PC qui rame après désinfection NetSky

reptedoz · le 27 mars 2009

Bonjour,

Je me suis chopé le virus NetSky récemment, je pensais l'avoir irradié mais depuis mon PC rame énormément.

A chaque démarrage il un programme souvent différent (spoolsv.exe ou esentutl.exe ou d'autre) qui me prend tout l'UC et je suis obliger de fermer le processus pour utiliser mon ordinateur.

Je ne sais pas si c'est vraiment une infection mais je n'arrive pas a trouver

Je vous poste le rapport hijackthis si cela peut vous aider :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:46:25, on 27/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\brsvc01a.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\brss01a.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Logitech\iTouch\iTouch.exe

C:\WINDOWS\Logi_MwX.Exe

C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

C:\WINDOWS\ZSSnp211.exe

C:\WINDOWS\Domino.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\RocketDock\RocketDock.exe

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Documents and Settings\Les Lutins\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig?hl=fr

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

F3 - REG:win.ini: load=C:\DOCUME~1\LESLUT~1\LOCALS~1\APPLIC~1\MICROS~1\spoolsv.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe

O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe

O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe

O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [Gadwin PrintScreen 3.1] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"

O4 - HKLM\..\Policies\Explorer\Run: [DllHst] C:\DOCUME~1\LESLUT~1\LOCALS~1\APPLIC~1\MICROS~1\dllhst3g.exe /waitservice

O4 - HKCU\..\Policies\Explorer\Run: [Esent Utl] C:\WINDOWS\esentutl.exe /waitservice

O4 - HKCU\..\Policies\Explorer\Run: [Logman] C:\WINDOWS\System32\drivers\logman.exe /waitservice

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [iEudinit] C:\DOCUME~1\LESLUT~1\LOCALS~1\APPLIC~1\ieudinit.exe /waitservice (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [iEudinit] C:\DOCUME~1\LESLUT~1\LOCALS~1\APPLIC~1\ieudinit.exe /waitservice (User 'Default user')

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200705...ex/qtplugin.cab

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.4.1.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {D5D30A68-E230-49D9-B4D5-BF7532692945} (CDiscountObj Class) - https://clients.cdiscount.com/Order/TechCit...x/CDiscount.cab

O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.1.6.cab

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe

O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Unknown owner - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe (file missing)

O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Unknown owner - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate1c98780d8faeafa) (gupdate1c98780d8faeafa) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

--

End of file - 10715 bytes

Encore une petite question, j'utilise Adaware 2008, spybot, et avast pro pour protéger mon ordinateur, celà est-til le bon choix ?

Merci d'avance de votre aide

Modifié le 27 mars 2009 par reptedoz

Apollo · le 27 mars 2009

Bonjour,

Encore une petite question, j'utilise Adaware 2008, spybot, et avast pro pour protéger mon ordinateur, celà est-til le bon choix ?

Pas vraiment, non

On voit ça plus tard si tu veux bien.

Désactive le teatimer de Spybot en passant par les options de Spybot: une fois dans le logiciel, il faut aller dans le menu "Mode" => coche "Mode avancé" => "Outils"(en bas de page)=> "Résident" => et tu décoches cette case: "Résident Teatimer" . Tu ne dois plus voir l'icône du Teatimer dans la barre de tâches!

Ne fais pas l'impasse sur cette étape, car ca peut faire échouer la procédure de désinfection !

Lance Hijackthis "do a system scan only" et coche les cases devant les lignes suivantes:

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

Ferme toutes les fenêtres puis clique sur Fix Checked.

-- Télécharge Lop S&D.exe sur ton Bureau.

http://eric.71.mespages.googlepages.com/LopSD.exe

Double-clique dessus pour lancer l'installation

Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau

Sous Vista: Clic droit/exécuter en temps qu'administrateur ***

Sélectionne la langue souhaitée , puis choisis l'option 1 (Recherche)

Patiente jusqu'à la fin du scan

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

@++

reptedoz · le 30 mars 2009

merci beaucoup pour ta réponse rapide,

j'ai fais toute les étapes dans l'ordre,et je te poste le rapport Lop S&D :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 2.60GHz )

BIOS : BIOS Date: 08/20/03 12:57:55 Ver: 08.00.09

USER : Les Lutins ( Administrator )

BOOT : Normal boot

Antivirus : Norton AntiVirus 2003 (Not Activated)

Firewall : Norton Personal Firewall 2003 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:114 Go (Free:90 Go)

D:\ (Local Disk) - NTFS - Total:298 Go (Free:219 Go)

E:\ (Local Disk) - NTFS - Total:931 Go (Free:347 Go)

G:\ (Local Disk) - NTFS - Total:931 Go (Free:534 Go)

H:\ (CD or DVD)

I:\ (CD or DVD)

L:\ (Network Disk) - NTFS - Total:238 Go (Free:147 Go)

O:\ (Network Disk) - NTFS - Total:51 Go (Free:42 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [1] ( 30/03/2009|11:45 )

--------------------\\ Listing des dossiers dans APPLIC~1

[07/08/2008|13:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia

[28/12/2003|14:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/08/2008|13:38] C:\DOCUME~1\ADMINI~1.GRO\APPLIC~1\Macromedia

[19/01/2009|22:28] C:\DOCUME~1\ADMINI~1.GRO\APPLIC~1\Microsoft

[05/02/2009|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{83C91755-2546-441D-AC40-9A6B4B860800}

[12/09/2008|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{BB55CB49-6330-4B53-B9A7-7ACBC2E8F14F}

[16/02/2009|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ableton

[11/04/2008|12:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems

[04/03/2009|21:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AcrobatInstall

[11/03/2009|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[26/02/2007|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead

[25/02/2009|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU

[22/10/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BufferZone

[18/01/2007|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes

[11/12/2008|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet

[05/02/2009|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[30/03/2009|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater

