Problèmes de virus et de pub intempestives !Résolu/Fermé

Question

Bonjour,
     Suite au malheureux téléchargement de bitdownload, j'ai "récolté" le Magnifique et quasi-Indestructible !!!n'est-ce pas!!!. J'ai donc suivi vos instruction et vous envoie les trois rapport demandés pour vérifications. Merci de votre future réponse. 
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
 + Créé à:	13:11:17 03/02/2008

 + Résultat de l'analyse:	



C:\Documents and Settings\Laura.NOM-FB9B15D2723\Local Settings\Temporary Internet Files\Content.IE5\1ZI2Y908\PLAY[1].EXE -> Downloader.Agent.dzm : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP618\A0343832.EXE -> Downloader.Agent.dzm : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP620\A0348806.EXE -> Downloader.Agent.dzm : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Local Settings\Temporary Internet Files\Content.IE5\0SD7QBHY\flash[1].js -> Downloader.Agent.zf : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Local Settings\Temporary Internet Files\Content.IE5\OEK076BN\PLAY_MP3[1].exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP612\A0340433.exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP612\A0340445.exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP615\A0341655.exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP615\A0341656.exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\Documents and Settings\Gaby\Local Settings\Temp\aupd.exe -> Not-A-Virus.Adware.BHO : Aucune action entreprise.
C:\Program Files	hemexp\oswdvaz118.exe -> Not-A-Virus.Adware.OneStep : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@247realmedia[1].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\Cookies\babette_et_denis@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adbrite.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@buycom.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@bwincom.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@msnaccountservices.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@msnlivefavorites.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@sevenloadgmbh.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@snapfish.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\LocalService\Cookies\system@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@karavel.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adserver.71i[1].txt -> TrackingCookie.71i : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@7search[1].txt -> TrackingCookie.7search : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@www.abcsearch[1].txt -> TrackingCookie.Abcsearch : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@3.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@www.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adrenaline[1].txt -> TrackingCookie.Adrenaline : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adrevolver[2].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@media.adrevolver[3].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\Gaby\Cookies\gaby@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Cookies\laura@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\guillaume_2\Cookies\guillaume_2@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
BitDefender Online Scanner
  
  
 
Scan report generated at: Sun, Feb 03, 2008 - 18:25:40
 
 
  
  
 
Scan path: C:\;D:\;E:\;G:\;H:\;I:\;J:\;
  
  
 
 
  
  
 
Statistics
 
Time
 02:29:02
 
Files
 700779
 
Folders
 16212
 
Boot Sectors
 3
 
Archives
 19907
 
Packed Files
 49058
 
  
  
 
Results
 
Identified Viruses 
 13
 
Infected Files 
 26
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 0
 
Deleted Files
 25
 
  
  
 
Engines Info
 
Virus Definitions
 978776
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 16
 
Archive plugins
 41
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 5
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb=>archstored:00000013.fil
 Detected with: Application.Generic.2599
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb=>archstored:00000013.fil
 Deleted
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Infected with: Trojan.Dloader.AMA
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Detected with: Adware.NewDotNet.BK
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Detected with: Adware.OneStep.A
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Disinfection failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Detected with: Adware.NewDotNet.BK
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Program Files\Internet Explorer\msimg32.dll
 Detected with: Adware.MyWebSearch.M
 
C:\Program Files\Internet Explorer\msimg32.dll
 Disinfection failed
 
C:\Program Files\Internet Explorer\msimg32.dll
 Delete failed
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc3.exe=>(NSIS o)=>lzma_solid_nsis0005
 Infected with: Trojan.Obfus.6.Gen
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc3.exe=>(NSIS o)=>lzma_solid_nsis0005
 Disinfection failed
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc3.exe=>(NSIS o)=>lzma_solid_nsis0005
 Deleted
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc3.exe=>(NSIS o)
 Update failed
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc4.zip=>BitDownload Setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Infected with: Trojan.Obfus.6.Gen
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc4.zip=>BitDownload Setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Disinfection failed
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc4.zip=>BitDownload Setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Deleted
 
C:\RECYCLER\S-1-5-21-995860206-129333964-1749094425-1018\Dc4.zip=>BitDownload Setup.exe=>(NSIS o)
 Update failed
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP576\A0318779.exe=>(NSIS o)=>lzma_solid_nsis0002
 Detected with: Adware.Navipromo.GO
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP576\A0318779.exe=>(NSIS o)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP576\A0318779.exe=>(NSIS o)=>lzma_solid_nsis0002
 Deleted
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP576\A0318779.exe=>(NSIS o)
 Update failed
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP620\A0348671.exe=>(NSIS o)=>lzma_solid_nsis0005
 Infected with: Trojan.Obfus.6.Gen
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP620\A0348671.exe=>(NSIS o)=>lzma_solid_nsis0005
 Disinfection failed
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP620\A0348671.exe=>(NSIS o)=>lzma_solid_nsis0005
 Deleted
 
C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP620\A0348671.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005
 Disinfection failed
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005
 Deleted
 
C:\WINDOWS\pack.epk=>(NSIS 2g)
 Update failed
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Deleted
 
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)
 Update failed
 
C:\WINDOWS\system32\dvtwnb.exe
 Infected with: Trojan.Skintrim.ALG
 
C:\WINDOWS\system32\dvtwnb.exe
 Deleted
 
C:\WINDOWS\system32\f3PSSavr.scr
 Detected with: Adware.Msearch.O
 
C:\WINDOWS\system32\f3PSSavr.scr
 Disinfection failed
 
C:\WINDOWS\system32\f3PSSavr.scr
 Deleted
 
C:\WINDOWS\system32\jprrefexsg.exe
 Infected with: Trojan.Skintrim.ANA
 
C:\WINDOWS\system32\jprrefexsg.exe
 Deleted
 
C:\WINDOWS\system32\snrzpu.exe
 Infected with: Trojan.Skintrim.AMM
 
C:\WINDOWS\system32\snrzpu.exe
 Deleted
 
C:\WINDOWS\system32\xvpojylh.exe
 Detected with: Adware.Navipromo.BLI
 
C:\WINDOWS\system32\xvpojylh.exe
 Disinfection failed
 
C:\WINDOWS\system32\xvpojylh.exe
 Deleted
 
C:\WINDOWS\system32\ymklhyipo.exe
 Infected with: Trojan.Skintrim.AED
 
C:\WINDOWS\system32\ymklhyipo.exe
 Deleted
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0006
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0006
 Disinfection failed
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0006
 Deleted
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
 Deleted
 
