bonjour, j'ai fait un test spybot et il me détecte 2 élément de torpig. j'ai essayé plusieurs logiciels pour le supprimer mais rien.
SVP j'ai vraiment besoin d'aide je joins le rapport fait avec comboscan
ComboScan v20070306.20 run by n on 2007-04-24 at 20:47:47
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created ComboScan Restore Point.
-- Last 5 Restore Point(s) --
5: 2007-04-24 18:48:08 UTC - RP115 - ComboScan Restore Point
4: 2007-04-24 10:57:38 UTC - RP114 - Spyware Doctor: Cleaning Threats
3: 2007-04-23 20:42:45 UTC - RP113 - Spyware Doctor: Cleaning Threats
2: 2007-04-23 20:13:49 UTC - RP112 - Spyware Doctor: Cleaning Threats
1: 2007-04-22 19:28:12 UTC - RP111 - Point de vérification système
Performed disk cleanup.
-- HijackThis (run as n.exe) ---------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 20:48:44, on 24/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\RF Wireless Mouse\cm20.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\dwwin.exe
C:\Documents and Settings\n\Local Settings\Temporary Internet Files\Content.IE5\2FYXO9AZ\comboscan[1].exe
C:\Program Files\Spyware Doctor\SDLoader.exe
C:\PROGRA~1\HIJACK~1\n.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.3558\swg.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Start RF Wireless Mouse] C:\Program Files\RF Wireless Mouse\cm20.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://www.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - Unknown owner - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
-- File Associations -----------------------------------------------------------
.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
1R Aavmker4 (avast! Asynchronous Virus Monitor) - C:\WINDOWS\system32\drivers\aavmker4.sys
2R AegisP (AEGIS Protocol (IEEE 802.1x) v3.0.0.5) - C:\WINDOWS\system32\drivers\AegisP.sys
3R Arp1394 (Protocole client ARP 1394) - C:\WINDOWS\system32\drivers\arp1394.sys
2R aswMon2 (avast! Standard Shield Support) - C:\WINDOWS\system32\drivers\aswmon2.sys
3R aswRdr - C:\WINDOWS\system32\drivers\aswRdr.sys
1R aswTdi (avast! Network Shield Support) - C:\WINDOWS\system32\drivers\aswTdi.sys
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys
3R BCM43XX (Pilote pour carte réseau Broadcom 802.11) - C:\WINDOWS\system32\drivers\BCMWL5.SYS
3S Bridge (Pont MAC) - C:\WINDOWS\system32\drivers\bridge.sys
3S BridgeMP (Miniport de pont MAC) - C:\WINDOWS\system32\drivers\bridge.sys
3S BTWUSB (WIDCOMM USB Bluetooth Driver) - C:\WINDOWS\system32\drivers\btwusb.sys
3R CAMCAUD (Conexant AMC Audio) - C:\WINDOWS\system32\drivers\camc6aud.sys
3R CAMCHALA - C:\WINDOWS\system32\drivers\camc6hal.sys
2R CdaC15BA - C:\WINDOWS\system32\drivers\CdaC15BA.SYS
0R d347bus - C:\WINDOWS\system32\drivers\d347bus.sys
0R d347prt - C:\WINDOWS\system32\drivers\d347prt.sys
1R eabfiltr - C:\WINDOWS\system32\drivers\eabfiltr.sys
3S eabusb - C:\WINDOWS\system32\drivers\EabUsb.sys
2R Hardlock - C:\WINDOWS\system32\drivers\hardlock.sys
2R Haspnt - C:\WINDOWS\system32\drivers\Haspnt.sys
3S HidUsb (Pilote de classe HID Microsoft) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HSFHWATI - C:\WINDOWS\system32\drivers\HSFHWATI.sys
3S HSF_DP - C:\WINDOWS\system32\drivers\HSF_DP.sys
1R IKFileFlt (File Filter Driver) - C:\WINDOWS\system32\drivers\ikfileflt.sys
1R IKFileSec (File Security Driver) - C:\WINDOWS\system32\drivers\ikfilesec.sys
1R IkSysFlt (System Filter Driver) - C:\WINDOWS\system32\drivers\iksysflt.sys
1R IKSysSec (System Security Driver) - C:\WINDOWS\system32\drivers\iksyssec.sys
4S InCDFs (InCD File System) - C:\WINDOWS\system32\drivers\InCDFs.sys (not found)
1S InCDPass - C:\WINDOWS\system32\drivers\InCDPass.sys (not found)
1S InCDRm (InCD Reader) - C:\WINDOWS\system32\drivers\InCDRm.sys (not found)