[27/01/2006|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[28/07/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft

[22/01/2009|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com

[12/02/2008|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[21/03/2008|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[14/04/2008|12:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help

[04/02/2004|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Minnetonka Audio Software

[09/10/2007|02:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla

[14/11/2004|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6

[27/02/2009|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software

[27/02/2009|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound

[22/09/2008|10:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OsaSync

[25/01/2006|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PACE Anti-Piracy

[12/12/2006|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst

[22/05/2004|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Quark

[09/10/2007|10:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[20/06/2006|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games

[30/03/2009|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[04/01/2007|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[12/03/2008|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[09/10/2007|01:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems

[24/07/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[27/02/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[26/10/2006|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[07/08/2008|13:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia

[28/12/2003|14:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[16/02/2009|17:56] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ableton

[15/06/2008|15:55] C:\DOCUME~1\LESLUT~1\APPLIC~1\AccurateRip

[02/04/2008|16:54] C:\DOCUME~1\LESLUT~1\APPLIC~1\ACD Systems

[19/10/2008|20:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\Adobe

[28/12/2004|17:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\AdobeAUM

[24/09/2004|14:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\AdobeUM

[22/01/2009|18:43] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ahead

[25/02/2009|18:46] C:\DOCUME~1\LESLUT~1\APPLIC~1\AVS4YOU

[27/02/2006|18:17] C:\DOCUME~1\LESLUT~1\APPLIC~1\Brother

[15/06/2008|15:43] C:\DOCUME~1\LESLUT~1\APPLIC~1\dBpoweramp

[08/08/2008|23:51] C:\DOCUME~1\LESLUT~1\APPLIC~1\Download Manager

[17/03/2009|17:21] C:\DOCUME~1\LESLUT~1\APPLIC~1\drivers

[26/03/2009|15:59] C:\DOCUME~1\LESLUT~1\APPLIC~1\dvdcss

[30/01/2006|18:12] C:\DOCUME~1\LESLUT~1\APPLIC~1\EasyView

[18/05/2006|10:08] C:\DOCUME~1\LESLUT~1\APPLIC~1\EoRezo

[12/03/2008|15:40] C:\DOCUME~1\LESLUT~1\APPLIC~1\Google

[28/12/2003|14:54] C:\DOCUME~1\LESLUT~1\APPLIC~1\Help

[10/03/2008|16:16] C:\DOCUME~1\LESLUT~1\APPLIC~1\Identities

[20/03/2009|12:51] C:\DOCUME~1\LESLUT~1\APPLIC~1\InterTrust

[22/09/2004|14:29] C:\DOCUME~1\LESLUT~1\APPLIC~1\Leadertech

[23/02/2006|16:23] C:\DOCUME~1\LESLUT~1\APPLIC~1\Macromedia

[05/10/2008|21:35] C:\DOCUME~1\LESLUT~1\APPLIC~1\Microsoft

[16/12/2008|11:53] C:\DOCUME~1\LESLUT~1\APPLIC~1\Mozilla

[10/05/2008|13:15] C:\DOCUME~1\LESLUT~1\APPLIC~1\MSN6

[27/02/2009|16:28] C:\DOCUME~1\LESLUT~1\APPLIC~1\NCH Software

[31/01/2007|18:53] C:\DOCUME~1\LESLUT~1\APPLIC~1\NCH Swift Sound

[12/12/2006|20:39] C:\DOCUME~1\LESLUT~1\APPLIC~1\PlayFirst

[20/09/2007|19:03] C:\DOCUME~1\LESLUT~1\APPLIC~1\Publish Providers

[22/05/2004|11:56] C:\DOCUME~1\LESLUT~1\APPLIC~1\Quark

[12/03/2008|00:55] C:\DOCUME~1\LESLUT~1\APPLIC~1\Real

[25/01/2006|11:48] C:\DOCUME~1\LESLUT~1\APPLIC~1\Roxio

[27/01/2006|11:33] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sonic

[28/02/2005|15:40] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sony

[04/05/2007|10:32] C:\DOCUME~1\LESLUT~1\APPLIC~1\Steinberg

[29/12/2003|11:59] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sun

[28/12/2003|15:03] C:\DOCUME~1\LESLUT~1\APPLIC~1\Symantec

[17/03/2008|18:41] C:\DOCUME~1\LESLUT~1\APPLIC~1\T.Aragon

[09/10/2007|02:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\Talkback

[11/12/2008|18:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\U3

[23/02/2006|16:22] C:\DOCUME~1\LESLUT~1\APPLIC~1\uk.co.planetside

[09/10/2007|01:37] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ulead Systems

[27/03/2009|11:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\Uniblue

[12/11/2007|20:31] C:\DOCUME~1\LESLUT~1\APPLIC~1\vlc

[18/02/2009|15:10] C:\DOCUME~1\LESLUT~1\APPLIC~1\Vso

[05/02/2009|13:10] C:\DOCUME~1\LESLUT~1\APPLIC~1\WinRAR

[20/02/2007|18:09] C:\DOCUME~1\LESLUT~1\APPLIC~1\Zylom

[14/06/2004|19:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[28/12/2003|14:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[28/12/2003|14:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/03/2009 10:13][--a------] C:\WINDOWS\tasks\Google Software Updater.job

[30/03/2009 10:11][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job

[26/03/2009 12:58][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

[30/03/2009 10:11][--ah-----] C:\WINDOWS\tasks\SA.DAT

[24/04/2003 14:00][---------] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[25/07/2008|11:47] C:\Program Files\2BrightSparks