C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)
 Update failed
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Disinfection failed
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0005
 Deleted
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Detected with: Adware.Navipromo.GO
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
 Deleted
 
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe=>(NSIS o)=>lzma_solid_nsis0013=>(NSIS g)
 Update failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Infected with: Trojan.Dloader.AMA
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Deleted
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Detected with: Adware.NewDotNet.BK
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Deleted
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Detected with: Adware.OneStep.A
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Disinfection failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Deleted
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)
 Update failed
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Detected with: Adware.NewDotNet.BK
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Deleted
 
C:\WINDOWS\Temp\ONEF8.tmp\upgrade.exe=>(NSIS o)
 Update failed
 
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:36:40, on 03/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Windows Live\installer\WLSetupSvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Registry Defender\RegistryDefender.exe
C:\Program Files\Microsoft Works\WksWP.exe
C:\Program Files\Microsoft Works\WkDStore.exe
C:\Program Files\Microsoft Works\wkgdcach.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www1.incredimail.com/english/download/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: BrowsingEnhancer - {5ABBD91B-0215-2FE1-7A7E-753F05B40CB8} - C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1009\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1009\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User '?')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1010\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1014\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1015\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Laura')
O4 - HKUS\S-1-5-21-995860206-129333964-1749094425-1017\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'guillaume_2')
O4 - S-1-5-21-995860206-129333964-1749094425-1009 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User '?')
O4 - S-1-5-21-995860206-129333964-1749094425-1010 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User '?')
O4 - S-1-5-21-995860206-129333964-1749094425-1014 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User '?')
O4 - S-1-5-21-995860206-129333964-1749094425-1015 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Laura')
O4 - S-1-5-21-995860206-129333964-1749094425-1015 User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Laura')
O4 - S-1-5-21-995860206-129333964-1749094425-1017 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'guillaume_2')
O4 - S-1-5-21-995860206-129333964-1749094425-1017 User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'guillaume_2')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: RegistryDefender.lnk = C:\Program Files\Registry Defender\RegistryDefender.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {59514505-D207-11D5-8D11-000102B211C7} (ActiveFormX Contrôle) - http://82.196.6.47/iShop_injector/PDownLoadActiveX.ocx
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1\RpcSandraSrv.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 0: (no name) - http://moncompte.neuf.fr/img/images_contact/titre.gif

jlpjlp · Answer

slt,


utilise  pour supprimer tes traces (vire bien les ficheirs temporaires)

CCLEANER: (lance un nettoyage et répare 3 fois le registre) sans installer la barre yahoo 

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

_________________


Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) 

_________________
refais avg antispyware car tu a ignoré ce qui a été trouvé! il faut tout virer et colle le rapport

babette270466 · Answer

salut Jlpjlp,                                                                                                                                                                                                   J'ai déjà envoyé la suite de mes rapports mais je ne crois pas les avoir validés alors je recommence, merci de m'avoir répondu et voici mon dernier rapport avg tout nettoyé cette fois-ci!!!...                                                                                                                                            ---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	16:08:21 04/02/2008

 + Résultat de l'analyse:	



C:\Documents and Settings\Gaby\Local Settings\Temp\aupd.exe -> Not-A-Virus.Adware.BHO : Nettoyé.
C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\Cookies\babette_et_denis@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.


Fin du rapport     

SUIVI DU RAPPORT DE NAVILOG

Search Navipromo version 3.4.2 commencé le 04/02/2008 à 16:12:35,23

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***

C:\Program Files\MessengerSkinner trouvé !


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\MENUDM~1\PROGRA~1" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

Fichiers trouvés :

azxcmjyv.exe trouvé ! 
azxcmjyv.dat trouvé ! 
azxcmjyv_nav.dat trouvé ! 
azxcmjyv_navps.dat trouvé ! 
azxcmjyv.exe trouvé ! 
azxcmjyv.dat trouvé ! 
azxcmjyv_nav.dat trouvé ! 
azxcmjyv_navps.dat trouvé ! 

* Recherche dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" * 



*** Recherche fichiers *** 


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32
vs2.inf trouvé !


*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :

azxcmjyv.dat trouvé !
owypszuafg.dat trouvé !
woouuqsv.dat trouvé !
wvanozsc.dat trouvé !
azxcmjyv_nav.dat trouvé !
owypszuafg_nav.dat trouvé !
qvmgneu_nav.dat trouvé !
woouuqsv_nav.dat trouvé !
wvanozsc_nav.dat trouvé !
woouuqsv_navup.dat trouvé !
bpcqesfthv_navtmp.dat trouvé !
fjirgxwbct_navtmp.dat trouvé !
comlhziasv.exe trouvé !
cterxnb.exe trouvé !
fwbjiuklap.exe trouvé !
hfcmiskb.exe trouvé !
hfxlijgme.exe trouvé !
lvgxihsdo.exe trouvé !
mfkpdwrq.exe trouvé !
nfzeaxltv.exe trouvé !
ocrjpfem.exe trouvé !
psyrhjtmg.exe trouvé !
qabugmlc.exe trouvé !
qjosxknyc.exe trouvé !
sptofnyuz.exe trouvé !
stminke.exe trouvé !
tdquvcnlmp.exe trouvé !
tyzmndk.exe trouvé !
vdrexy.exe trouvé !
vyztqgwdin.exe trouvé !
xgmlpy.exe trouvé !

* Dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" : 


3)Recherche Certificats :

Certificat Egroup trouvé !

4)Recherche fichiers connus :



*** Analyse terminée le 04/02/2008 à 16:27:03,89 ***
   merci de continuer à m'aider....

jlpjlp · Answer

= Lance navilog1
= Cette fois-ci choisi l'option 2
= Navilog va faire le nettoyage.. patient jusqu'à ce qui soit marqué *** Nettoyage Termine le ..... ***
= Un rapport va être génrer sur ton C:\ qui sera en option 2
Note: le bureau disparaît

= colle le contenu du rapport de navilog (qui est en option2)


PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau.