2R MDC8021X (AEGIS Protocol (IEEE 802.1x) v2.3.1.9) - C:\WINDOWS\system32\drivers\mdc8021x.sys
2R mdmxsdk - C:\WINDOWS\system32\drivers\mdmxsdk.sys
3S mouhid (Pilote HID de souris) - C:\WINDOWS\system32\drivers\mouhid.sys
3R NIC1394 (Pilote réseau 1394) - C:\WINDOWS\system32\drivers\nic1394.sys
0R ohci1394 (Contrôleur hôte Texas Instruments IEEE 1394 compatible OHCI (Open Host Controller Interface)) - C:\WINDOWS\system32\drivers\ohci1394.sys
3S PCANDIS5 (PCANDIS5 Protocol Driver) - C:\WINDOWS\system32\PCANDIS5.SYS
0R PxHelp20 - C:\WINDOWS\system32\drivers\pxhelp20.sys
3S Rasirda (Miniport réseau étendu (IrDA)) - C:\WINDOWS\system32\DRIVERS\rasirda.sys (not found)
3R RT2500USB (Hercules Wireless USB Dongle Driver) - C:\WINDOWS\system32\drivers\rt2500usb.sys
3R RTL8023xp (Realtek 10/100/1000 NIC Family all in one NDIS XP Driver) - C:\WINDOWS\system32\drivers\Rtlnicxp.sys
3R sdbus - C:\WINDOWS\system32\drivers\sdbus.sys
3S SMCIRDA (Pilote de périphérique SMC IrCC Miniport) - C:\WINDOWS\system32\drivers\smcirda.sys
3R SYMDNS - C:\WINDOWS\system32\drivers\symdns.sys
3R SymEvent - C:\Program Files\Symantec\SYMEVENT.SYS
3R SYMFW - C:\WINDOWS\system32\drivers\symfw.sys
3R SYMIDS - C:\WINDOWS\system32\drivers\symids.sys
3R SYMNDIS - C:\WINDOWS\system32\drivers\symndis.sys
3R SYMREDRV - C:\WINDOWS\system32\drivers\symredrv.sys
1R SYMTDI - C:\WINDOWS\system32\drivers\symtdi.sys
3R SynTP (Synaptics TouchPad Driver) - C:\WINDOWS\system32\drivers\SynTP.sys
3R tifm21 - C:\WINDOWS\system32\drivers\tifm21.sys
3S usbaudio (Pilote USB audio (WDM)) - C:\WINDOWS\system32\drivers\USBAUDIO.sys
3S usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Pilote miniport de contrôleur hôte ouvert USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3S usbscan (Pilote de scanneur USB) - C:\WINDOWS\system32\drivers\usbscan.sys
3S USBSTOR (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\usbstor.sys
3S winachsf - C:\WINDOWS\system32\drivers\HSF_CNXT.sys
1R WmiAcpi (Interface de gestion Microsoft Windows pour ACPI) - C:\WINDOWS\system32\drivers\wmiacpi.sys
3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
3S aspnet_state (Service d'état ASP.NET) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
2R aswUpdSv (avast! iAVS4 Control Service) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
2R Ati HotKey Poller - C:\WINDOWS\system32\Ati2evxx.exe
2R avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
3R avast! Mail Scanner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
3R avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
2R AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
3S Boonty Games - "C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"
2R C-DillaCdaC11BA - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
2R ccEvtMgr (Symantec Event Manager) - "C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon
2R ccSetMgr (Symantec Settings Manager) - "C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon
2R CLTNetCnService (Symantec Lic NetConnect service) - "C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon
2R gb - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R gusvc (Google Updater Service) - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
3R hpqwmi (HP WMI Interface) - C:\Program Files\HPQ\SHARED\HPQWMI.exe
3S IDriverT (InstallDriver Table Manager) - "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"
3S ISPwdSvc (Validation de mot de passe Symantec IS) - "C:\Program Files\Norton AntiVirus\isPwdSvc.exe"
2R LightScribeService (LightScribeService Direct Disc Labeling Service) - "C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe"
2R McNASvc (McAfee Network Agent) - "c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe"
2S mcpromgr (McAfee Protection Manager) - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
