Fenêtres intenpestives ! Infection ?Fermé

Question

Bonjour,
J'ai des fenêtres qui s'affichent quand je surf !
Genre une erreur a été détectée charger drivecleaner, ou error ....
Voici ce que donne hijackths :
Logfile of HijackThis v1.99.1
Scan saved at 04:16:45, on 19/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Reverso\Reverso Translation Server\LogoMedia TranslateDotNet Server.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1\mcafeeedirsvcedirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Mcafee\MWL\MwlSvc.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SBCSSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Babylon\Babylon.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mcafee\MWL\MWLGui.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SBCSTray.exe
C:\Program Files\VoissaNoPubs\VoissaNoPubs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\3D Photo Browser\3DPhotoBrowser.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\ScanSoft\NaturallySpeaking\Program
atspeak.exe
C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
E:\hijackthis\hijackthis_hijackthis_1.99.1_anglais_17891.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Systran50perso.IEPlugIn - {A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} - C:\Program Files\SYSTRAN\5.0\Personal\IEPlugIn.dll
O3 - Toolbar: &Reverso Translator - {995B2B9A-FCC5-4BE8-B98F-E9CD53C514FE} - C:\PROGRA~1\Reverso\REVERS~2\REVERS~1.DLL
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [MWLExe] C:\Program Files\Mcafee\MWL\MWLGui.exe /Start
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [SBCSTray] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SBCSTray.exe
O4 - HKCU\..\Run: [Voissa No Pubs] C:\Program Files\VoissaNoPubs\VoissaNoPubs.exe -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: 3D Photo Browser.lnk = C:\Program Files\3D Photo Browser\3DPhotoBrowser.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Dragon NaturallySpeaking.lnk = C:\Program Files\ScanSoft\NaturallySpeaking\Program
atspeak.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Ask  Harrap's Shorter.lnk = ?
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: SnagIt 7.lnk = C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Capturer ! - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing)
O9 - Extra 'Tools' menuitem: Capturer ce web - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/fr/4,0,0,90/mcinsctl.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/fr/1,0,0,23/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,4941/mcfscan.cab
O18 - Protocol: bw+0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw+0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw-0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw-0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw00 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw00s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw10 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw10s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw20 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw20s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw30 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw30s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw40 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw40s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw50 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw50s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw60 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw60s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw70 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw70s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw80 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw80s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw90 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bw90s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwa0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwa0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwb0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwb0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwc0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwc0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwd0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwd0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwe0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwe0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwf0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwf0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwg0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwh0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwh0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwi0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwi0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwj0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwj0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwk0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwk0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwl0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwl0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwm0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwm0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwn0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwn0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwo0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwo0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwp0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwp0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwq0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwq0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwr0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwr0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bws0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bws0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwt0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwt0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwu0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwu0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwv0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwv0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bww0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bww0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwx0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwx0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwy0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwy0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwz0 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: bwz0s - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C34A8AE5-D2F2-4C37-A6D0-3A5BBA4F8B89} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: FFW - Unknown owner - C:\DOCUME~1\PROXIA~1\LOCALS~1\Temp\FFW.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\Reverso\Reverso Translation Server\LogoMedia TranslateDotNet Server.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: MBackMonitor -   - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafeeedirsvcedirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe
O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: McAfee Wireless Network Security Service (MWLSvc) - McAfee, Inc. - C:\Program Files\Mcafee\MWL\MwlSvc.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SBCSSvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

que dois-je faire merci !

Utilisateur anonyme · Answer

Salut

bah dit donc, il démarre vite ton PC ? lol :P

Télécharge ceci sur ton bureau :
http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip

Fait un clic droit sur navilog1.zip et choisissez "tout extraire" 
Ensuite double clic sur navilog1.bat 
Laisse toi guidé. Au menu principal, choisis 1 et valide

Patiente jusqu'au message : 
Analyse Termine le ..... 
Appuye sur une touche, comme demandé, le bloc note va s'ouvrir
Copie-colle l'intégralité puis poste le contenu ici
Le rapport est aussi sauvegardé à la racine du disque (fixnavi.txt)

Ben-jdu23 · Answer

moi je l'ai fait sa donne sa:
Search Navipromo version 3.4.2 commencé le 25/01/2008 à 20:46:52,73

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis L:\Program Files
avilog1
Mise à jour le 21.01.2008 à 14h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans L:\WINDOWS ***



*** Recherche dossiers dans L:\Program Files ***



*** Recherche dossiers dans L:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "L:\Documents and Settings\Benji\application data" *** 

...\MessengerSkinner trouvé !


*** Recherche dossiers dans "L:\Documents and Settings\Benji\local settings\application data" *** 



*** Recherche dossiers dans "L:\Documents and Settings\Benji\MENUDM~1\PROGRA~1" *** 


*** Recherche dossiers dans L:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

L:\Documents and Settings\Benji\Local Settings\Application Data
cgotj.dat
L:\Documents and Settings\Benji\Local Settings\Application Data
cgotj.exe
L:\Documents and Settings\Benji\Local Settings\Application Data
cgotj_nav.dat
L:\Documents and Settings\Benji\Local Settings\Application Data
cgotj_navps.dat



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans L:\WINDOWS\system32 *

Fichiers trouvés :

ottbiemmw.exe trouvé ! 
ottbiemmw.dat trouvé ! 
ottbiemmw_nav.dat trouvé ! 
ottbiemmw_navps.dat trouvé ! 
tixwpouf.exe trouvé ! 
tixwpouf.dat trouvé ! 
tixwpouf_nav.dat trouvé ! 
tixwpouf_navps.dat trouvé ! 
vdleeos.exe trouvé ! 
vdleeos.dat trouvé ! 
vdleeos_nav.dat trouvé ! 
vdleeos_navps.dat trouvé ! 

* Recherche dans "L:\Documents and Settings\Benji\local settings\application data" * 

Fichiers trouvés :

ncgotj.exe trouvé ! 



*** Recherche fichiers *** 


L:\WINDOWS\system32
vs2.inf trouvé !


*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans L:\WINDOWS\system32 :

diszqczqb.dat trouvé !
npvqevx.dat trouvé !
ottbiemmw.dat trouvé !
ptrdsrxpfa.dat trouvé !
tixwpouf.dat trouvé !
vdleeos.dat trouvé !
zhxaynwhrh.dat trouvé !
diszqczqb_nav.dat trouvé !
npvqevx_nav.dat trouvé !
ottbiemmw_nav.dat trouvé !
ptrdsrxpfa_nav.dat trouvé !
tixwpouf_nav.dat trouvé !
vdleeos_nav.dat trouvé !
zhxaynwhrh_nav.dat trouvé !

* Dans "L:\Documents and Settings\Benji\local settings\application data" : 

ncgotj.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !

4)Recherche fichiers connus :



*** Analyse terminée le 25/01/2008 à 20:49:46,90 ***

Fenêtres intenpestives ! Infection ?

2 réponses

Discussions similaires

Newsletters