_______________

desinstalle via ton panneau de configuration:
Boonty Games
________________
lance cwshrreder (faire fix et non scan only):

http://www.commentcamarche.net/telecharger/telecharger 227 cwshredder

____________________


désactiver la restauration système le temps du redémarrage (dans DEMARRER puis TOUS LES PROG puis ACCESOIRE puis OUTILS SYSTEME puis DANS RESTAURATION SYSTEME aller dans paramètre et désactiver la restauration) puis réactive la.
pour virer les virus qui seraient dedans

_______________________

recolle un rapport hijakthis et bit defender et dis tes soucis actuels

babette270466 · Answer

Salut jlpjlp,                                                                                                                                                                                                       Et bien voilà, je viens de terminer les dernières recommandations que tu m'avais faites et je t'envoie mes derniers scanners :Clean Navipromo version 3.4.2 commencé le 08/02/2008 à 13:38:23,53

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***
et Bit defender :                                                                                                                                                                                              BitDefender Online Scanner
  
  
 
Scan report generated at: Fri, Feb 08, 2008 - 17:39:02
 
 
  
  
 
Scan path: C:\;D:\;E:\;G:\;H:\;I:\;J:\;
  
  
 
 
  
  
 
Statistics
 
Time
 02:34:05
 
Files
 636290
 
Folders
 13325
 
Boot Sectors
 3
 
Archives
 17817
 
Packed Files
 44344
 
  
  
 
Results
 
Identified Viruses 
 4
 
Infected Files 
 5
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 0
 
Deleted Files
 5
 
  
  
 
Engines Info
 
Virus Definitions
 979777
 
Engine build
 AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
 
Scan plugins
 16
 
Archive plugins
 41
 
Unpack plugins
 7
 
E-mail plugins
 6
 
System plugins
 5
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb=>archstored:00000013.fil
 Detected with: Application.Generic.2599
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb=>archstored:00000013.fil
 Deleted
 
C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Infected with: Trojan.Dloader.AMA
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0001
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Detected with: Adware.NewDotNet.BK
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Disinfection failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0002
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Detected with: Adware.OneStep.A
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Disinfection failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0003
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Detected with: Adware.NewDotNet.BK
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)=>lzma_solid_nsis0006
 Deleted
 
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab=>upgrade.exe=>(NSIS o)
 Update failed
 
  
 
 
  
  
 
 
 
Il me semble que les pages indésirables ont disparu et que mon ordi rame beaucoup moins mais je préfère tout de même te renvoyer un nouveau scan navylog qui sait il est peut-être encore là!!! Si tu vois autre chose merci de me prévenir en attendant je te remercie énormément.                Search Navipromo version 3.4.2 commencé le 08/02/2008 à 19:16:27,31

!!! Attention,ce rapport peut indiquer des fichiers/programmes 

légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste 

!!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Babette et 

Denis.NOM-FB9B15D2723.000\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Babette et 

Denis.NOM-FB9B15D2723.000\local settings\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Babette et 

Denis.NOM-FB9B15D2723.000\MENUDM~1\PROGRA~1" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer 

***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\Babette et Denis.NOM-

FB9B15D2723.000\local settings\application data" * 



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :


* Dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000

\local settings\application data" : 


3)Recherche Certificats :

Certificat Egroup absent !

4)Recherche fichiers connus :



*** Analyse terminée le 08/02/2008 à 19:25:45,48 ***
* Suppression dans C:\WINDOWS\System32 *

azxcmjyv.exe trouvé !
Copie azxcmjyv.exe réalisée avec succès !
azxcmjyv.exe supprimé !

azxcmjyv.dat trouvé !
Copie azxcmjyv.dat réalisée avec succès !
azxcmjyv.dat supprimé !

azxcmjyv_nav.dat trouvé !
Copie azxcmjyv_nav.dat réalisée avec succès !
azxcmjyv_nav.dat supprimé !

azxcmjyv_navps.dat trouvé !
Copie azxcmjyv_navps.dat réalisée avec succès !
azxcmjyv_navps.dat supprimé !


* Suppression dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" * 



*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***

C:\Program Files\MessengerSkinner ...suppression... 
C:\Program Files\MessengerSkinner supprimé ! 


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***


*** Suppression dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\application data" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\MENUDM~1\PROGRA~1" *** 


*** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32
vs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans C:\WINDOWS\system32 *

owypszuafg.dat trouvé !
Copie owypszuafg.dat réalisée avec succès !
owypszuafg.dat supprimé !

woouuqsv.dat trouvé !
Copie woouuqsv.dat réalisée avec succès !
woouuqsv.dat supprimé !

wvanozsc.dat trouvé !
Copie wvanozsc.dat réalisée avec succès !
wvanozsc.dat supprimé !

owypszuafg_nav.dat trouvé !
Copie owypszuafg_nav.dat réalisée avec succès !
owypszuafg_nav.dat supprimé !

qvmgneu_nav.dat trouvé !
Copie qvmgneu_nav.dat réalisée avec succès !
qvmgneu_nav.dat supprimé !

woouuqsv_nav.dat trouvé !
Copie woouuqsv_nav.dat réalisée avec succès !
woouuqsv_nav.dat supprimé !

wvanozsc_nav.dat trouvé !
Copie wvanozsc_nav.dat réalisée avec succès !
wvanozsc_nav.dat supprimé !

woouuqsv_navup.dat trouvé !
Copie woouuqsv_navup.dat réalisée avec succès !
woouuqsv_navup.dat supprimé !

bpcqesfthv_navtmp.dat trouvé !
Copie bpcqesfthv_navtmp.dat réalisée avec succès !
bpcqesfthv_navtmp.dat supprimé !

fjirgxwbct_navtmp.dat trouvé !
Copie fjirgxwbct_navtmp.dat réalisée avec succès !
fjirgxwbct_navtmp.dat supprimé !

comlhziasv.exe trouvé !
Copie comlhziasv.exe réalisée avec succès !
comlhziasv.exe supprimé !

cterxnb.exe trouvé !
Copie cterxnb.exe réalisée avec succès !
cterxnb.exe supprimé !

fwbjiuklap.exe trouvé !
Copie fwbjiuklap.exe réalisée avec succès !
fwbjiuklap.exe supprimé !

hfcmiskb.exe trouvé !
Copie hfcmiskb.exe réalisée avec succès !
hfcmiskb.exe supprimé !

hfxlijgme.exe trouvé !
Copie hfxlijgme.exe réalisée avec succès !
hfxlijgme.exe supprimé !

lvgxihsdo.exe trouvé !
Copie lvgxihsdo.exe réalisée avec succès !
lvgxihsdo.exe supprimé !

mfkpdwrq.exe trouvé !
Copie mfkpdwrq.exe réalisée avec succès !
mfkpdwrq.exe supprimé !

nfzeaxltv.exe trouvé !
Copie nfzeaxltv.exe réalisée avec succès !
nfzeaxltv.exe supprimé !

ocrjpfem.exe trouvé !
Copie ocrjpfem.exe réalisée avec succès !
ocrjpfem.exe supprimé !

psyrhjtmg.exe trouvé !
Copie psyrhjtmg.exe réalisée avec succès !
psyrhjtmg.exe supprimé !