3S ose (Office Source Engine) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
3S sdAuxService (Spyware Doctor Auxiliary Service) - C:\Program Files\Spyware Doctor\svcntaux.exe
3S sdCoreService (Spyware Doctor Service) - C:\Program Files\Spyware Doctor\swdsvc.exe
3S Symantec Core LC - "C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe"
3R usnjsvc (Service Messenger Sharing Folders USN Journal Reader) - "C:\Program Files\MSN Messenger\usnsvc.exe"
-- Scheduled Tasks -------------------------------------------------------------
2007-04-15 01:21:08 256 --ah----- C:\WINDOWS\Tasks\McDefragTask.job<MCDEFR~1.JOB>
2007-01-24 12:59:37 354 --a------ C:\WINDOWS\Tasks\McAfee AntiSpyware.job<MCAFEE~1.JOB>
2007-01-01 02:00:28 344 --ah----- C:\WINDOWS\Tasks\McQcTask.job
-- Files created between 2007-03-24 and 2007-04-24 -----------------------------
2007-04-24 20:42:01 0 d-------- C:\WINDOWS\avxoscan
2007-04-24 19:20:16 131072 --a------ C:\WINDOWS\system32\datestamp.dll<DATEST~1.DLL>
2007-04-24 19:19:21 0 d-------- C:\Program Files\FBM Software<FBMSOF~1>
2007-04-23 22:05:02 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-04-23 22:04:35 26064 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-04-23 22:04:35 83536 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-04-23 22:04:35 59472 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-04-23 22:04:35 52304 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys<IKFILE~2.SYS>
2007-04-23 22:04:35 39248 --a------ C:\WINDOWS\system32\drivers\ikfileflt.sys<IKFILE~1.SYS>
2007-04-23 22:04:28 0 d-------- C:\Program Files\Spyware Doctor<SPYWAR~1>
2007-04-23 22:04:28 0 d-------- C:\Documents and Settings\n\Application Data\PC Tools<PCTOOL~1>
2007-04-23 22:04:23 626688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-04-23 12:54:16 0 d-------- C:\Program Files\NoAdware5.0<NOADWA~1.0>
2007-04-22 21:32:47 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-04-22 21:32:40 0 d-------- C:\Program Files\Grisoft
2007-04-22 15:38:49 29112 --a------ C:\WINDOWS\igwpmyl.exe
2007-04-16 19:16:36 0 d-------- C:\Documents and Settings\n\Application Data\BSplayer
2007-04-16 19:16:36 0 d-------- C:\Documents and Settings\n\Application Data\BSplayer Pro<BSPLAY~1>
2007-04-16 19:16:27 0 d-------- C:\Program Files\Webteh
2007-04-11 21:35:16 0 d-------- C:\WINDOWS\BBSTORE
2007-04-11 21:17:06 0 d-------- C:\Documents and Settings\All Users\Application Data\Broderbund Software<BRODER~1>
2007-04-11 21:10:17 114176 --a------ C:\WINDOWS\system32\SSCE4132.DLL
2007-04-11 21:10:17 53248 --a------ C:\WINDOWS\system32\PretzelSpellCheck.dll<PRETZE~1.DLL>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Fichiers communs\Broderbund<BRODER~1>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Broderbund<BRODER~1>
2007-04-11 21:10:16 90112 --a------ C:\WINDOWS\system32\ImageServerMI.dll<IMAGES~1.DLL>
2007-04-11 21:10:15 27648 --a------ C:\WINDOWS\system32\LFWPG11N.DLL
2007-04-11 21:10:13 102400 --a------ C:\WINDOWS\system32\PMovieServer.dll<PMOVIE~1.DLL>
2007-04-11 21:10:12 757760 --a------ C:\WINDOWS\system32\PMAppBuilder.dll<PMAPPB~1.DLL>
2007-04-11 21:10:12 45056 --a------ C:\WINDOWS\system32\ImportClient.dll<IMPORT~1.DLL>
2007-04-10 12:05:53 0 --a------ C:\svcipa.exe
2007-04-09 11:51:28 15939 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2007-04-05 17:28:26 0 d-------- C:\Documents and Settings\n\Application Data\MySpace
2007-04-05 17:28:24 0 d-------- C:\Program Files\MySpace
2007-04-04 20:14:11 0 d-------- C:\Program Files\BoontyGames<BOONTY~1>
2007-04-04 20:14:09 0 d-------- C:\Program Files\Boonty
2007-03-30 23:30:24 0 d-------- C:\Program Files\Securitoo<SECURI~1>
2007-03-30 23:30:16 0 d-------- C:\Program Files\Java
2007-03-30 23:29:58 0 d-------- C:\My Games<MYGAME~1>
2007-03-30 23:29:55 0 d-------- C:\SIERRA
