Help!!!! virus de merde!Résolu/Fermé

Question

Bonjour,
J'ai chopé un virus!
J'ai fait plusieurs analyses: adaware, spybot, cclaner A.squared;avg antivirus
L'ordi est long sur internet, il ouvre tout seul des pages internet et j'ai des messages d'erreurs
Spybot trouve des soucis avec Smitfraud
Voici le log
Logfile of HijackThis v1.99.1
Scan saved at 20:55:13, on 19/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX00.968\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [TVPService] "C:\Program Files\HP\TVPlay\TVPService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe /background
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8} - C:\WINDOWS\admgcx.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Media Library Service(HP TVPlay) - Cyberlink - C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: CyberLink Background Capture Service (CBCS HP TVPlay) (TVPCapSvc) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS HP TVPlay) (TVPSched) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe

Merci de l'aide

Utilisateur anonyme · Accepted Answer

bonjour a vous deux ,desoles pour l'intrusion , pour smitfrau-c et zlob fait ceci


télécharges smitfraudfix :

En image :
http://siri.urz.free.fr/Fix/SmitfraudFix.php

tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1
cela vas générer un rapport.

Copie/colle le rapport sur le forum stp.

loganpro · Answer

Bonsoir, Beaucoup de personnes ont des problemes (Virus,Spywares,Greywares,Trojens etc..)

Lis bien et exécute cette manip dans l’ordre.

#Télécharge et installe ces logiciels (si tu ne les as pas) pour les 3 premiers
mets les à jour, comme indiqué dans les démos ou tutos.

Ne les utilise pas tout de suite.

Antispywares et autres :

*Ad-Aware (gratuit)
Téléchargement :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/11643.html
Le patch en Français pour Ad-Aware (gratuit) :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/25543.html
Tuto :
http://perso.orange.fr/rginformatique/section%20virus/adawrevid.asf

*Spybot (gratuit) :
Téléchargement :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html
voir demo d utilisation (merci Balltrap)
http://perso.orange.fr/rginformatique/section%20virus/demo%20spybot.htm

* AVG AS

AVG anti spyware
https://www.01net.com/telecharger/
Mets le a jour avant de lancer le scan.
Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html


Nettoyeurs (de fichiers inutiles) et autres :

*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

========================================
->Affiche tous les fichiers et dossiers :
clique sur démarrer/panneau de configuration (en affichage classique)/option des dossiers/affichage

[Coche] « afficher les dossiers et fichiers cachés »

[Décoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

[Décoche] « masquer les extensions dont le type est connu »

Puis fais [appliquer] pour valider les changements.

Et [Ok]
========================================
-> Relance HijackThis cliques sur « scanner seulement » ou (« do a scan only »),
coche les cases devant ces lignes :
O2 - BHO: (no name) - {6AD688DA-4A8E-4AC1-9BB6-F42D8B5BF492} - C:\WINDOWS\system32\mljjj.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

et ensuite ferme toutes les fenêtres actives autres que HijackThis!, navigateur inclus,
puis clique "Fix checked"( ou « fixer objet »). Ferme HijackThis!
========================================


=======================================

->Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec
puis tape « entrée ».
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
========================================
-
========================================
->Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche.
Décoche "Avancé"
Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur [Analyse]
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur [Lancer le Nettoyage]



========================================
->Lance AVG pour un scan complet "Analyse" ->"Paramètres"

Sous la question "Comment réagir ?" :

-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

Si un fichier est infecté en fin d'analyse

->Clique sur "Appliquer toutes les actions "


========================================
->Passe Ad-Aware et supprime tout ce qu’il trouve + supprime les quarantaines…
========================================
->Passe Spybot et corrige tout ce qu’il trouve + vaccine + supprime les quarantaines…
========================================
->Relance CCleaner.
Suppression des incohérences du registre

• Clique sur l'icône [Erreurs] situés dans la marge à gauche
• Puis clique sur [Analyser les erreurs]
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur [Corriger les erreurs].

Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement.
========================================
->Vide ta Corbeille.
========================================
->Redémarre en mode normal,


- > Ouvre ce lien pour scanner ton PC avec un BitDefender en ligne (uniquement sous Internet Explorer) :

https://www.bitdefender.com/toolbox/

Utilisation :
Cliquer sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
Ensuite, cliquer sur "Cliquez ici pour scanner".
Patienter jusqu'à la fin du scan qui peut durer assez longtemps...

Copier/coller le rapport entier sur le forum.