qabugmlc.exe trouvé !
Copie qabugmlc.exe réalisée avec succès !
qabugmlc.exe supprimé !

qjosxknyc.exe trouvé !
Copie qjosxknyc.exe réalisée avec succès !
qjosxknyc.exe supprimé !

sptofnyuz.exe trouvé !
Copie sptofnyuz.exe réalisée avec succès !
sptofnyuz.exe supprimé !

stminke.exe trouvé !
Copie stminke.exe réalisée avec succès !
stminke.exe supprimé !

tdquvcnlmp.exe trouvé !
Copie tdquvcnlmp.exe réalisée avec succès !
tdquvcnlmp.exe supprimé !

tyzmndk.exe trouvé !
Copie tyzmndk.exe réalisée avec succès !
tyzmndk.exe supprimé !

vdrexy.exe trouvé !
Copie vdrexy.exe réalisée avec succès !
vdrexy.exe supprimé !

vyztqgwdin.exe trouvé !
Copie vyztqgwdin.exe réalisée avec succès !
vyztqgwdin.exe supprimé !

xgmlpy.exe trouvé !
Copie xgmlpy.exe réalisée avec succès !
xgmlpy.exe supprimé !

owypszuafg_navps.dat trouvé !
Copie owypszuafg_navps.dat réalisée avec succès !
owypszuafg_navps.dat supprimé !

qvmgneu.dat trouvé !
Copie qvmgneu.dat réalisée avec succès !
qvmgneu.dat supprimé !

qvmgneu_navps.dat trouvé !
Copie qvmgneu_navps.dat réalisée avec succès !
qvmgneu_navps.dat supprimé !

woouuqsv_navps.dat trouvé !
Copie woouuqsv_navps.dat réalisée avec succès !
woouuqsv_navps.dat supprimé !

wvanozsc_navps.dat trouvé !
Copie wvanozsc_navps.dat réalisée avec succès !
wvanozsc_navps.dat supprimé !


* Dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" * 


*** Sauvegarde du Registre vers dossier Backupnavi ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !

*** Nettoyage terminé le 08/02/2008 à 13:42:20,42 ***
                                                                                                                                                                                                                         J'ai désinstallé Boonty Games que j'ai retrouvé grace à "exécuter" **** Run Keys ****

RUN: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe 
RUN: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" 
RUN: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe 
RUN: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16 
RUN: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
RUN: [nwiz] nwiz.exe /install 
RUN: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
RUN: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
RUN: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized 
RUN: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime 
RUN: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
RUN: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe 
RUN: [IncrediMail Tray Application] C:\PROGRA~1\INCRED~1\bin\IncMail.exe 
RUN: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
RUN: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe 


 **** Browser Helper Objects ****

BHO: [Yahoo! Toolbar Helper]  
BHO: [Aide pour le lien d'Adobe PDF Reader] C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 
BHO: [Lexmark Barre d'outils] C:\Program Files\Lexmark Toolbar	oolband.dll 
BHO: [ECarteBleueBrowserHelper Class] C:\WINDOWS\system32\BhoECart.dll 
BHO: [ECarteBleueBrowserHelper Class] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll 
BHO: [BrowsingEnhancer] C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll 
BHO: [EoBho Class] C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll 
BHO: [SSVHelper Class] C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
BHO: [SSVHelper Class] C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
BHO: [Programme d'aide de l'Assistant de connexion Windows Live] C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar1.dll 
BHO: [Google Toolbar Notifier BHO] C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll 
BHO: [Windows Live Toolbar Helper] C:\Program Files\Windows Live Toolbar\msntb.dll 


 **** IE Toolbars ****

TOOLBAR: [Lexmark Barre d'outils] C:\Program Files\Lexmark Toolbar	oolband.dll 
TOOLBAR: [&Google] c:\program files\google\googletoolbar1.dll 
TOOLBAR: [Windows Live Toolbar] C:\Program Files\Windows Live Toolbar\msntb.dll 


 **** IE Extensions ****

IEExt: []  
IEExt: [Ajout Direct]  
IEExt: [Ajout Direct]  
IEExt: [Aide à la connexion]  
IEExt: [Aide à la connexion]  
IEExt: [Messenger] C:\Program Files\Messenger\msmsgs.exe 


 **** Hosts File Entries ****

HOSTS: 127.0.0.1       localhost 
HOSTS: 127.0.0.1 bin.errorprotector.com ## added by CiD 
HOSTS: 127.0.0.1 br.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 br.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 br.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 cdn.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 cdn.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 cdn.winsoftware.com ## added by CiD 
HOSTS: 127.0.0.1 de.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 de.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 download.cdn.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 download.cdn.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 download.cdn.winsoftware.com ## added by CiD 
HOSTS: 127.0.0.1 download.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 download.systemdoctor.com ## added by CiD 
HOSTS: 127.0.0.1 download.winantispyware.com ## added by CiD 
HOSTS: 127.0.0.1 download.windrivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 download.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 dynamique.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 errorprotector.com ## added by CiD 
HOSTS: 127.0.0.1 errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 es.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 fr.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 fr.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 go.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 go.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 go.winantispyware.com ## added by CiD 
HOSTS: 127.0.0.1 go.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 hk.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 instlog.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 instlog.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 instlog.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 jsp.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 kb.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 kb.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 nl.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 se.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 secure.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 secure.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 secure.winantispam.com ## added by CiD 
HOSTS: 127.0.0.1 secure.winantispy.com ## added by CiD 
HOSTS: 127.0.0.1 secure.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 support.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 trial.updates.winsoftware.com ## added by CiD 
HOSTS: 127.0.0.1 ulog.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 utils.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 utils.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 utils.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 winantispyware.com ## added by CiD 
HOSTS: 127.0.0.1 winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 winfixer2006.com ## added by CiD 
HOSTS: 127.0.0.1 winsoftware.com ## added by CiD 
HOSTS: 127.0.0.1 www.drivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 www.errorprotector.com ## added by CiD 
HOSTS: 127.0.0.1 www.errorsafe.com ## added by CiD 
HOSTS: 127.0.0.1 www.systemdoctor.com ## added by CiD 
HOSTS: 127.0.0.1 www.utils.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 www.win-anti-virus-pro.com ## added by CiD 
HOSTS: 127.0.0.1 www.win-virus-pro.com ## added by CiD 
HOSTS: 127.0.0.1 www.winantispam.com ## added by CiD 
HOSTS: 127.0.0.1 www.winantispy.com ## added by CiD 
HOSTS: 127.0.0.1 www.winantispyware.com ## added by CiD 
HOSTS: 127.0.0.1 www.winantivirus.com ## added by CiD 
HOSTS: 127.0.0.1 www.winantiviruspro.com ## added by CiD 
HOSTS: 127.0.0.1 www.windrivecleaner.com ## added by CiD 
HOSTS: 127.0.0.1 www.windrivesafe.com ## added by CiD 
HOSTS: 127.0.0.1 www.winfixer.com ## added by CiD 
HOSTS: 127.0.0.1 www.winfixer2006.com ## added by CiD 
HOSTS: 127.0.0.1 www.winsoftware.com ## added by CiD 
HOSTS: 127.0.0.1 www.winsoftware.com ## added by CiD 


