Bug besoin de vous

Fermé
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007 - 6 nov. 2005 à 19:22
 Utilisateur anonyme - 7 nov. 2005 à 19:52
salut a vous je suis envie de pub ses horrible pourtant j ai spybot , ad aware et a²free et je fai souven des scan d hijack mais sa revien toujour je vous remet un scan :
Logfile of HijackThis v1.99.1
Scan saved at 19:21:25, on 06/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\mes telechargements\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [3DNADesktop] "C:\Program Files\3DNA\Resources\3dnasys.exe" -open
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0 -chkss
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IDMan] C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IDMan.exe /onboot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Icone Symbiose.lnk = C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Search the Web - C:\WINDOWS\Web\Ers_src.htm
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Download All Links with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Micro Application Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra 'Tools' menuitem: Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125532112546
O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\ktrql7951.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe

je vous remercie d'avance

17 réponses

Utilisateur anonyme
6 nov. 2005 à 19:56
salut
Télécharge l2mfix ici:

http://www.downloads.subratam.org/l2mfix.exe

Double clic sur l2mfix.exe pour lancer l'extraction
Dans le dossier l2mfix, double clic sur l2mfix.bat, appuie sur n'importe quelle touche puis choisis l'option #1 (et pas autre chose) et valide avec la touche entrée.
Le bloc note va s'ouvrir avec le résultat du scan.
Fais un copier coller du résultat ici.
*****
Maintenant relances l2mfix.bat
et choisis l'option 2
Il va te demander d'appuyer sur une touche pour redémarrer
appuie sur n'importe quelle touche et laisse le pc redémarrer
le bloc note va s'ouvrir, copie et colle le contenu ici
0
jean38 Messages postés 2534 Date d'inscription samedi 16 avril 2005 Statut Contributeur Dernière intervention 17 juillet 2017 47
6 nov. 2005 à 20:00
salut Régis,

juste une pensée (de plus ) pour toi car je pars demain matin dans le 59. Sniff mes montahgnes me manquent déjà...lol

Ho lille pas un drame.

A+

Jean
0
Utilisateur anonyme
6 nov. 2005 à 20:07
Salut jean
je penserais a toi !!
C est gentil en tout cas...

Tu vas a Lille? Attention a toi, des emeutes ont eclaté ...
0
jean38 Messages postés 2534 Date d'inscription samedi 16 avril 2005 Statut Contributeur Dernière intervention 17 juillet 2017 47
6 nov. 2005 à 20:37
oui m'en parle pas je viens de voir çà à la tv...

en plus je suis à coté de la gare et c'est déjà pas top en general...

ma fois on verra bien.

en tout cas merci de l'attention.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Utilisateur anonyme
6 nov. 2005 à 20:39
re,
oui fais gaffe a toi, surtout dans la banlieue Lilloise ;-)
Tourne pas non plus trop le soir dans les autres villes du coin comme Tourcoing ou Roubaix

;-)

Prends soin de toi mon ami
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
6 nov. 2005 à 22:49
le voila

L2MFIX find log 1.04a
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Reinstall]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\ktrql7951.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"


RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above
Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de)
This program is Freeware, use it on your own risk!

Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify:
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-NI) ALLOW Read BUILTIN\Utilisateurs
(ID-IO) ALLOW Read BUILTIN\Utilisateurs
(ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-NI) ALLOW Full access BUILTIN\Administrateurs
(ID-IO) ALLOW Full access BUILTIN\Administrateurs
(ID-NI) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE


**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{2CC8C42B-9460-5EDA-4ACE-E47C17B356C6}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{1EBC3533-B289-409F-9924-B84B3F0717D2}"="AceFTP Context Menu Shell Extension"
"{60CE0473-50F7-417B-A10F-6921827B9CA8}"="Acronis PrivacyExpert Shell Extension Class"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{2AA59FC0-31E8-42DA-9D3C-E9A52953853B}"="CopyToCD shell extension"
"{B446400D-0030-457b-8F64-422A19605186}"="Logitech Gallery"
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{330417E8-EF62-4047-82BE-D8305CEFF572}"="AMEncShlExt extension"
@="MicroBest Cracklock"
"{EB59D46C-6787-4423-BC85-E04B733E73B7}"=""
"{4DB63743-2B82-44BA-AB4E-6A21C0B97966}"=""
"{50FC833F-E248-459E-B92F-76ACE5AA3C87}"=""
"{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache"
"{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}"=""
"{0BE1F345-1DFF-4A84-B781-42740DFE66F4}"=""
"{845B1978-8AC9-447D-8ABD-419686EEC757}"=""
"{0B112BC7-950C-41AC-9979-A4C487DF05C7}"=""
"{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}"=""
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
"{E0D79304-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79305-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79306-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79307-84BE-11CE-9641-444553540000}"="WinZip"
"{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}"=""
"{CB3F986C-3595-4935-AEB4-AAB915D02A3F}"=""
"{AB77609F-2178-4E6F-9C4B-44AC179D937A}"="aý Context Menu Shell Extension"

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}]
@=""
"IDEx"="AD"