[16/02/2009|17:55] C:\Program Files\Ableton

[21/02/2004|13:20] C:\Program Files\AC3Filter

[18/09/2008|15:33] C:\Program Files\ACD Systems

[11/03/2009|12:14] C:\Program Files\Adobe

[19/10/2008|20:38] C:\Program Files\Adobe Media Player

[20/01/2006|15:54] C:\Program Files\Ahead

[17/03/2009|18:45] C:\Program Files\Alwil Software

[18/09/2007|16:32] C:\Program Files\Amic Utilities

[28/12/2003|14:46] C:\Program Files\Analog Devices

[04/05/2007|10:28] C:\Program Files\ASIO4ALL v2

[18/10/2007|15:26] C:\Program Files\Astase

[28/12/2003|14:51] C:\Program Files\ATI Technologies

[17/02/2006|12:27] C:\Program Files\Atlence

[25/02/2009|18:46] C:\Program Files\AVS4YOU

[22/02/2006|12:41] C:\Program Files\Baas Electronics

[10/10/2007|10:55] C:\Program Files\Bonjour

[12/12/2006|19:30] C:\Program Files\Boonty

[06/02/2008|18:06] C:\Program Files\Brother

[06/02/2008|18:07] C:\Program Files\Brownie

[22/10/2007|16:39] C:\Program Files\BufferZone

[22/02/2006|13:18] C:\Program Files\CAD-CAM Professional

[27/03/2009|13:40] C:\Program Files\CCleaner

[12/02/2008|11:35] C:\Program Files\CD Audio Reader Filter

[23/10/2008|11:14] C:\Program Files\Circle Developement

[28/12/2003|16:00] C:\Program Files\Common Files

[28/12/2003|14:31] C:\Program Files\ComPlus Applications

[18/02/2009|11:34] C:\Program Files\ConvertHelper

[16/04/2008|14:57] C:\Program Files\CoolWord

[03/01/2006|17:05] C:\Program Files\Creative

[31/05/2006|12:00] C:\Program Files\DIFX

[17/06/2008|09:11] C:\Program Files\Digital Image Recovery

[09/10/2007|02:56] C:\Program Files\DivX

[09/03/2009|13:17] C:\Program Files\DoremiSoft

[22/02/2006|13:17] C:\Program Files\EAGLE-4.16

[20/02/2007|17:20] C:\Program Files\Easy AVI VCD DVD MPEG Converter

[18/01/2007|16:58] C:\Program Files\Elaborate Bytes

[17/03/2009|12:16] C:\Program Files\eMule

[18/05/2006|10:08] C:\Program Files\eoRezo

[17/03/2009|17:57] C:\Program Files\Fichiers communs

[05/02/2009|12:46] C:\Program Files\filehippo.com

[26/10/2006|15:10] C:\Program Files\FileZilla

[15/02/2007|12:16] C:\Program Files\Firebird

[02/05/2006|15:42] C:\Program Files\Gadwin Systems

[12/02/2009|10:45] C:\Program Files\Google

[23/12/2008|11:28] C:\Program Files\HDD Capacity Restore

[27/03/2009|16:09] C:\Program Files\HiJackThis

[31/08/2007|23:01] C:\Program Files\Illustrate

[28/11/2008|11:11] C:\Program Files\Image-Line

[22/12/2008|13:55] C:\Program Files\InstallShield Installation Information

[28/12/2003|14:40] C:\Program Files\Intel

[12/02/2009|01:55] C:\Program Files\Internet Explorer

[02/10/2008|10:41] C:\Program Files\Inventel

[03/03/2006|18:24] C:\Program Files\Ipswitch

[05/02/2009|12:53] C:\Program Files\Java

[05/02/2004|19:52] C:\Program Files\Konvertor

[05/02/2009|12:57] C:\Program Files\Lavasoft

[20/06/2004|14:04] C:\Program Files\Ligos

[04/09/2005|10:40] C:\Program Files\Logitech

[22/01/2009|18:30] C:\Program Files\ma-config.com

[23/09/2004|18:15] C:\Program Files\Maïdo Production

[26/02/2009|17:55] C:\Program Files\MediaLas

[22/01/2009|18:13] C:\Program Files\Messenger

[23/10/2008|11:14] C:\Program Files\Messenger Plus! Live

[28/12/2003|14:34] C:\Program Files\microsoft frontpage

[05/06/2008|10:10] C:\Program Files\Microsoft Office

[27/02/2009|18:37] C:\Program Files\Microsoft Silverlight

[24/04/2006|11:50] C:\Program Files\Microsoft Visual Studio

[05/06/2008|10:09] C:\Program Files\Microsoft.NET

[20/03/2008|10:35] C:\Program Files\Mon Carnet d'Adresses

[22/01/2009|18:08] C:\Program Files\Movie Maker

[30/03/2009|11:37] C:\Program Files\Mozilla Firefox

[31/01/2007|18:46] C:\Program Files\MP3 WAV Converter

[05/02/2004|21:03] C:\Program Files\MPEG4 Direct Maker

[19/01/2009|17:45] C:\Program Files\MSBuild

[03/09/2005|19:03] C:\Program Files\MSN

[28/12/2003|14:31] C:\Program Files\MSN Gaming Zone

[19/01/2009|18:01] C:\Program Files\MSXML 6.0

[22/01/2007|13:38] C:\Program Files\My Manager

[14/11/2004|15:39] C:\Program Files\Namo

[27/02/2009|16:34] C:\Program Files\NCH Swift Sound

[22/01/2009|18:07] C:\Program Files\NetMeeting

[12/03/2008|19:18] C:\Program Files\Ontrack

[22/09/2008|10:24] C:\Program Files\OsaSync

[22/01/2009|18:07] C:\Program Files\Outlook Express

[27/03/2009|16:19] C:\Program Files\Panda Security

[26/01/2006|11:28] C:\Program Files\Pegasys Inc

[28/04/2006|15:07] C:\Program Files\PIC 01

[03/05/2007|12:09] C:\Program Files\Pinnacle

[30/12/2004|12:16] C:\Program Files\Planning Manager

[04/01/2006|12:49] C:\Program Files\Plextor

[22/12/2008|13:55] C:\Program Files\PowerQuest

[06/02/2008|17:34] C:\Program Files\PS Utility

[22/05/2004|11:53] C:\Program Files\Quark

[10/10/2007|10:56] C:\Program Files\QuickTime

[12/03/2008|00:54] C:\Program Files\Real

[19/01/2009|17:42] C:\Program Files\Reference Assemblies