2007-03-30 23:29:55 0 d-------- C:\Mes téléchargements<MESTLC~1>
2007-03-30 23:29:55 0 d-------- C:\Downloads<DOWNLO~1>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Voisinage réseau<VOISIN~2>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Voisinage d'impression<VOISIN~1>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Modèles<MODLES~1>
2007-03-30 23:29:37 0 dr------- C:\Documents and Settings\Default User\Mes documents<MESDOC~1>
2007-03-30 23:29:35 0 dr------- C:\Documents and Settings\Default User\Menu Démarrer<MENUDM~1>
2007-03-30 23:29:32 0 dr------- C:\Documents and Settings\Default User\Favoris
2007-03-30 23:29:31 0 d-------- C:\Documents and Settings\Default User\Bureau
2007-03-30 23:29:31 0 d-------- C:\Documents and Settings\Default User\Application Data\Symantec
2007-03-30 23:29:29 0 d-------- C:\Documents and Settings\Default User\Application Data\Apple Computer<APPLEC~1>
2007-03-28 22:13:12 0 d-------- C:\WSKETCH2
-- Find3M Report ---------------------------------------------------------------
2007-04-24 19:53:26 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-24 19:20:11 0 d---s---- C:\Documents and Settings\n\Application Data\Microsoft<MICROS~1>
2007-04-23 22:42:47 0 d-------- C:\Program Files\VirtualDubMOD<VIRTUA~1>
2007-04-23 20:42:22 0 d-------- C:\Program Files\eMule
2007-04-23 18:46:01 0 d-------- C:\Program Files\RF Wireless Mouse<RFWIRE~1>
2007-04-23 18:45:47 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-04-23 18:45:45 0 d-------- C:\Program Files\Norton AntiVirus<NORTON~1>
2007-04-23 18:45:01 0 d-------- C:\Program Files\MSN Messenger<MSNMES~1>
2007-04-23 18:44:29 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-04-23 18:43:43 0 d-------- C:\Program Files\Google
2007-04-23 18:43:26 0 d-------- C:\Program Files\Fichiers communs\Symantec Shared<SYMANT~1>
2007-04-23 18:42:46 0 d-------- C:\Program Files\Fichiers communs\LightScribe<LIGHTS~1>
2007-04-23 18:40:49 0 d-------- C:\Program Files\D-Tools
2007-04-21 12:25:47 74008 --a------ C:\Documents and Settings\n\Application Data\GDIPFONTCACHEV1.DAT<GDIPFO~1.DAT>
2007-04-18 18:16:59 733824 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-04-18 18:06:59 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-04-11 21:19:17 0 d-------- C:\Program Files\Microsoft Works<MICROS~2>
2007-04-11 21:19:17 0 d-------- C:\Program Files\Fichiers communs\Microsoft Shared<MICROS~1>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
2007-04-01 10:36:49 470214 --a----c- C:\WINDOWS\system32\perfh00C.dat
2007-04-01 10:36:49 71894 --a----c- C:\WINDOWS\system32\perfc00C.dat
2007-03-28 22:23:06 5632 --ahs---- C:\Program Files\Thumbs.db
2007-03-28 22:15:32 0 d-------- C:\Program Files\Fichiers communs\Services
2007-03-27 19:50:07 0 d-------- C:\Program Files\tr programm<TRPROG~1>
2007-03-17 00:42:34 41 ---h----- C:\WINDOWS\dsez5513.dat
2007-03-15 20:26:15 0 d-------- C:\Program Files\Windows Media Connect 2<WINDOW~4>
2007-03-15 20:26:07 0 d-------- C:\Program Files\Wanadoo Messager<WANADO~1>
2007-03-11 12:40:01 0 d-------- C:\Program Files\BitComet
2007-03-03 01:29:08 0 d-------- C:\Program Files\Fichiers communs\McAfee
2007-03-03 01:12:56 0 d-------- C:\Program Files\EA GAMES<EAGAME~1>
-- Registry Dump ---------------------------------------------------------------
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ccleaner"="\"C:\\Program Files\\CCleaner\\ccleaner.exe\" /AUTO"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"ATIPTA"="\"C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""
"HP Software Update"="C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"hpWirelessAssistant"="C:\\Program Files\\hpq\\HP Wireless Assistant\\HP Wireless Assistant.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"LSBWatcher"="c:\\hp\\drivers\\hplsbwatcher\\lsburnwatcher.exe"