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\InprocServer32]
@="C:\\WINDOWS\\system32\\lxhsvc.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\InprocServer32]
@="C:\\WINDOWS\\system32\\dukquota.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\InprocServer32]
@="C:\\WINDOWS\\system32\\jcbexec.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\InprocServer32]
@="C:\\WINDOWS\\system32\\ddconfig.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\InprocServer32]
@="C:\\WINDOWS\\system32\\sOfrcdlg.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\InprocServer32]
@="C:\\WINDOWS\\system32\\kmdaze.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\InprocServer32]
@="C:\\WINDOWS\\system32\\mlj8l91u1.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
axstream.dll Sun 18 Sep 2005 20:53:38 ..S.R 235 452 229,93 K
azas0i~1.dll Tue 30 Aug 2005 17:29:20 ..S.R 234 739 229,23 K
cdyptui.dll Wed 5 Oct 2005 16:50:56 ..S.R 234 513 229,02 K
dlprov.dll Thu 6 Oct 2005 11:39:10 ..S.R 234 189 228,70 K
dn6801~1.dll Sun 18 Sep 2005 10:02:34 ..S.R 236 313 230,77 K
dnlo01~1.dll Sun 14 Aug 2005 18:47:36 ..S.R 233 749 228,27 K
dp8vb.dll Tue 20 Sep 2005 16:27:34 ..S.R 233 559 228,08 K
ducompos.dll Thu 3 Nov 2005 0:14:42 ..S.R 234 612 229,11 K
dwconfig.dll Mon 19 Sep 2005 6:47:26 ..S.R 235 452 229,93 K
dxskadp.dll Wed 21 Sep 2005 18:35:42 ..S.R 236 052 230,52 K
en88l1~1.dll Fri 2 Sep 2005 20:56:44 ..S.R 235 596 230,07 K
en8ql1~1.dll Mon 10 Oct 2005 22:21:18 ..S.R 233 526 228,05 K
enpml1~1.dll Wed 12 Oct 2005 17:58:44 ..S.R 233 321 227,85 K
f82m0i~1.dll Thu 3 Nov 2005 0:14:42 ..S.R 234 740 229,24 K
fn0021~1.dll Thu 27 Oct 2005 12:00:46 ..S.R 235 758 230,23 K
fpp403~1.dll Wed 7 Sep 2005 0:20:46 ..S.R 234 188 228,70 K
fprq03~1.dll Fri 2 Sep 2005 19:56:10 ..S.R 234 308 228,82 K
g240lc~1.dll Sun 14 Aug 2005 18:42:06 ..S.R 234 791 229,29 K
g6220g~1.dll Tue 6 Sep 2005 19:31:28 ..S.R 233 941 228,46 K
g6jolg~1.dll Sun 6 Nov 2005 4:56:40 ..S.R 234 272 228,78 K
gp22l3~1.dll Sun 16 Oct 2005 19:35:12 ..S.R 234 357 228,86 K
gpn6l3~1.dll Sat 24 Sep 2005 9:16:48 ..S.R 236 309 230,77 K
gpr0l3~1.dll Thu 1 Sep 2005 1:22:38 ..S.R 234 808 229,30 K
h42o0e~1.dll Sun 2 Oct 2005 20:58:40 ..... 234 513 229,02 K
hr0005~1.dll Fri 2 Sep 2005 23:34:02 ..S.R 233 720 228,24 K
hr0q05~1.dll Sun 11 Sep 2005 15:21:38 ..... 233 494 228,02 K
hrl205~1.dll Tue 6 Sep 2005 20:24:04 ..S.R 233 950 228,46 K
hrn805~1.dll Mon 31 Oct 2005 18:33:38 ..S.R 234 612 229,11 K
i0240a~1.dll Thu 25 Aug 2005 15:14:10 ..S.R 234 469 228,97 K
iiput.dll Sat 1 Oct 2005 9:37:08 ..S.R 236 807 231,25 K
irl2l5~1.dll Fri 21 Oct 2005 23:27:40 ..S.R 234 999 229,49 K