[27/03/2009|13:34] C:\Program Files\RegCleaner

[02/04/2008|11:55] C:\Program Files\RegConso

[14/04/2008|18:11] C:\Program Files\Riva

[14/04/2008|18:10] C:\Program Files\Riva FLV Encoder 2.0

[02/04/2008|17:17] C:\Program Files\RocketDock

[30/03/2007|11:14] C:\Program Files\Samsung

[14/09/2007|11:53] C:\Program Files\SavDisk

[11/01/2006|11:23] C:\Program Files\SDM

[07/02/2008|12:18] C:\Program Files\Secured_eMule

[28/12/2003|14:31] C:\Program Files\Services en ligne

[28/12/2003|16:44] C:\Program Files\SLD CODEC PACK 1.5

[06/08/2007|09:09] C:\Program Files\SoftChris

[17/01/2007|15:56] C:\Program Files\Sonic

[24/06/2008|12:40] C:\Program Files\Sony

[20/09/2007|18:58] C:\Program Files\Sony Setup

[02/04/2008|11:56] C:\Program Files\SourceTec

[08/02/2008|11:56] C:\Program Files\Sprint-Layout40 (Demo)

[05/02/2009|13:23] C:\Program Files\Spybot - Search & Destroy

[04/05/2007|10:31] C:\Program Files\Steinberg

[17/03/2009|13:48] C:\Program Files\SuperCopier2

[24/03/2005|17:49] C:\Program Files\Suunto

[02/04/2008|11:56] C:\Program Files\SyncMX

[04/05/2007|10:29] C:\Program Files\Syncrosoft

[23/10/2008|13:45] C:\Program Files\TagRename

[21/05/2008|09:49] C:\Program Files\Techcity

[17/03/2009|19:01] C:\Program Files\Trend Micro

[09/10/2007|01:34] C:\Program Files\Ulead Systems

[28/12/2003|16:00] C:\Program Files\Uninstall Information

[23/02/2006|17:01] C:\Program Files\UxTheme Multipatcher Fr

[19/10/2008|19:59] C:\Program Files\Veoh Networks

[19/12/2008|11:43] C:\Program Files\VIA

[12/11/2007|20:31] C:\Program Files\VideoLAN

[01/05/2007|16:26] C:\Program Files\Vimicro

[26/02/2007|11:10] C:\Program Files\VirtualDubMOD

[23/09/2004|18:09] C:\Program Files\Visicom Media

[29/05/2007|11:16] C:\Program Files\VSO

[03/02/2009|18:11] C:\Program Files\Waves

[24/04/2006|11:50] C:\Program Files\Web Publish

[28/04/2008|10:02] C:\Program Files\Winamp

[07/02/2008|12:01] C:\Program Files\Winamp Remote

[27/02/2008|11:32] C:\Program Files\Windows Live

[09/10/2007|01:36] C:\Program Files\Windows Media Components

[04/01/2007|16:25] C:\Program Files\Windows Media Connect 2

[22/01/2009|18:07] C:\Program Files\Windows Media Player

[22/01/2009|18:07] C:\Program Files\Windows NT

[20/01/2009|11:23] C:\Program Files\Windows Resource Kits

[25/01/2006|19:32] C:\Program Files\WindowsUpdate

[05/02/2004|20:22] C:\Program Files\WinMPG Video Convert

[05/02/2009|13:23] C:\Program Files\WinRAR

[20/03/2008|12:54] C:\Program Files\WinSauvegarde

[28/12/2003|14:34] C:\Program Files\xerox

[13/08/2007|23:50] C:\Program Files\X'nStop 2.5

[12/09/2008|10:07] C:\Program Files\XPC Tools

[03/03/2005|11:01] C:\Program Files\XviD

[01/02/2007|17:20] C:\Program Files\Yahoo!

[12/02/2008|11:35] C:\Program Files\Zoom Player

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[18/09/2008|15:34] C:\Program Files\Fichiers communs\ACD Systems

[20/03/2009|12:51] C:\Program Files\Fichiers communs\Adobe

[19/10/2008|20:37] C:\Program Files\Fichiers communs\Adobe AIR

[04/01/2006|12:52] C:\Program Files\Fichiers communs\Ahead

[17/02/2006|12:27] C:\Program Files\Fichiers communs\Atlence

[25/02/2009|18:46] C:\Program Files\Fichiers communs\AVSMedia

[14/04/2008|11:14] C:\Program Files\Fichiers communs\Designer

[03/02/2009|18:11] C:\Program Files\Fichiers communs\digidesign

[06/02/2008|18:02] C:\Program Files\Fichiers communs\InstallShield

[29/12/2003|11:57] C:\Program Files\Fichiers communs\Java

[06/01/2006|18:16] C:\Program Files\Fichiers communs\Logitech

[23/09/2004|17:56] C:\Program Files\Fichiers communs\Macromedia

[01/10/2007|17:59] C:\Program Files\Fichiers communs\Macrovision Shared

[05/03/2009|19:31] C:\Program Files\Fichiers communs\Microsoft Shared

[28/12/2003|14:32] C:\Program Files\Fichiers communs\MSSoap

[28/12/2003|14:25] C:\Program Files\Fichiers communs\ODBC

[25/01/2006|19:24] C:\Program Files\Fichiers communs\PACE Anti-Piracy

[12/03/2008|00:54] C:\Program Files\Fichiers communs\Real

[25/01/2006|12:01] C:\Program Files\Fichiers communs\Roxio Shared

[28/12/2003|14:32] C:\Program Files\Fichiers communs\Services

[17/01/2007|15:56] C:\Program Files\Fichiers communs\Sonic Shared

[09/10/2007|01:35] C:\Program Files\Fichiers communs\SONY Digital Images

[28/12/2003|14:25] C:\Program Files\Fichiers communs\SpeechEngines

[26/10/2006|15:11] C:\Program Files\Fichiers communs\SWF Studio

[04/01/2007|18:01] C:\Program Files\Fichiers communs\Symantec Shared

[22/01/2009|18:07] C:\Program Files\Fichiers communs\System

[09/10/2007|01:34] C:\Program Files\Fichiers communs\Ulead Systems

[27/02/2008|11:33] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[12/03/2008|00:54] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 51 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsu3.exe