"eabconfg.cpl"="C:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe /Start"
"Cpqset"="C:\\Program Files\\HPQ\\Default Settings\\cpqset.exe"
"Start RF Wireless Mouse"="C:\\Program Files\\RF Wireless Mouse\\cm20.exe"
"TkBellExe"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"EPSON Stylus DX3800 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIACE.EXE /P26 \"EPSON Stylus DX3800 Series\" /O6 \"USB001\" /M \"Stylus DX3800\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"ccApp"="\"C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccApp.exe\""
"osCheck"="\"C:\\Program Files\\Norton AntiVirus\\osCheck.exe\""
"IMJPMIG8.1"="\"C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE\" /Spoil /RemAdvDef /Migration32"
"DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
HKLM\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
gb
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{026ebd4e-cc98-11db-b3ce-0014a572ab54}]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
Shell\Open(&0)\command Recycled\ctfmon.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7618ea57-8842-11db-b366-0008d3035231}]
Shell\AutoRun\command F:\.\Recycled\Driveinfo.exe
Shell\Open\Command F:\.\Recycled\Driveinfo.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9892a78c-7f85-11db-923b-0014a572ab54}]
Shell\AutoRun\command .\Recycled\Driveinfo.exe
Shell\Open\Command .\Recycled\Driveinfo.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cc8cbf87-d6d3-11db-b3e1-0008d3035231}]
Shell\AutoRun\command .\Recycled\Driveinfo.exe
Shell\Open\Command .\Recycled\Driveinfo.exe
-- End of ComboScan: finished at 2007-04-24 at 20:49:35 ------------------------
ComboScan v20070306.20 run by n on 2007-04-24 at 21:01:44
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as n.exe) ---------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 21:01:46, on 24/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\RF Wireless Mouse\cm20.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\n\Local Settings\Temporary Internet Files\Content.IE5\2FYXO9AZ\comboscan[1].exe
C:\PROGRA~1\HIJACK~1\n.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.3558\swg.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Start RF Wireless Mouse] C:\Program Files\RF Wireless Mouse\cm20.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiStationLB.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://www.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - Unknown owner - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
-- Files created between 2007-03-24 and 2007-04-24 -----------------------------
2007-04-24 21:01:11 0 d-------- C:\WINDOWS\system32\ActiveScan<ACTIVE~1>
2007-04-24 21:01:08 0 d-------- C:\WINDOWS\LastGood
2007-04-24 20:42:01 0 d-------- C:\WINDOWS\avxoscan
2007-04-24 19:20:16 131072 --a------ C:\WINDOWS\system32\datestamp.dll<DATEST~1.DLL>
2007-04-24 19:19:21 0 d-------- C:\Program Files\FBM Software<FBMSOF~1>
2007-04-23 22:05:02 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-04-23 22:04:35 26064 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-04-23 22:04:35 83536 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-04-23 22:04:35 59472 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-04-23 22:04:35 52304 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys<IKFILE~2.SYS>
2007-04-23 22:04:35 39248 --a------ C:\WINDOWS\system32\drivers\ikfileflt.sys<IKFILE~1.SYS>
2007-04-23 22:04:28 0 d-------- C:\Program Files\Spyware Doctor<SPYWAR~1>
2007-04-23 22:04:28 0 d-------- C:\Documents and Settings\n\Application Data\PC Tools<PCTOOL~1>
2007-04-23 22:04:23 626688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-04-23 12:54:16 0 d-------- C:\Program Files\NoAdware5.0<NOADWA~1.0>
