: invalidated server 'Download204 AVAST Server' from 'main'

11.10.2008 13:35:56 general: SelectCurrent: selected server 'Download76 AVAST Server' from 'main'

11.10.2008 13:35:56 package: GetPackages - set proxy for inet

11.10.2008 13:35:56 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:56 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:56 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 7

11.10.2008 13:35:58 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:35:58 general: InvalidateCurrent: invalidated server 'Download76 AVAST Server' from 'main'

11.10.2008 13:35:58 general: SelectCurrent: selected server 'Download39 AVAST Server' from 'main'

11.10.2008 13:35:58 package: GetPackages - set proxy for inet

11.10.2008 13:35:58 internet: SYNCER: Type: use IE settings

11.10.2008 13:35:58 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:35:58 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 8

11.10.2008 13:36:00 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:00 general: InvalidateCurrent: invalidated server 'Download39 AVAST Server' from 'main'

11.10.2008 13:36:00 general: SelectCurrent: selected server 'Download80 AVAST Server' from 'main'

11.10.2008 13:36:00 package: GetPackages - set proxy for inet

11.10.2008 13:36:00 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:00 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:00 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 9

11.10.2008 13:36:03 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:03 general: InvalidateCurrent: invalidated server 'Download80 AVAST Server' from 'main'

11.10.2008 13:36:03 general: SelectCurrent: selected server 'Download99 AVAST Server' from 'main'

11.10.2008 13:36:03 package: GetPackages - set proxy for inet

11.10.2008 13:36:03 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:03 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:03 internet: while trying to get file 'servers.def.vpu', error 0x20000004 has occured, try 10

11.10.2008 13:36:05 internet: tried 10 servers to get file 'servers.def.vpu', but failed (0x20000004)

11.10.2008 13:36:05 file: GetNewerStampedFile:GetFileWithRetry failed: C:\Users\matthieu\AppData\Local\Temp\_av_proI.tm~a02936\onefile, servers.def.vpu, error: 0x20000004

11.10.2008 13:36:05 package: Download servers.def, servers.def.vpu failed with error 0x20000011.

11.10.2008 13:36:05 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:05 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:05 general: InvalidateCurrent: invalidated server 'Download99 AVAST Server' from 'main'

11.10.2008 13:36:05 general: SelectCurrent: selected server 'Download209 AVAST Server' from 'main'

11.10.2008 13:36:05 package: GetPackages - set proxy for inet

11.10.2008 13:36:05 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:05 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:05 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 1

11.10.2008 13:36:06 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:06 general: InvalidateCurrent: invalidated server 'Download209 AVAST Server' from 'main'

11.10.2008 13:36:06 general: SelectCurrent: selected server 'Download957 AVAST Server' from 'main'

11.10.2008 13:36:06 package: GetPackages - set proxy for inet

11.10.2008 13:36:06 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:06 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:06 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 2

11.10.2008 13:36:08 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:08 general: InvalidateCurrent: invalidated server 'Download957 AVAST Server' from 'main'

11.10.2008 13:36:08 general: SelectCurrent: selected server 'Download978 AVAST Server' from 'main'

11.10.2008 13:36:08 package: GetPackages - set proxy for inet

11.10.2008 13:36:08 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:08 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:08 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 3

11.10.2008 13:36:10 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:10 general: InvalidateCurrent: invalidated server 'Download978 AVAST Server' from 'main'

11.10.2008 13:36:10 general: SelectCurrent: selected server 'Download212 AVAST Server' from 'main'

11.10.2008 13:36:10 package: GetPackages - set proxy for inet

11.10.2008 13:36:10 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:10 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:10 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 4

11.10.2008 13:36:12 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:12 general: InvalidateCurrent: invalidated server 'Download212 AVAST Server' from 'main'

11.10.2008 13:36:12 general: SelectCurrent: selected server 'Download936 AVAST Server' from 'main'