C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsu3.tmp

C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsuA.exe

C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsuA.tmp

C:\Program Files\Circle Developement

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-30 11:47:14

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 82

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\LESLUT~1\Mes documents\Ableton\Library\Presets\Audio Effects\Vinyl Distortion\Crack.adv

[F:36][D:6]-> C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp

[F:31][D:0]-> C:\DOCUME~1\LESLUT~1\Cookies

[F:364][D:4]-> C:\DOCUME~1\LESLUT~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 30/03/2009|11:49 - Option : [1]

--------------------\\ Fin du rapport a 11:49:12

Apollo · le 30 mars 2009

Bonjour,

Relance Lop S&D

Choisis cette fois ci l'Option 2 (Suppression)

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide)

Poste aussi un nouveau log Hijackthis stp.

@++

reptedoz · le 30 mars 2009

bonjour, ou plutôt bonsoir !!

alors, voilà le rapport Lop SD :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 2.60GHz )

BIOS : BIOS Date: 08/20/03 12:57:55 Ver: 08.00.09

USER : Les Lutins ( Administrator )

BOOT : Normal boot

Antivirus : Norton AntiVirus 2003 (Not Activated)

Firewall : Norton Personal Firewall 2003 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:114 Go (Free:90 Go)

D:\ (Local Disk) - NTFS - Total:298 Go (Free:216 Go)

E:\ (Local Disk) - NTFS - Total:931 Go (Free:347 Go)

G:\ (Local Disk) - NTFS - Total:931 Go (Free:532 Go)

H:\ (CD or DVD)

I:\ (CD or DVD)

L:\ (Network Disk) - NTFS - Total:238 Go (Free:147 Go)

O:\ (Network Disk)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [2] ( 30/03/2009|17:45 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsu3.exe

Supprime! - C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsu3.tmp

Supprime! - C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsuA.exe

Supprime! - C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp\nsuA.tmp

Supprime! - C:\Program Files\Circle Developement

-

[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[07/08/2008|13:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia

[28/12/2003|14:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/08/2008|13:38] C:\DOCUME~1\ADMINI~1.GRO\APPLIC~1\Macromedia

[19/01/2009|22:28] C:\DOCUME~1\ADMINI~1.GRO\APPLIC~1\Microsoft

[05/02/2009|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{83C91755-2546-441D-AC40-9A6B4B860800}

[12/09/2008|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{BB55CB49-6330-4B53-B9A7-7ACBC2E8F14F}

[16/02/2009|17:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ableton

[11/04/2008|12:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems

[04/03/2009|21:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AcrobatInstall

[11/03/2009|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe

[26/02/2007|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead

[25/02/2009|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU

[22/10/2007|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BufferZone

[18/01/2007|17:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Elaborate Bytes

[11/12/2008|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet

[05/02/2009|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google

[30/03/2009|10:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater

[27/01/2006|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield

[28/07/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft

[22/01/2009|18:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com

[12/02/2008|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!

[21/03/2008|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft

[14/04/2008|12:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help

[04/02/2004|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Minnetonka Audio Software

[09/10/2007|02:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla

[14/11/2004|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6

[27/02/2009|16:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software

[27/02/2009|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound

[22/09/2008|10:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OsaSync

[25/01/2006|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PACE Anti-Piracy

[12/12/2006|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst

[22/05/2004|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Quark

[09/10/2007|10:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime

[20/06/2006|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games

[30/03/2009|11:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy

[04/01/2007|17:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec

[12/03/2008|19:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP

[09/10/2007|01:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems

[24/07/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[27/02/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[26/10/2006|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[07/08/2008|13:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia

[28/12/2003|14:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[16/02/2009|17:56] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ableton