2007-04-22 21:32:47 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-04-22 21:32:40 0 d-------- C:\Program Files\Grisoft
2007-04-22 15:38:49 29112 --a------ C:\WINDOWS\igwpmyl.exe
2007-04-16 19:16:36 0 d-------- C:\Documents and Settings\n\Application Data\BSplayer
2007-04-16 19:16:36 0 d-------- C:\Documents and Settings\n\Application Data\BSplayer Pro<BSPLAY~1>
2007-04-16 19:16:27 0 d-------- C:\Program Files\Webteh
2007-04-11 21:35:16 0 d-------- C:\WINDOWS\BBSTORE
2007-04-11 21:17:06 0 d-------- C:\Documents and Settings\All Users\Application Data\Broderbund Software<BRODER~1>
2007-04-11 21:10:17 114176 --a------ C:\WINDOWS\system32\SSCE4132.DLL
2007-04-11 21:10:17 53248 --a------ C:\WINDOWS\system32\PretzelSpellCheck.dll<PRETZE~1.DLL>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Fichiers communs\Broderbund<BRODER~1>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Broderbund<BRODER~1>
2007-04-11 21:10:16 90112 --a------ C:\WINDOWS\system32\ImageServerMI.dll<IMAGES~1.DLL>
2007-04-11 21:10:15 27648 --a------ C:\WINDOWS\system32\LFWPG11N.DLL
2007-04-11 21:10:13 102400 --a------ C:\WINDOWS\system32\PMovieServer.dll<PMOVIE~1.DLL>
2007-04-11 21:10:12 757760 --a------ C:\WINDOWS\system32\PMAppBuilder.dll<PMAPPB~1.DLL>
2007-04-11 21:10:12 45056 --a------ C:\WINDOWS\system32\ImportClient.dll<IMPORT~1.DLL>
2007-04-10 12:05:53 0 --a------ C:\svcipa.exe
2007-04-09 11:51:28 15939 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2007-04-05 17:28:26 0 d-------- C:\Documents and Settings\n\Application Data\MySpace
2007-04-05 17:28:24 0 d-------- C:\Program Files\MySpace
2007-04-04 20:14:11 0 d-------- C:\Program Files\BoontyGames<BOONTY~1>
2007-04-04 20:14:09 0 d-------- C:\Program Files\Boonty
2007-03-30 23:30:24 0 d-------- C:\Program Files\Securitoo<SECURI~1>
2007-03-30 23:30:16 0 d-------- C:\Program Files\Java
2007-03-30 23:29:58 0 d-------- C:\My Games<MYGAME~1>
2007-03-30 23:29:55 0 d-------- C:\SIERRA
2007-03-30 23:29:55 0 d-------- C:\Mes téléchargements<MESTLC~1>
2007-03-30 23:29:55 0 d-------- C:\Downloads<DOWNLO~1>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Voisinage réseau<VOISIN~2>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Voisinage d'impression<VOISIN~1>
2007-03-30 23:29:38 0 d--h----- C:\Documents and Settings\Default User\Modèles<MODLES~1>
2007-03-30 23:29:37 0 dr------- C:\Documents and Settings\Default User\Mes documents<MESDOC~1>
2007-03-30 23:29:35 0 dr------- C:\Documents and Settings\Default User\Menu Démarrer<MENUDM~1>
2007-03-30 23:29:32 0 dr------- C:\Documents and Settings\Default User\Favoris
2007-03-30 23:29:31 0 d-------- C:\Documents and Settings\Default User\Bureau
2007-03-30 23:29:31 0 d-------- C:\Documents and Settings\Default User\Application Data\Symantec
2007-03-30 23:29:29 0 d-------- C:\Documents and Settings\Default User\Application Data\Apple Computer<APPLEC~1>
2007-03-28 22:13:12 0 d-------- C:\WSKETCH2
-- Find3M Report ---------------------------------------------------------------
2007-04-24 19:53:26 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-24 19:20:11 0 d---s---- C:\Documents and Settings\n\Application Data\Microsoft<MICROS~1>
2007-04-23 22:42:47 0 d-------- C:\Program Files\VirtualDubMOD<VIRTUA~1>
2007-04-23 20:42:22 0 d-------- C:\Program Files\eMule
2007-04-23 18:46:01 0 d-------- C:\Program Files\RF Wireless Mouse<RFWIRE~1>
2007-04-23 18:45:47 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-04-23 18:45:45 0 d-------- C:\Program Files\Norton AntiVirus<NORTON~1>
2007-04-23 18:45:01 0 d-------- C:\Program Files\MSN Messenger<MSNMES~1>
2007-04-23 18:44:29 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-04-23 18:43:43 0 d-------- C:\Program Files\Google
2007-04-23 18:43:26 0 d-------- C:\Program Files\Fichiers communs\Symantec Shared<SYMANT~1>