 **** IE Settings ****

Default Page: https://www.msn.com/fr-fr 
Default Search: https://actus.sfr.fr 
Local Page: C:\WINDOWS\system32\blank.htm 
Search Bar: http://www.google.com/toolbar/ie8/sidebar.html 
Search Page: https://www.google.com/?gws_rd=ssl 


 **** IE Context Menu (Right click) ****

IEContext: [&Windows Live Search] res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm 
IEContext: [Add to Windows &Live Favorites] https://onedrive.live.com/?id=favorites 


 **** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP] 
LSP: MSAFD Tcpip [UDP/IP] 
LSP: RSVP UDP Service Provider 
LSP: RSVP TCP Service Provider 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{366927FD-25DD-4002-B21E-D249284A4AF9}] SEQPACKET 4 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{366927FD-25DD-4002-B21E-D249284A4AF9}] DATAGRAM 4 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{731E02F2-3459-4EFE-B990-D1B7C5C7CF6B}] SEQPACKET 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{731E02F2-3459-4EFE-B990-D1B7C5C7CF6B}] DATAGRAM 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{508DB681-9ACA-4462-BC63-84F7CFE0FC1F}] SEQPACKET 5 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{508DB681-9ACA-4462-BC63-84F7CFE0FC1F}] DATAGRAM 5 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}] SEQPACKET 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}] DATAGRAM 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E94CD3C3-E65D-4892-98BF-03B73E253DF1}] SEQPACKET 2 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E94CD3C3-E65D-4892-98BF-03B73E253DF1}] DATAGRAM 2 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{37D62C5F-A44B-48A9-9017-E426F9A124D1}] SEQPACKET 3 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{37D62C5F-A44B-48A9-9017-E426F9A124D1}] DATAGRAM 3 


 **** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No 
BLOCKED: [odbccp32.cpl] No 


 **** Downloaded Program Files ****

{00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB 
{14B87622-7E19-4EA8-93B3-97215F77A6BC} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll 
{166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab 
{17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab 
{2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} http://musicmix.messenger.msn.com/Medialogic.CAB 
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll 
{59514505-D207-11D5-8D11-000102B211C7} http://82.196.6.47/iShop_injector/PDownLoadActiveX.ocx 
{5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab 
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scan8/oscan8.cab C:\WINDOWS\Downloaded Program Files\live.ini C:\WINDOWS\Downloaded Program Files\scanoptions.tsi C:\WINDOWS\Downloaded Program Files\lang.ini C:\WINDOWS\Downloaded Program Files\ipsupd.dll C:\WINDOWS\Downloaded Program Files\bdupd.dll C:\WINDOWS\Downloaded Program Files\libfn.dll C:\WINDOWS\Downloaded Program Files\bdcore.dll C:\WINDOWS\Downloaded Program Files\oscan8.ocx 
{67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} http://www.systemrequirementslab.com/sysreqlab2.cab 
{67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab 
{6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab 
{8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab 
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab 
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab 
{97E71027-0BA2-44F2-97DB-F84D808ED0B6} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab 
{9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} http://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab 
{AB86CE53-AC9F-449F-9399-D8ABCA09EC09} https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx 
{B8BE5E93-A60C-4D26-A2DC-220313175592} http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab 
{C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab 
{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab 
{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab 
{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab 
{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab 
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab 
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab 
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab 
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab 
{D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash5r42.cab 
{E6187999-9FEC-46A1-A20F-F4CA977D5643} http://messenger.zone.msn.com/binary/Chess.cab31267.cab 
{F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab 