[15/06/2008|15:55] C:\DOCUME~1\LESLUT~1\APPLIC~1\AccurateRip

[02/04/2008|16:54] C:\DOCUME~1\LESLUT~1\APPLIC~1\ACD Systems

[19/10/2008|20:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\Adobe

[28/12/2004|17:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\AdobeAUM

[24/09/2004|14:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\AdobeUM

[22/01/2009|18:43] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ahead

[25/02/2009|18:46] C:\DOCUME~1\LESLUT~1\APPLIC~1\AVS4YOU

[27/02/2006|18:17] C:\DOCUME~1\LESLUT~1\APPLIC~1\Brother

[15/06/2008|15:43] C:\DOCUME~1\LESLUT~1\APPLIC~1\dBpoweramp

[08/08/2008|23:51] C:\DOCUME~1\LESLUT~1\APPLIC~1\Download Manager

[17/03/2009|17:21] C:\DOCUME~1\LESLUT~1\APPLIC~1\drivers

[26/03/2009|15:59] C:\DOCUME~1\LESLUT~1\APPLIC~1\dvdcss

[30/01/2006|18:12] C:\DOCUME~1\LESLUT~1\APPLIC~1\EasyView

[18/05/2006|10:08] C:\DOCUME~1\LESLUT~1\APPLIC~1\EoRezo

[12/03/2008|15:40] C:\DOCUME~1\LESLUT~1\APPLIC~1\Google

[28/12/2003|14:54] C:\DOCUME~1\LESLUT~1\APPLIC~1\Help

[10/03/2008|16:16] C:\DOCUME~1\LESLUT~1\APPLIC~1\Identities

[20/03/2009|12:51] C:\DOCUME~1\LESLUT~1\APPLIC~1\InterTrust

[22/09/2004|14:29] C:\DOCUME~1\LESLUT~1\APPLIC~1\Leadertech

[23/02/2006|16:23] C:\DOCUME~1\LESLUT~1\APPLIC~1\Macromedia

[05/10/2008|21:35] C:\DOCUME~1\LESLUT~1\APPLIC~1\Microsoft

[16/12/2008|11:53] C:\DOCUME~1\LESLUT~1\APPLIC~1\Mozilla

[10/05/2008|13:15] C:\DOCUME~1\LESLUT~1\APPLIC~1\MSN6

[27/02/2009|16:28] C:\DOCUME~1\LESLUT~1\APPLIC~1\NCH Software

[31/01/2007|18:53] C:\DOCUME~1\LESLUT~1\APPLIC~1\NCH Swift Sound

[12/12/2006|20:39] C:\DOCUME~1\LESLUT~1\APPLIC~1\PlayFirst

[20/09/2007|19:03] C:\DOCUME~1\LESLUT~1\APPLIC~1\Publish Providers

[22/05/2004|11:56] C:\DOCUME~1\LESLUT~1\APPLIC~1\Quark

[12/03/2008|00:55] C:\DOCUME~1\LESLUT~1\APPLIC~1\Real

[25/01/2006|11:48] C:\DOCUME~1\LESLUT~1\APPLIC~1\Roxio

[27/01/2006|11:33] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sonic

[28/02/2005|15:40] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sony

[04/05/2007|10:32] C:\DOCUME~1\LESLUT~1\APPLIC~1\Steinberg

[29/12/2003|11:59] C:\DOCUME~1\LESLUT~1\APPLIC~1\Sun

[28/12/2003|15:03] C:\DOCUME~1\LESLUT~1\APPLIC~1\Symantec

[17/03/2008|18:41] C:\DOCUME~1\LESLUT~1\APPLIC~1\T.Aragon

[09/10/2007|02:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\Talkback

[11/12/2008|18:38] C:\DOCUME~1\LESLUT~1\APPLIC~1\U3

[23/02/2006|16:22] C:\DOCUME~1\LESLUT~1\APPLIC~1\uk.co.planetside

[09/10/2007|01:37] C:\DOCUME~1\LESLUT~1\APPLIC~1\Ulead Systems

[27/03/2009|11:57] C:\DOCUME~1\LESLUT~1\APPLIC~1\Uniblue

[12/11/2007|20:31] C:\DOCUME~1\LESLUT~1\APPLIC~1\vlc

[18/02/2009|15:10] C:\DOCUME~1\LESLUT~1\APPLIC~1\Vso

[05/02/2009|13:10] C:\DOCUME~1\LESLUT~1\APPLIC~1\WinRAR

[20/02/2007|18:09] C:\DOCUME~1\LESLUT~1\APPLIC~1\Zylom

[14/06/2004|19:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help

[28/12/2003|14:33] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[28/12/2003|14:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/03/2009 14:05][--a------] C:\WINDOWS\tasks\Google Software Updater.job

[30/03/2009 14:01][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job

[30/03/2009 11:58][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

[30/03/2009 10:11][--ah-----] C:\WINDOWS\tasks\SA.DAT

[24/04/2003 14:00][---------] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[25/07/2008|11:47] C:\Program Files\2BrightSparks