j8l40i~1.dll Mon 5 Sep 2005 9:37:56 ..S.R 234 153 228,66 K
jkl40i~1.dll Sun 2 Oct 2005 20:58:40 ..S.R 234 189 228,70 K
jr0025~1.dll Sun 18 Sep 2005 9:34:38 ..S.R 235 499 229,98 K
jt2m07~1.dll Fri 19 Aug 2005 23:44:14 ..S.R 235 179 229,66 K
jt8607~1.dll Mon 19 Sep 2005 6:55:26 ..S.R 235 452 229,93 K
k0lqla~1.dll Tue 6 Sep 2005 14:02:00 ..S.R 235 245 229,73 K
k244lc~1.dll Fri 9 Sep 2005 20:19:38 ..S.R 234 936 229,43 K
k6lqlg~1.dll Wed 10 Aug 2005 4:29:52 A.... 233 504 228,03 K
kjdca.dll Wed 28 Sep 2005 20:39:28 ..S.R 235 481 229,96 K
kmdaze.dll Sun 6 Nov 2005 12:08:04 ..S.R 235 869 230,34 K
ktn6l7~1.dll Thu 8 Sep 2005 10:59:02 ..S.R 236 747 231,20 K
ktrql7~1.dll Sun 6 Nov 2005 0:01:42 ..S.R 235 869 230,34 K
l8j8li~1.dll Wed 31 Aug 2005 20:02:20 ..S.R 233 715 228,23 K
lfwvc12n.dll Sun 25 Sep 2005 9:45:10 ..S.R 234 656 229,16 K
mecories.dll Wed 21 Sep 2005 17:22:52 ..S.R 235 265 229,75 K
mipi.dll Fri 30 Sep 2005 21:21:38 ..S.R 235 075 229,56 K
mlj8l9~1.dll Sun 14 Aug 2005 18:42:06 ..S.R 233 749 228,27 K
msdemui.dll Tue 4 Oct 2005 7:34:02 ..S.R 234 189 228,70 K
mvc71fra.dll Mon 26 Sep 2005 14:45:52 ..S.R 235 075 229,56 K
mvlol9~1.dll Wed 7 Sep 2005 22:01:44 ..S.R 236 429 230,89 K
mvrul9~1.dll Thu 13 Oct 2005 12:46:34 ..S.R 233 735 228,25 K
n2l8lc~1.dll Sun 28 Aug 2005 2:20:08 ..S.R 235 881 230,35 K
n66qlg~1.dll Thu 8 Sep 2005 18:48:08 ..S.R 233 519 228,04 K
odesvr.dll Thu 6 Oct 2005 20:18:56 ..S.R 235 961 230,43 K
p2p6lc~1.dll Tue 11 Oct 2005 15:10:18 ..S.R 236 177 230,64 K
pwqsp.dll Sat 24 Sep 2005 9:16:48 ..S.R 234 656 229,16 K
pwspl.dll Fri 23 Sep 2005 19:06:28 ..S.R 233 268 227,80 K
q0nu0a~1.dll Sun 2 Oct 2005 20:34:04 ..S.R 235 139 229,63 K
q6680g~1.dll Wed 7 Sep 2005 9:55:24 ..S.R 234 581 229,08 K
q8nuli~1.dll Sun 18 Sep 2005 9:36:32 ..... 235 452 229,93 K
qfartz.dll Sun 2 Oct 2005 20:18:22 ..S.R 233 375 227,90 K
rhsdlg.dll Fri 30 Sep 2005 9:24:46 ..S.R 236 807 231,25 K
rjcpldlg.dll Wed 21 Sep 2005 12:30:10 ..S.R 233 559 228,08 K
s0pu0a~1.dll Sat 10 Sep 2005 19:25:28 ..S.R 233 494 228,02 K
shsvc.dll Mon 3 Oct 2005 18:51:40 ..S.R 234 513 229,02 K
snncui.dll Sat 24 Sep 2005 13:55:58 ..S.R 234 656 229,16 K
suriptpw.dll Thu 6 Oct 2005 15:06:40 ..S.R 235 803 230,27 K
surmdll.dll Sun 18 Sep 2005 22:23:40 ..S.R 235 988 230,46 K
szfrslv.dll Mon 26 Sep 2005 19:57:06 ..S.R 233 641 228,16 K
wkhrm.dll Wed 21 Sep 2005 14:03:34 ..S.R 233 559 228,08 K
wmigest.dll Sun 18 Sep 2005 10:12:00 ..S.R 235 988 230,46 K
wobvw.dll Sun 2 Oct 2005 20:34:04 ..S.R 234 189 228,70 K
wvpencen.dll Thu 29 Sep 2005 9:35:56 ..S.R 235 075 229,56 K
wwsdmoe.dll Tue 27 Sep 2005 6:39:06 ..S.R 235 075 229,56 K
wzdrmnet.dll Sat 24 Sep 2005 18:27:30 ..S.R 235 693 230,17 K