 **** Windows Services ****

[Alerter] %SystemRoot%\system32\svchost.exe -k LocalService 
[ALG] %SystemRoot%\System32\alg.exe 
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs 
[aspnet_state] %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 
[aswUpdSv] "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" 
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs 
[avast! Antivirus] "C:\Program Files\Alwil Software\Avast4\ashServ.exe" 
[avast! Mail Scanner] "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service 
[avast! Web Scanner] "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service 
[AVG Anti-Spyware Guard] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe 
[BITS] %SystemRoot%\system32\svchost.exe -k netsvcs 
[Boonty Games] "C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" 
[Browser] %SystemRoot%\system32\svchost.exe -k netsvcs 
[cisvc] C:\WINDOWS\system32\cisvc.exe 
[ClipSrv] %SystemRoot%\system32\clipsrv.exe 
[clr_optimization_v2.0.50727_32] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 
[COMSysApp] C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} 
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs 
[DcomLaunch] %SystemRoot%\system32\svchost -k DcomLaunch 
[Dhcp] %SystemRoot%\system32\svchost.exe -k netsvcs 
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com 
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Dnscache] %SystemRoot%\system32\svchost.exe -k NetworkService 
[ehRecvr] C:\WINDOWS\eHome\ehRecvr.exe 
[ehSched] C:\WINDOWS\eHome\ehSched.exe 
[ELService] "C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe" 
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Eventlog] %SystemRoot%\system32\services.exe 
[EventSystem] C:\WINDOWS\system32\svchost.exe -k netsvcs 
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Fax] %systemroot%\system32\fxssvc.exe 
[gusvc] "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs 
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs 
[HTTPFilter] %SystemRoot%\System32\svchost.exe -k HTTPFilter 
[IAANTMon] C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe 
[IDriverT] "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe" 
[IISADMIN] C:\WINDOWS\system32\inetsrv\inetinfo.exe 
[ImapiService] C:\WINDOWS\system32\imapi.exe 
[iPod Service] "C:\Program Files\iPod\bin\iPodService.exe" 
[lanmanserver] %SystemRoot%\system32\svchost.exe -k netsvcs 
[lanmanworkstation] %SystemRoot%\system32\svchost.exe -k netsvcs 
[LightScribeService] "C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe" 
[LmHosts] %SystemRoot%\system32\svchost.exe -k LocalService 
[LPDSVC] %SystemRoot%\system32	cpsvcs.exe 
[lxcr_device] C:\WINDOWS\system32\lxcrcoms.exe -service 
[McrdSvc] C:\WINDOWS\ehome\mcrdsvc.exe 
[Messenger] %SystemRoot%\system32\svchost.exe -k netsvcs 
[MHN] %SystemRoot%\System32\svchost.exe -k netsvcs 
[mnmsrvc] C:\WINDOWS\system32\mnmsrvc.exe 
[MSIServer] C:\WINDOWS\system32\msiexec.exe /V 
[NetDDE] %SystemRoot%\system32
etdde.exe 
[NetDDEdsdm] %SystemRoot%\system32
etdde.exe 
[Netlogon] %SystemRoot%\system32\lsass.exe 
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Nla] %SystemRoot%\system32\svchost.exe -k netsvcs 
[NMIndexingService] "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe" 
[NMSAccess] C:\Program Files\CDBurnerXP\NMSAccess.exe 
[NMSAccessU] C:\Program Files\CDBurnerXP\NMSAccessU.exe 
[NtLmSsp] %SystemRoot%\system32\lsass.exe 
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs 
[NVSvc] %SystemRoot%\system32
vsvc32.exe 
[PlugPlay] %SystemRoot%\system32\services.exe 
[PolicyAgent] %SystemRoot%\system32\lsass.exe 
[ProtectedStorage] %SystemRoot%\system32\lsass.exe 
[RasAuto] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RasMan] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe 
[RemoteAccess] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RemoteRegistry] %SystemRoot%\system32\svchost.exe -k LocalService 
[RpcLocator] %SystemRoot%\system32\locator.exe 
[RpcSs] %SystemRoot%\system32\svchost -k rpcss 
[RSVP] %SystemRoot%\system32svp.exe 
[SamSs] %SystemRoot%\system32\lsass.exe 
[SandraDataSrv] C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1\Win32\RpcDataSrv.exe 
[SandraTheSrv] C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1\RpcSandraSrv.exe 
[SansaService] C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe 
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe 
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs 
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs 
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs 
[SharedAccess] %SystemRoot%\system32\svchost.exe -k netsvcs 
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs 
[SMTPSVC] C:\WINDOWS\system32\inetsrv\inetinfo.exe 
[SNMP] %SystemRoot%\System32\snmp.exe 
[SNMPTRAP] %SystemRoot%\System32\snmptrap.exe 
[Spooler] %SystemRoot%\system32\spoolsv.exe 
[srservice] %SystemRoot%\system32\svchost.exe -k netsvcs 
[SSDPSRV] %SystemRoot%\system32\svchost.exe -k LocalService 
[stisvc] %SystemRoot%\system32\svchost.exe -k imgsvc 
[SwPrv] C:\WINDOWS\system32\dllhost.exe /Processid:{E240A44A-EE25-4AA3-A4EB-0106CD6D8248} 
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe 
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs 
[TermService] %SystemRoot%\System32\svchost -k DComLaunch 
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs 
[TlntSvr] C:\WINDOWS\system32	lntsvr.exe 
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs 
[TuneUp.Defrag] %SystemRoot%\System32\TuneUpDefragService.exe 
[upnphost] %SystemRoot%\system32\svchost.exe -k LocalService 
[UPS] %SystemRoot%\System32\ups.exe 
[usnjsvc] "C:\Program Files\Windows Live\Messenger\usnsvc.exe" 
[UxTuneUp] %SystemRoot%\System32\svchost.exe -k netsvcs 
[VSS] %SystemRoot%\System32\vssvc.exe 
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs 
[W3SVC] %SystemRoot%\system32\inetsrv\inetinfo.exe 
[WebClient] %SystemRoot%\system32\svchost.exe -k LocalService 
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs 
[WLSetupSvc] "C:\Program Files\Windows Live\installer\WLSetupSvc.exe" 
[WmdmPmSN] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Wmi] %SystemRoot%\System32\svchost.exe -k netsvcs 
[WmiApSrv] C:\WINDOWS\system32\wbem\wmiapsrv.exe 
[WMPNetworkSvc] "C:\Program Files\Windows Media Player\wmpnetwk.exe" 
[wscsvc] %SystemRoot%\System32\svchost.exe -k netsvcs 
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs 
[WudfSvc] %SystemRoot%\system32\svchost.exe -k WudfServiceGroup 
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs 
[xmlprov] %SystemRoot%\System32\svchost.exe -k netsvcs 


 **** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://www.google.com/toolbar/ie8/sidebar.html 
SEARCH: [Default_Search_URL] http://www.google.com/toolbar/ie8/sidebar.html 
SEARCH: [SearchAssistant] https://actus.sfr.fr 
SEARCH: [CustomizeSearch] https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm 
SEARCH: [Local Page] http://www.iesearch.com/ 


 **** Complete IE Options ****

IEOPT: [NoUpdateCheck]  
IEOPT: [NoJITSetup]  
IEOPT: [Disable Script Debugger] yes 
IEOPT: [Show_ChannelBand] No 
IEOPT: [Anchor Underline] yes 
IEOPT: [Cache_Update_Frequency] Once_Per_Session 
IEOPT: [Display Inline Images] yes 
IEOPT: [Do404Search]  
IEOPT: [Local Page] C:\WINDOWS\system32\blank.htm 
IEOPT: [Save_Session_History_On_Exit] no 
IEOPT: [Show_FullURL] no 
IEOPT: [Show_StatusBar] yes 
IEOPT: [Show_ToolBar] yes 
IEOPT: [Show_URLinStatusBar] yes 
IEOPT: [Show_URLToolBar] yes 
IEOPT: [Start Page] https://www.google.fr/?gws_rd=ssl 
IEOPT: [Use_DlgBox_Colors] yes 
IEOPT: [Search Page] https://www.google.com/?gws_rd=ssl 
IEOPT: [FullScreen] no 
IEOPT: [Enable Browser Extensions] yes 
IEOPT: [Default_Search_URL] http://www.google.com/toolbar/ie8/sidebar.html 
IEOPT: [XMLHTTP]  
IEOPT: [UseClearType] yes 
IEOPT: [Play_Background_Sounds] yes 
IEOPT: [Play_Animations] yes 
IEOPT: [Default_Page_URL] https://www.msn.com/fr-fr 
IEOPT: [RunOnceHasShown]  
IEOPT: [RunOnceComplete]  
IEOPT: [CompatibilityFlags]  
IEOPT: [SearchMigrated]  
IEOPT: [Window_Placement] , 
IEOPT: [NotifyDownloadComplete] yes 
IEOPT: [Use FormSuggest] yes 
IEOPT: [AlwaysShowMenus]  
IEOPT: [Use Search Asst] no 
IEOPT: [Window Title] Windows Internet Explorer optimisé pour MSN 
IEOPT: [Default_Secondary_Page_URL] https://outlook.live.com/owa/ 
IEOPT: [SearchDefaultBranded]  
IEOPT: [Search Bar] http://www.google.com/toolbar/ie8/sidebar.html 
IEOPT: [AutoSearch]  
IEOPT: [Default_Page_URL] https://www.msn.com/fr-fr 
IEOPT: [Default_Search_URL] https://actus.sfr.fr 
IEOPT: [Search Page] https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
IEOPT: [Enable_Disk_Cache] yes 
IEOPT: [Cache_Percent_of_Disk]  
IEOPT: [Delete_Temp_Files_On_Exit] yes 
IEOPT: [Anchor_Visitation_Horizon]  
IEOPT: [Use_Async_DNS] yes 
IEOPT: [Placeholder_Width]  
IEOPT: [Placeholder_Height]  
IEOPT: [Start Page] https://www.msn.com/fr-fr 
IEOPT: [CompanyName] Microsoft Corporation 
IEOPT: [Custom_Key] MICROSO 
IEOPT: [Wizard_Version] 6.00.2800.1017 
IEOPT: [FullScreen] no 
IEOPT: [Default_Secondary_Page_URL] https://outlook.live.com/owa/ 
IEOPT: [Extensions Off Page] about:NoAdd-ons 
IEOPT: [Security Risk Page] about:SecurityRisk 
IEOPT: [Check_Associations] yes 
IEOPT: [Secondary Start Pages] https://outlook.live.com/owa/ 