[16/02/2009|17:55] C:\Program Files\Ableton

[21/02/2004|13:20] C:\Program Files\AC3Filter

[18/09/2008|15:33] C:\Program Files\ACD Systems

[11/03/2009|12:14] C:\Program Files\Adobe

[19/10/2008|20:38] C:\Program Files\Adobe Media Player

[20/01/2006|15:54] C:\Program Files\Ahead

[17/03/2009|18:45] C:\Program Files\Alwil Software

[18/09/2007|16:32] C:\Program Files\Amic Utilities

[28/12/2003|14:46] C:\Program Files\Analog Devices

[04/05/2007|10:28] C:\Program Files\ASIO4ALL v2

[18/10/2007|15:26] C:\Program Files\Astase

[28/12/2003|14:51] C:\Program Files\ATI Technologies

[17/02/2006|12:27] C:\Program Files\Atlence

[25/02/2009|18:46] C:\Program Files\AVS4YOU

[22/02/2006|12:41] C:\Program Files\Baas Electronics

[10/10/2007|10:55] C:\Program Files\Bonjour

[12/12/2006|19:30] C:\Program Files\Boonty

[06/02/2008|18:06] C:\Program Files\Brother

[06/02/2008|18:07] C:\Program Files\Brownie

[22/10/2007|16:39] C:\Program Files\BufferZone

[22/02/2006|13:18] C:\Program Files\CAD-CAM Professional

[27/03/2009|13:40] C:\Program Files\CCleaner

[12/02/2008|11:35] C:\Program Files\CD Audio Reader Filter

[28/12/2003|16:00] C:\Program Files\Common Files

[28/12/2003|14:31] C:\Program Files\ComPlus Applications

[18/02/2009|11:34] C:\Program Files\ConvertHelper

[16/04/2008|14:57] C:\Program Files\CoolWord

[03/01/2006|17:05] C:\Program Files\Creative

[31/05/2006|12:00] C:\Program Files\DIFX

[17/06/2008|09:11] C:\Program Files\Digital Image Recovery

[09/10/2007|02:56] C:\Program Files\DivX

[09/03/2009|13:17] C:\Program Files\DoremiSoft

[22/02/2006|13:17] C:\Program Files\EAGLE-4.16

[20/02/2007|17:20] C:\Program Files\Easy AVI VCD DVD MPEG Converter

[18/01/2007|16:58] C:\Program Files\Elaborate Bytes

[17/03/2009|12:16] C:\Program Files\eMule

[18/05/2006|10:08] C:\Program Files\eoRezo

[17/03/2009|17:57] C:\Program Files\Fichiers communs

[05/02/2009|12:46] C:\Program Files\filehippo.com

[26/10/2006|15:10] C:\Program Files\FileZilla

[15/02/2007|12:16] C:\Program Files\Firebird

[02/05/2006|15:42] C:\Program Files\Gadwin Systems

[12/02/2009|10:45] C:\Program Files\Google

[23/12/2008|11:28] C:\Program Files\HDD Capacity Restore

[27/03/2009|16:09] C:\Program Files\HiJackThis

[31/08/2007|23:01] C:\Program Files\Illustrate

[28/11/2008|11:11] C:\Program Files\Image-Line

[22/12/2008|13:55] C:\Program Files\InstallShield Installation Information

[28/12/2003|14:40] C:\Program Files\Intel

[12/02/2009|01:55] C:\Program Files\Internet Explorer

[02/10/2008|10:41] C:\Program Files\Inventel

[03/03/2006|18:24] C:\Program Files\Ipswitch

[05/02/2009|12:53] C:\Program Files\Java

[05/02/2004|19:52] C:\Program Files\Konvertor

[05/02/2009|12:57] C:\Program Files\Lavasoft

[20/06/2004|14:04] C:\Program Files\Ligos

[04/09/2005|10:40] C:\Program Files\Logitech

[22/01/2009|18:30] C:\Program Files\ma-config.com

[23/09/2004|18:15] C:\Program Files\Maïdo Production

[26/02/2009|17:55] C:\Program Files\MediaLas

[22/01/2009|18:13] C:\Program Files\Messenger

[23/10/2008|11:14] C:\Program Files\Messenger Plus! Live

[28/12/2003|14:34] C:\Program Files\microsoft frontpage

[05/06/2008|10:10] C:\Program Files\Microsoft Office

[27/02/2009|18:37] C:\Program Files\Microsoft Silverlight

[24/04/2006|11:50] C:\Program Files\Microsoft Visual Studio

[05/06/2008|10:09] C:\Program Files\Microsoft.NET

[20/03/2008|10:35] C:\Program Files\Mon Carnet d'Adresses

[22/01/2009|18:08] C:\Program Files\Movie Maker

[30/03/2009|15:12] C:\Program Files\Mozilla Firefox

[31/01/2007|18:46] C:\Program Files\MP3 WAV Converter

[05/02/2004|21:03] C:\Program Files\MPEG4 Direct Maker

[19/01/2009|17:45] C:\Program Files\MSBuild

[03/09/2005|19:03] C:\Program Files\MSN

[28/12/2003|14:31] C:\Program Files\MSN Gaming Zone

[19/01/2009|18:01] C:\Program Files\MSXML 6.0

[22/01/2007|13:38] C:\Program Files\My Manager

[14/11/2004|15:39] C:\Program Files\Namo

[27/02/2009|16:34] C:\Program Files\NCH Swift Sound

[22/01/2009|18:07] C:\Program Files\NetMeeting

[12/03/2008|19:18] C:\Program Files\Ontrack

[22/09/2008|10:24] C:\Program Files\OsaSync

[22/01/2009|18:07] C:\Program Files\Outlook Express

[27/03/2009|16:19] C:\Program Files\Panda Security

[26/01/2006|11:28] C:\Program Files\Pegasys Inc

[28/04/2006|15:07] C:\Program Files\PIC 01

[03/05/2007|12:09] C:\Program Files\Pinnacle

[30/12/2004|12:16] C:\Program Files\Planning Manager

[04/01/2006|12:49] C:\Program Files\Plextor

[22/12/2008|13:55] C:\Program Files\PowerQuest

[06/02/2008|17:34] C:\Program Files\PS Utility

[22/05/2004|11:53] C:\Program Files\Quark

[10/10/2007|10:56] C:\Program Files\QuickTime

[12/03/2008|00:54] C:\Program Files\Real

[19/01/2009|17:42] C:\Program Files\Reference Assemblies

[27/03/2009|13:34] C:\Program Files\RegCleaner

[02/04/2008|11:55] C:\Program Files\RegConso

[14/04/2008|18:11] C:\Program Files\Riva

[14/04/2008|18:10] C:\Program Files\Riva FLV Encoder 2.0

[02/04/2008|17:17] C:\Program Files\RocketDock

[30/03/2007|11:14] C:\Program Files\Samsung

[14/09/2007|11:53] C:\Program Files\SavDisk

[11/01/2006|11:23] C:\Program Files\SDM

[07/02/2008|12:18] C:\Program Files\Secured_eMule

[28/12/2003|14:31] C:\Program Files\Services en ligne

[28/12/2003|16:44] C:\Program Files\SLD CODEC PACK 1.5

[06/08/2007|09:09] C:\Program Files\SoftChris

[17/01/2007|15:56] C:\Program Files\Sonic

[24/06/2008|12:40] C:\Program Files\Sony

[20/09/2007|18:58] C:\Program Files\Sony Setup

[02/04/2008|11:56] C:\Program Files\SourceTec

[08/02/2008|11:56] C:\Program Files\Sprint-Layout40 (Demo)