76 items found: 76 files (72 H/S), 0 directories.
Total of file sizes: 17 845 169 bytes 17,02 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 5829-A9B1

R‚pertoire de C:\WINDOWS\System32

06/11/2005 12:08 235ÿ869 kmdaze.dll
06/11/2005 04:56 234ÿ272 g6jolg1316.dll
06/11/2005 00:01 235ÿ869 ktrql7951.dll
03/11/2005 18:54 <REP> dllcache
03/11/2005 00:14 234ÿ612 ducompos.dll
03/11/2005 00:14 234ÿ740 f82m0if1e82.dll
31/10/2005 18:33 234ÿ612 hrn8055ue.dll
27/10/2005 12:00 235ÿ758 fn0021dmg.dll
21/10/2005 23:27 234ÿ999 irl2l53o1.dll
16/10/2005 19:35 234ÿ357 gp22l3fo1.dll
13/10/2005 12:46 233ÿ735 mvrul9991.dll
12/10/2005 17:58 233ÿ321 enpml1711.dll
11/10/2005 15:10 236ÿ177 p2p6lc7s1f.dll
10/10/2005 22:21 233ÿ526 en8ql1l51.dll
06/10/2005 20:18 235ÿ961 odesvr.dll
06/10/2005 15:06 235ÿ803 suriptpw.dll
06/10/2005 11:39 234ÿ189 dlprov.dll
05/10/2005 16:50 234ÿ513 cdyptui.dll
04/10/2005 07:34 234ÿ189 msdemui.dll
03/10/2005 18:51 234ÿ513 shsvc.dll
02/10/2005 20:58 234ÿ189 jKl40i3qe8.dll
02/10/2005 20:34 234ÿ189 wobvw.dll
02/10/2005 20:34 235ÿ139 q0nu0a59ed.dll
02/10/2005 20:18 233ÿ375 qfartz.dll
01/10/2005 09:37 236ÿ807 iiput.dll
30/09/2005 21:21 235ÿ075 MIPI.DLL
30/09/2005 09:24 236ÿ807 rHsdlg.dll
29/09/2005 09:35 235ÿ075 wvpencen.dll
28/09/2005 20:39 235ÿ481 kjdca.dll
27/09/2005 06:39 235ÿ075 wwsdmoe.dll
26/09/2005 19:57 233ÿ641 sZfrslv.dll
26/09/2005 14:45 235ÿ075 MVC71FRA.DLL
25/09/2005 09:45 234ÿ656 Lfwvc12n.dll
24/09/2005 18:27 235ÿ693 WZDRMNet.dll
24/09/2005 13:55 234ÿ656 snncui.dll
24/09/2005 09:16 234ÿ656 pWqsp.dll
24/09/2005 09:16 236ÿ309 gpn6l35s1.dll
23/09/2005 19:06 233ÿ268 pwspl.dll
21/09/2005 18:35 236ÿ052 dxskadp.dll
21/09/2005 17:22 235ÿ265 mecories.dll
21/09/2005 14:03 233ÿ559 WkhRm.dll
21/09/2005 12:30 233ÿ559 rJcpldlg.dll
20/09/2005 16:27 233ÿ559 dp8vb.dll
19/09/2005 06:55 235ÿ452 jt8607lse.dll
19/09/2005 06:47 235ÿ452 dwconfig.dll
18/09/2005 22:23 235ÿ988 surmdll.dll
18/09/2005 20:53 235ÿ452 axstream.dll
18/09/2005 10:11 235ÿ988 wmigest.dll
18/09/2005 10:02 236ÿ313 dn6801jue.dll
18/09/2005 09:34 235ÿ499 jr0025dmg.dll
10/09/2005 19:25 233ÿ494 s0pu0a79ed.dll
09/09/2005 20:19 234ÿ936 k244lchq1f4e.dll
08/09/2005 18:48 233ÿ519 n66qlgj516o.dll
08/09/2005 10:59 236ÿ747 ktn6l75s1.dll
07/09/2005 22:01 236ÿ429 mvlol9331.dll
07/09/2005 09:55 234ÿ581 q6680gjue6o80.dll
07/09/2005 00:20 234ÿ188 fpp4037qe.dll
06/09/2005 20:24 233ÿ950 hrl2053oe.dll
06/09/2005 19:31 233ÿ941 g6220gfoe62c0.dll
06/09/2005 14:01 235ÿ245 k0lqla351d.dll
05/09/2005 09:37 234ÿ153 j8l40i3qe8.dll
02/09/2005 23:34 233ÿ720 hr0005dme.dll
02/09/2005 20:56 235ÿ596 en88l1lu1.dll
02/09/2005 19:56 234ÿ308 fprq0395e.dll
01/09/2005 01:22 234ÿ808 gpr0l39m1.dll
31/08/2005 20:02 233ÿ715 l8j8li1u18.dll
30/08/2005 17:29 234ÿ739 azas0id7e80.dll
28/08/2005 02:20 235ÿ881 n2l8lc3u1f.dll
25/08/2005 15:14 234ÿ469 i0240afqed2e0.dll
19/08/2005 23:44 235ÿ179 jt2m07f1e.dll
14/08/2005 18:47 233ÿ749 dnlo0133e.dll
14/08/2005 18:42 233ÿ749 mlj8l91u1.dll
14/08/2005 18:42 234ÿ791 g240lchm1f4a.dll
01/08/2005 02:54 235ÿ174 sOfrcdlg.dll
31/07/2005 17:27 233ÿ720 m8lsli3718.dll
28/07/2005 22:08 233ÿ720 ddconfig.dll
28/07/2005 14:21 233ÿ720 jcbexec.dll
27/07/2005 23:58 235ÿ253 lvn6095se.dll
27/07/2005 23:58 235ÿ474 o4nsle571h.dll
26/07/2005 22:16 234ÿ831 gpjol3131.dll
26/07/2005 22:16 233ÿ720 dukquota.dll
26/07/2005 17:48 235ÿ400 j84olih3184.dll
26/07/2005 17:48 235ÿ684 r46ulej91ho.dll
25/07/2005 21:02 235ÿ115 j6j60g1se6.dll
25/07/2005 20:39 235ÿ192 lvnu0959e.dll
25/07/2005 20:38 233ÿ720 lvr0099me.dll
25/07/2005 18:50 233ÿ720 n08o0al3edq.dll
25/07/2005 18:26 234ÿ442 gp8ql3l51.dll
25/07/2005 18:26 233ÿ720 tabyuv.dll
25/07/2005 18:24 235ÿ177 e4jmle111h.dll
25/07/2005 18:24 233ÿ720 otbc16gt.dll
25/07/2005 18:24 235ÿ539 mvj8l91u1.dll
25/07/2005 18:20 234ÿ927 mv0sl9d71.dll
25/07/2005 18:20 235ÿ320 i006lads1d06.dll
25/07/2005 18:18 235ÿ382 o266lcjs1fo6.dll
25/07/2005 18:17 235ÿ164 k444lehq1h4e.dll
25/07/2005 18:03 235ÿ067 d00mlad11d0.dll
25/07/2005 17:29 235ÿ521 ktp6l77s1.dll
25/07/2005 14:36 234ÿ725 dn6m01j1e.dll
25/07/2005 14:34 235ÿ163 mv24l9fq1.dll
25/07/2005 14:25 235ÿ536 irl8l53u1.dll
25/07/2005 14:25 235ÿ289 mv6ql9j51.dll
25/07/2005 14:20 233ÿ836 e6jm0g11e6.dll
24/07/2005 19:29 233ÿ958 fpn0035me.dll
24/07/2005 19:29 234ÿ242 j22q0cf5ef2.dll
24/07/2005 19:19 234ÿ468 g2lm0c31ef.dll
24/07/2005 19:19 233ÿ248 lxhsvc.dll
24/07/2005 14:22 233ÿ580 j80s0id7e80.dll
24/07/2005 10:53 233ÿ611 o2660cjsefo60.dll
24/07/2005 10:52 234ÿ599 dnl6013se.dll
23/07/2005 04:08 233ÿ640 k8pmli7118.dll
23/07/2005 04:08 234ÿ033 hr8s05l7e.dll
23/07/2005 04:04 234ÿ797 irl0l53m1.dll
23/07/2005 00:17 232ÿ231 gpr8l39u1.dll
05/07/2005 01:54 <REP> Microsoft
113 fichier(s) 26ÿ523ÿ584 octets
2 R‚p(s) 7ÿ181ÿ938ÿ688 octets libres
0
Utilisateur anonyme
7 nov. 2005 à 13:16
salut
tu l as relancer et fais option 2?