                                                                                                                                                                                                        j'ai "effacé" le dossier RESTAURATION DE SYSTEME, et j'ai réexécuté hijakthis : Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:12:33, on 08/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www1.incredimail.com/english/download/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: BrowsingEnhancer - {5ABBD91B-0215-2FE1-7A7E-753F05B40CB8} - C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [IncrediMail Tray Application] C:\PROGRA~1\INCRED~1\bin\IncMail.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {59514505-D207-11D5-8D11-000102B211C7} (ActiveFormX Contrôle) - http://82.196.6.47/iShop_injector/PDownLoadActiveX.ocx
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1\RpcSandraSrv.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 0: (no name) - http://moncompte.neuf.fr/img/images_contact/titre.gif

jlpjlp · Answer

relance hijackhtis, fais do as sytem scan only puis selectionne et fix ces lignes (fix cheked)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: BrowsingEnhancer - {5ABBD91B-0215-2FE1-7A7E-753F05B40CB8} - C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime

O16 - DPF: {59514505-D207-11D5-8D11-000102B211C7} (ActiveFormX Contrôle) - http://82.196.6.47/iShop_injector/PDownLoadActiveX.ocx

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx


___________

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :

C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb=>archstored:00000013.fil

C:\Documents and Settings\Laura.NOM-FB9B15D2723\Application Data\TuneUp Software\TuneUp Utilities\Backups\00000002.rcb
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UVO5832X\upgrade[1].cab




clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 


__________________

vire ce qui est dans moved files en allant dans poste de travail puis C puis otmovit

________________

remplace avast par antivir et colle un rapport

https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)

babette270466 · Answer

Salut jlpjlp,        Patatra CID est revenu, il faut dire que depuis le début des vacances mes enfants squattent  carrément l'ordi à tour de rôle, j'ai bien effectué tes dernières recommandations mais "à l'aide" une nouvelle fois,voici le 1er scan d'antivir :

jlpjlp · Answer

dans DEMARRER puis PANNEAU DE CONFIGURATION puis AJOUT /SUPPRESSION DE PROGRAMME


cherche quelque chose comme CID et msn plus et desinstalle les 
si tu doit réinstaller msn plus fait le sans les sponsor surtout


_____________

si ca persiste:

colle un scan antivir

babette270466 · Answer

quelle rapidité je crois que j'ai posté trop rapidement ma lettre bon aucun sponsor téléchargé mais je t'envoie donc mon 1er scan antivir :AntiVir PersonalEdition Classic Report file date: mercredi 13 février 2008 09:02 Scanning for 1100573 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: NOM-FB9B15D2723 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 19:32:42 ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:32:43 ANTIVIR2.VDF : 7.0.2.113 1673728 Bytes 08/02/2008 19:32:43 ANTIVIR3.VDF : 7.0.2.126 56320 Bytes 12/02/2008 19:32:43 AVEWIN32.DLL : 7.6.0.65 3240448 Bytes 12/02/2008 19:32:43 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 12/02/2008 19:32:44 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: mercredi 13 février 2008 09:02 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'wkgdcach.exe' - '1' Module(s) have been scanned Scan process 'WkDStore.exe' - '1' Module(s) have been scanned Scan process 'WksWP.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'lxcrcoms.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'IAAnotif.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'cidaemon.exe' - '1' Module(s) have been scanned Scan process 'cidaemon.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'ELService.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'snmp.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'inetinfo.exe' - '1' Module(s) have been scanned Scan process 'IAANTMon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned Scan process 'ehSched.exe' - '1' Module(s) have been scanned Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned Scan process 'dllhost.exe' - '1' Module(s) have been scanned Scan process 'cisvc.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '0' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 45 processes with 45 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '23' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\OneCare Protection\Quarantine\{800146D2-0001-0000-48B9-EB5C15A81504}\DATA.CAB [0] Archive type: CAB (Microsoft) --> RESOURCE1 [DETECTION] Is the Trojan horse TR/Dldr.Agent.DOE.1 [INFO] The file was moved to '4806a527.qua'! C:\Documents and Settings\All Users\Application Data\Microsoft\OneCare Protection\Quarantine\{8001B881-0000-0000-D4E7-45666E79D33F}\DATA.CAB [0] Archive type: CAB (Microsoft) --> RESOURCE1 [DETECTION] Is the Trojan horse TR/Zlob.bae [INFO] The file was moved to '4806a52c.qua'! C:\Documents and Settings\All Users\Application Data\Microsoft\OneCare Protection\Quarantine\{8001BA50-0000-0000-21C2-302132826895}\DATA.CAB [0] Archive type: CAB (Microsoft) --> RESOURCE1 [DETECTION] Is the Trojan horse TR/Dldr.Agent.ddl --> RESOURCE2 [DETECTION] Is the Trojan horse TR/Dldr.Agent.ddl --> RESOURCE3 [DETECTION] Is the Trojan horse TR/Dldr.Agent.ddl [INFO] The file was moved to '4806a52f.qua'! C:\Documents and Settings\guillaume_2\Application Data\intra amen\cdromboltteam.exe [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen [INFO] The file was moved to '4824a668.qua'! C:\Program Files\Navilog1\Backupnavi\azxcmjyv.exe [DETECTION] Is the Trojan horse TR/Dropper.Gen [INFO] The file was deleted! C:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP640\A0355607.exe [DETECTION] Is the Trojan horse TR/Dropper.Gen [INFO] The file was deleted! Begin scan in 'D:\' End of the scan: mercredi 13 février 2008 10:31 Used time: 1:29:08 min The scan has been done completely. 13242 Scanning directories 599222 Files were scanned 8 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 2 files were deleted 0 files were repaired 4 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 599214 Files not concerned 18195 Archives were scanned 1 Warnings 0 Notes et le fix navi Search Navipromo version 3.4.2 commencé le 13/02/2008 à 10:41:04,43 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files avilog1 Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO Microsoft Windows XP [version 5.1.2600] Internet Explorer : 7.0.5730.11 Système de fichiers : NTFS Executé en mode normal *** Recherche Programmes installés *** *** Recherche dossiers dans C:\WINDOWS *** *** Recherche dossiers dans C:\Program Files *** *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 *** *** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\application data" *** *** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" *** *** Recherche dossiers dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\MENUDM~1\PROGRA~1" *** *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net Aucun Fichier trouvé *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans C:\WINDOWS\system32 * * Recherche dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans C:\WINDOWS\system32 : * Dans "C:\Documents and Settings\Babette et Denis.NOM-FB9B15D2723.000\local settings\application data" : 3)Recherche Certificats : Certificat Egroup absent ! 4)Recherche fichiers connus : *** Analyse terminée le 13/02/2008 à 10:50:36,56 *** merci