2007-04-23 18:42:46 0 d-------- C:\Program Files\Fichiers communs\LightScribe<LIGHTS~1>
2007-04-23 18:40:49 0 d-------- C:\Program Files\D-Tools
2007-04-21 12:25:47 74008 --a------ C:\Documents and Settings\n\Application Data\GDIPFONTCACHEV1.DAT<GDIPFO~1.DAT>
2007-04-18 18:16:59 733824 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-04-18 18:06:59 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-04-11 21:19:17 0 d-------- C:\Program Files\Microsoft Works<MICROS~2>
2007-04-11 21:19:17 0 d-------- C:\Program Files\Fichiers communs\Microsoft Shared<MICROS~1>
2007-04-11 21:10:17 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
2007-04-01 10:36:49 470214 --a----c- C:\WINDOWS\system32\perfh00C.dat
2007-04-01 10:36:49 71894 --a----c- C:\WINDOWS\system32\perfc00C.dat
2007-03-28 22:23:06 5632 --ahs---- C:\Program Files\Thumbs.db
2007-03-28 22:15:32 0 d-------- C:\Program Files\Fichiers communs\Services
2007-03-27 19:50:07 0 d-------- C:\Program Files\tr programm<TRPROG~1>
2007-03-17 00:42:34 41 ---h----- C:\WINDOWS\dsez5513.dat
2007-03-15 20:26:15 0 d-------- C:\Program Files\Windows Media Connect 2<WINDOW~4>
2007-03-15 20:26:07 0 d-------- C:\Program Files\Wanadoo Messager<WANADO~1>
2007-03-11 12:40:01 0 d-------- C:\Program Files\BitComet
2007-03-03 01:29:08 0 d-------- C:\Program Files\Fichiers communs\McAfee
2007-03-03 01:12:56 0 d-------- C:\Program Files\EA GAMES<EAGAME~1>
-- Registry Dump ---------------------------------------------------------------
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ccleaner"="\"C:\\Program Files\\CCleaner\\ccleaner.exe\" /AUTO"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"ATIPTA"="\"C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""
"HP Software Update"="C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"hpWirelessAssistant"="C:\\Program Files\\hpq\\HP Wireless Assistant\\HP Wireless Assistant.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"LSBWatcher"="c:\\hp\\drivers\\hplsbwatcher\\lsburnwatcher.exe"
"eabconfg.cpl"="C:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe /Start"
"Cpqset"="C:\\Program Files\\HPQ\\Default Settings\\cpqset.exe"
"Start RF Wireless Mouse"="C:\\Program Files\\RF Wireless Mouse\\cm20.exe"
"TkBellExe"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"EPSON Stylus DX3800 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIACE.EXE /P26 \"EPSON Stylus DX3800 Series\" /O6 \"USB001\" /M \"Stylus DX3800\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"ccApp"="\"C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccApp.exe\""
"osCheck"="\"C:\\Program Files\\Norton AntiVirus\\osCheck.exe\""
"IMJPMIG8.1"="\"C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE\" /Spoil /RemAdvDef /Migration32"
"DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1033"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
HKLM\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
gb
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{026ebd4e-cc98-11db-b3ce-0014a572ab54}]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
Shell\Open(&0)\command Recycled\ctfmon.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7618ea57-8842-11db-b366-0008d3035231}]
Shell\AutoRun\command F:\.\Recycled\Driveinfo.exe
Shell\Open\Command F:\.\Recycled\Driveinfo.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9892a78c-7f85-11db-923b-0014a572ab54}]
Shell\AutoRun\command .\Recycled\Driveinfo.exe
Shell\Open\Command .\Recycled\Driveinfo.exe
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cc8cbf87-d6d3-11db-b3e1-0008d3035231}]
Shell\AutoRun\command .\Recycled\Driveinfo.exe
Shell\Open\Command .\Recycled\Driveinfo.exe
-- End of ComboScan: finished at 2007-04-24 at 21:02:22 ------------------------
merci de m'aider emilie emybuterfly@hotmail.com