11.10.2008 13:36:12 package: GetPackages - set proxy for inet

11.10.2008 13:36:12 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:12 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:12 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 5

11.10.2008 13:36:14 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:14 general: InvalidateCurrent: invalidated server 'Download936 AVAST Server' from 'main'

11.10.2008 13:36:14 general: SelectCurrent: selected server 'Download37 AVAST Server' from 'main'

11.10.2008 13:36:14 package: GetPackages - set proxy for inet

11.10.2008 13:36:14 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:14 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:14 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 6

11.10.2008 13:36:16 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:16 general: InvalidateCurrent: invalidated server 'Download37 AVAST Server' from 'main'

11.10.2008 13:36:16 general: SelectCurrent: selected server 'Download951 AVAST Server' from 'main'

11.10.2008 13:36:16 package: GetPackages - set proxy for inet

11.10.2008 13:36:16 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:16 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:16 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 7

11.10.2008 13:36:18 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:18 general: InvalidateCurrent: invalidated server 'Download951 AVAST Server' from 'main'

11.10.2008 13:36:18 general: SelectCurrent: selected server 'Download97 AVAST Server' from 'main'

11.10.2008 13:36:18 package: GetPackages - set proxy for inet

11.10.2008 13:36:18 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:18 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:18 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 8

11.10.2008 13:36:21 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:21 general: InvalidateCurrent: invalidated server 'Download97 AVAST Server' from 'main'

11.10.2008 13:36:21 general: SelectCurrent: selected server 'Download205 AVAST Server' from 'main'

11.10.2008 13:36:21 package: GetPackages - set proxy for inet

11.10.2008 13:36:21 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:21 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:21 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 9

11.10.2008 13:36:23 package: ERROR:HttpGetWininet, catch returned 0x00002EFD

11.10.2008 13:36:23 general: InvalidateCurrent: invalidated server 'Download205 AVAST Server' from 'main'

11.10.2008 13:36:23 general: SelectCurrent: selected server 'Download923 AVAST Server' from 'main'

11.10.2008 13:36:23 package: GetPackages - set proxy for inet

11.10.2008 13:36:23 internet: SYNCER: Type: use IE settings

11.10.2008 13:36:23 internet: SYNCER: Auth: another authentication, use WinInet

11.10.2008 13:36:23 internet: while trying to get file 'servers.def', error 0x20000004 has occured, try 10

11.10.2008 13:36:25 internet: tried 10 servers to get file 'servers.def', but failed (0x20000004)

11.10.2008 13:36:25 file: GetNewerStampedFile:GetFileWithRetry failed: C:\Users\matthieu\AppData\Local\Temp\_av_proI.tm~a02936\onefile, servers.def, error: 0x20000004

11.10.2008 13:36:25 package: Tried to download servers.def but failed with error 0x20000004.

11.10.2008 13:36:25 general: progress end - 1

11.10.2008 13:36:25 general: progress end - 0

11.10.2008 13:36:25 general: progress thread end

11.10.2008 13:36:25 general: Err:Cannot connect to download205.avast.com (75.126.130.172:80).

 

 

 

 

 

 

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:44, on 2008-10-11

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

C:\Program Files\Logitech\QuickCam\Quickcam.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Program Files\Alwil Software\Avast4\ashDisp.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Picasa2\PicasaMediaDetector.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\conime.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Users\matthieu\Desktop\runscanner\RunScanner.exe

C:\Windows\System32\notepad.exe

C:\Users\matthieu\Desktop\coucou.exe

C:\Windows\system32\SearchFilterHost.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O2 - BHO: PDF-XChange Viewer IE-Plugin - {C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F} - C:\Program Files\Tracker Software\PDF-XChange Viewer\pdf-viewer\PDFXCviewIEPlugin.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)

O13 - Gopher Prefix:

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)

O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

 

--

End of file - 7272 bytes

Modifié par Wisewise3

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...