jlpjlp · Answer

Ok c'est l'infection swizzor qui est responsable des pub cid .  Viré ce qui est en quarantaine ( porte de travail puis c puis doc and setting puis guillaume 2 puis application data puis one care prntect puis quarantaine) . Vire le fichier cd romboltteam .( dans application data puis intra amen :) . Vire ce qui est dans le dossier backup navi .( c puis program files puis navilog ) .  Désactive va restauration système puis réactive la après avoir  redémarrer l'ordi . Puis vire ce qui est en quarantaine dans antivir et recolle moi un rapport antivir et dis moi tes problèmes

babette270466 · Answer

salut Jlpjlp, ok tout est fait, et je pense que cid a disparu pour l'instant voici le scan d'antivir :AntiVir PersonalEdition Classic Report file date: mercredi 13 février 2008 13:47 Scanning for 1100573 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: NOM-FB9B15D2723 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 19:32:42 ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:32:43 ANTIVIR2.VDF : 7.0.2.113 1673728 Bytes 08/02/2008 19:32:43 ANTIVIR3.VDF : 7.0.2.126 56320 Bytes 12/02/2008 19:32:43 AVEWIN32.DLL : 7.6.0.65 3240448 Bytes 12/02/2008 19:32:43 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 12/02/2008 19:32:44 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: mercredi 13 février 2008 13:47 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'lxcrcoms.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'ELService.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'snmp.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'inetinfo.exe' - '1' Module(s) have been scanned Scan process 'IAANTMon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned Scan process 'ehSched.exe' - '1' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned Scan process 'dllhost.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'cisvc.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '0' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'IAAnotif.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 41 processes with 41 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '23' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! Begin scan in 'D:\' End of the scan: mercredi 13 février 2008 15:11 Used time: 1:24:39 min The scan has been done completely. 12838 Scanning directories 584154 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 584154 Files not concerned 17402 Archives were scanned 1 Warnings 0 Notes et aide-moi à virer tout ce qui est susceptible de me ralentir ou de récupérer encore Cid !!! bye et merci

babette270466 · Answer

aie aie ma fille s'est connectée et CID est réapparu, elle est allée sur un blog est-ce à cause de ça ?

jlpjlp · Answer

oui surement elle a du telecharger un truc contenant swizzor

refais antivir pour voir



connecter vous avec firefox a la place d'internet explorer aussi ce qui diminura les risques:

http://www.mozilla-europe.org/fr/products/firefox/

babette270466 · Answer

Salut jlpjlp, Je t'envoie mon nouveau scan AVIRA : AntiVir PersonalEdition Classic Report file date: vendredi 22 février 2008 09:52 Scanning for 1119369 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: NOM-FB9B15D2723 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 19:32:42 ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:32:43 ANTIVIR2.VDF : 7.0.2.113 1673728 Bytes 08/02/2008 19:32:43 ANTIVIR3.VDF : 7.0.2.176 321024 Bytes 22/02/2008 08:44:54 AVEWIN32.DLL : 7.6.0.67 3293696 Bytes 16/02/2008 19:14:35 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 12/02/2008 19:32:44 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: vendredi 22 février 2008 09:52 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'cidaemon.exe' - '1' Module(s) have been scanned Scan process 'cidaemon.exe' - '1' Module(s) have been scanned Scan process 'emule.exe' - '1' Module(s) have been scanned Scan process 'wmplayer.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'lxcrcoms.exe' - '1' Module(s) have been scanned Scan process 'ELService.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'snmp.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'inetinfo.exe' - '1' Module(s) have been scanned Scan process 'IAANTMon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned Scan process 'ehSched.exe' - '1' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'dllhost.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'cisvc.exe' - '1' Module(s) have been scanned Scan process 'IAAnotif.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '0' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 44 processes with 44 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '23' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! Begin scan in 'D:\' End of the scan: vendredi 22 février 2008 11:03 Used time: 1:10:35 min The scan has been done completely. 12955 Scanning directories 583538 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 583538 Files not concerned 17392 Archives were scanned 1 Warnings 0 Notes QU'EN PENSES-TU ?

jlpjlp · Answer

ok . Rien dans antivir . Encore des soucis?

babette270466 · Answer

Toujours quelques pubs de temps à autres mais beaucoup moins virulentes que lorsque je vous ai contactée donc je suis assez satisfaite, et je ne vois plus "CID" merci JLPJLP!!!

babette270466 · Answer

aujourd'hui tout continue à bien aller, plus de pub!!! pour la soluce :  trop longue à récapituler, voir toute la discussion merci encore à tous !

babette270466 · Answer

merci

jlpjlp · Answer

de rien!

Problèmes de virus et de pub intempestives !

18 réponses

Discussions similaires

Newsletters