a+
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
7 nov. 2005 à 13:37
oui
ces faiyt
0
Utilisateur anonyme
7 nov. 2005 à 18:31
ok,
remet un hijack this stp

a+
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
7 nov. 2005 à 18:56
e voila

Logfile of HijackThis v1.99.1
Scan saved at 18:56:30, on 07/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\WoW-FE\WoW-FE.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\mes telechargements\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [3DNADesktop] "C:\Program Files\3DNA\Resources\3dnasys.exe" -open
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0 -chkss
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IDMan] C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IDMan.exe /onboot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Icone Symbiose.lnk = C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Search the Web - C:\WINDOWS\Web\Ers_src.htm
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Download All Links with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Micro Application Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra 'Tools' menuitem: Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125532112546
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
0
Utilisateur anonyme
7 nov. 2005 à 19:02
re,
ou en sont tes soucis?

a+
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
7 nov. 2005 à 19:20
beh j ai plein de bug aider moi
0
Utilisateur anonyme
7 nov. 2005 à 19:25
re,
c est vague pour essayer de t aider

peux tu etre plus explicite?

a+
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
7 nov. 2005 à 19:30
ok j ai plein de pub de site qui s affiche tout le temp
0
Utilisateur anonyme
7 nov. 2005 à 19:36
re,
tu peux me le decrire?
Un titre? les fotos? toujours les memes?

Lance ce scan en ligne:
http://www.bitdefender.fr/scan8/ie.html
Copie/colle le rapport

A+
0
piaffie Messages postés 19 Date d'inscription jeudi 11 août 2005 Statut Membre Dernière intervention 13 février 2007
7 nov. 2005 à 19:49
0
Utilisateur anonyme
7 nov. 2005 à 19:52
ok,
on verra apres le scan

bon appetit le forum
0