[05/02/2009|13:23] C:\Program Files\Spybot - Search & Destroy

[04/05/2007|10:31] C:\Program Files\Steinberg

[17/03/2009|13:48] C:\Program Files\SuperCopier2

[24/03/2005|17:49] C:\Program Files\Suunto

[02/04/2008|11:56] C:\Program Files\SyncMX

[04/05/2007|10:29] C:\Program Files\Syncrosoft

[23/10/2008|13:45] C:\Program Files\TagRename

[21/05/2008|09:49] C:\Program Files\Techcity

[17/03/2009|19:01] C:\Program Files\Trend Micro

[09/10/2007|01:34] C:\Program Files\Ulead Systems

[28/12/2003|16:00] C:\Program Files\Uninstall Information

[23/02/2006|17:01] C:\Program Files\UxTheme Multipatcher Fr

[19/10/2008|19:59] C:\Program Files\Veoh Networks

[19/12/2008|11:43] C:\Program Files\VIA

[12/11/2007|20:31] C:\Program Files\VideoLAN

[01/05/2007|16:26] C:\Program Files\Vimicro

[26/02/2007|11:10] C:\Program Files\VirtualDubMOD

[23/09/2004|18:09] C:\Program Files\Visicom Media

[29/05/2007|11:16] C:\Program Files\VSO

[03/02/2009|18:11] C:\Program Files\Waves

[24/04/2006|11:50] C:\Program Files\Web Publish

[28/04/2008|10:02] C:\Program Files\Winamp

[07/02/2008|12:01] C:\Program Files\Winamp Remote

[27/02/2008|11:32] C:\Program Files\Windows Live

[09/10/2007|01:36] C:\Program Files\Windows Media Components

[04/01/2007|16:25] C:\Program Files\Windows Media Connect 2

[22/01/2009|18:07] C:\Program Files\Windows Media Player

[22/01/2009|18:07] C:\Program Files\Windows NT

[20/01/2009|11:23] C:\Program Files\Windows Resource Kits

[25/01/2006|19:32] C:\Program Files\WindowsUpdate

[05/02/2004|20:22] C:\Program Files\WinMPG Video Convert

[05/02/2009|13:23] C:\Program Files\WinRAR

[20/03/2008|12:54] C:\Program Files\WinSauvegarde

[28/12/2003|14:34] C:\Program Files\xerox

[13/08/2007|23:50] C:\Program Files\X'nStop 2.5

[12/09/2008|10:07] C:\Program Files\XPC Tools

[03/03/2005|11:01] C:\Program Files\XviD

[01/02/2007|17:20] C:\Program Files\Yahoo!

[12/02/2008|11:35] C:\Program Files\Zoom Player

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[18/09/2008|15:34] C:\Program Files\Fichiers communs\ACD Systems

[20/03/2009|12:51] C:\Program Files\Fichiers communs\Adobe

[19/10/2008|20:37] C:\Program Files\Fichiers communs\Adobe AIR

[04/01/2006|12:52] C:\Program Files\Fichiers communs\Ahead

[17/02/2006|12:27] C:\Program Files\Fichiers communs\Atlence

[25/02/2009|18:46] C:\Program Files\Fichiers communs\AVSMedia

[14/04/2008|11:14] C:\Program Files\Fichiers communs\Designer

[03/02/2009|18:11] C:\Program Files\Fichiers communs\digidesign

[06/02/2008|18:02] C:\Program Files\Fichiers communs\InstallShield

[29/12/2003|11:57] C:\Program Files\Fichiers communs\Java

[06/01/2006|18:16] C:\Program Files\Fichiers communs\Logitech

[23/09/2004|17:56] C:\Program Files\Fichiers communs\Macromedia

[01/10/2007|17:59] C:\Program Files\Fichiers communs\Macrovision Shared

[05/03/2009|19:31] C:\Program Files\Fichiers communs\Microsoft Shared

[28/12/2003|14:32] C:\Program Files\Fichiers communs\MSSoap

[28/12/2003|14:25] C:\Program Files\Fichiers communs\ODBC

[25/01/2006|19:24] C:\Program Files\Fichiers communs\PACE Anti-Piracy

[12/03/2008|00:54] C:\Program Files\Fichiers communs\Real

[25/01/2006|12:01] C:\Program Files\Fichiers communs\Roxio Shared

[28/12/2003|14:32] C:\Program Files\Fichiers communs\Services

[17/01/2007|15:56] C:\Program Files\Fichiers communs\Sonic Shared

[09/10/2007|01:35] C:\Program Files\Fichiers communs\SONY Digital Images

[28/12/2003|14:25] C:\Program Files\Fichiers communs\SpeechEngines

[26/10/2006|15:11] C:\Program Files\Fichiers communs\SWF Studio

[04/01/2007|18:01] C:\Program Files\Fichiers communs\Symantec Shared

[22/01/2009|18:07] C:\Program Files\Fichiers communs\System

[09/10/2007|01:34] C:\Program Files\Fichiers communs\Ulead Systems

[27/02/2008|11:33] C:\Program Files\Fichiers communs\WindowsLiveInstaller

[12/03/2008|00:54] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 52 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-30 17:47:18

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 82

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\LESLUT~1\Mes documents\Ableton\Library\Presets\Audio Effects\Vinyl Distortion\Crack.adv

[F:30][D:8]-> C:\DOCUME~1\LESLUT~1\LOCALS~1\Temp

[F:31][D:0]-> C:\DOCUME~1\LESLUT~1\Cookies

[F:367][D:4]-> C:\DOCUME~1\LESLUT~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 30/03/2009|11:49 - Option : [1]

2 - "C:\Lop SD\LopR_2.txt" - 30/03/2009|17:50 - Option : [2]

--------------------\\ Fin du rapport a 17:50:02

Et le rapport HiJackThis :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:51:19, on 30/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\brsvc01a.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\brss01a.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Logitech\iTouch\iTouch.exe

C:\WINDOWS\Logi_MwX.Exe

C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

C:\WINDOWS\ZSSnp211.exe

C:\WINDOWS\Domino.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\RocketDock\RocketDock.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\Program Files\Zoom Player\zplayer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\HiJackThis.exe