Tutoriel en images ici : http://pageperso.aol.fr/rginformatique/mapage/defender.htm (merci à Balltrap34 pour cette réalisation)
[Recoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

Si tu penses que ton PC est long au démarrage tu peux télécharger ceci
https://www.01net.com/telecharger/windows/Utilitaire/optimiseurs_et_tests/fiches/26913.html

Tu l'execute et tu lance Start up manager
Tu me dit ce qu'il te lance au démarrage.
.
Et dis moi ou en sont tes problèmes s’il t’en reste. 

Voili Voilou j'espere t'avoir aidé a résoudre tes problemes :)
LoganPro

ptiono · Answer

Voilà, j'ai suivi la procédure complète
Tout semble bon à part à chaque test de spybot qui me trouve à chaque fois SMITFRAUD-C et Zlob.Downloader.VCD



Voici le rapport de BitDefender: pas de virus

BitDefender Online Scanner - Rapport virus en temps réel
  
  
 
Généré à: Wed, Feb 20, 2008 - 09:42:29
 

--------------------------------------------------------------------------------

 
  
  
 
Info d'analyse
  
  
 
Fichiers scannés
 394379
 
Infectés Fichiers
 0
 
  
  
 
 
  
  
 
Virus Détectés
  
  
 
Aucun virus trouvé.
 
 
  et maintenant le rapport Hijack


  
 Logfile of HijackThis v1.99.1
Scan saved at 09:47:03, on 20/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX00.594\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SXG Advisor - {A2F12137-1918-4F31-B179-94C21A1E2BC2} - C:\WINDOWS\dmdvpnvnp.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [TVPService] "C:\Program Files\HP\TVPlay\TVPService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe /background
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8} - C:\WINDOWS\admgcx.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Media Library Service(HP TVPlay) - Cyberlink - C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: CyberLink Background Capture Service (CBCS HP TVPlay) (TVPCapSvc) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS HP TVPlay) (TVPSched) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe

Pensez vous que je suis tiré d'affaires?

Merci
Ptiono

ptiono · Answer

Je relance ma question si je peux avoir l'avis d'un expert sur le resultat d'analyse
Merci
PTIONO

ptiono · Answer

Merci bcp de l'aide

Voici le rapport

SmitFraudFix v2.292

Rapport fait à 12:47:21,26, 20/02/2008
Executé à partir de C:\WINDOWS\BDOSCAN8\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1	www.legal-at-spybot.info
127.0.0.1	legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\fsxloqf.exe PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\hp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\hp\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\hp\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
+--------------------------------------------------+
[!] Suspicious: dmdvpnvnp.dll
BHO: SXG Advisor - {A2F12137-1918-4F31-B179-94C21A1E2BC2}
TypeLib: {9F8171A3-6D96-49A9-8938-003F9DCEF47F}
Interface: {65530A0E-ECE3-4117-A470-1D682C554199}
Interface: {A165A777-F7FD-414B-84D2-D740EF55E0F0}

[!] Suspicious: admgcx.dll
SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8}


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Broadcom 802.11a/b/g WLAN - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.54.252
DNS Server Search Order: 212.27.53.252

HKLM\SYSTEM\CCS\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

Smitfraud option 2

Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter.
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
----------------------------------------------------------------------------
Relance le programme Smitfraud,
Cette fois choisit l’option 2, répond oui a tous ;
Sauvegarde le rapport, Redémarre en mode normal,
copie/colle le rapport sauvegardé sur le forum ( le rapport risque d'etre tres long colle le en deux ou trois fois )

ptiono · Answer

Je n'ai pas pu faire la manip en mode sans echec
J'ai des messages d'erreurs avec AVG qui me dit que le registre à changer et qu'il est possible ou pas d'accepter les changements
Je refuse en permanence
Je pense qu'il y a toujours un problème
Je donne le debut et la fin de l'annalyse

SmitFraudFix v2.292

Rapport fait à 13:16:49,26, 20/02/2008
Executé à partir de C:\Documents and Settings\hp\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
C:\WINDOWS\dmdvpnvnp.dll deleted.
C:\WINDOWS\admgcx.dll deleted.


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\fsxloqf.exe supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Broadcom 802.11a/b/g WLAN - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.54.252
DNS Server Search Order: 212.27.53.252

HKLM\SYSTEM\CCS\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\..\{19F14E93-17A6-4990-929B-19A6DA2E80DC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

pourquoi tu n'as pas acces au mode sans echecs ?

ptiono · Answer

pas eu l'icone sur le bureau en mode sans echec et introuvable ailleurs

Utilisateur anonyme · Answer

bon fait ceci nous reviendrons sur smitfraudfix apres afin d'etre sur de la suppression .
pour l'instant fait ceci car tu es victime d'un detournement DNS , fixwareout le traite .


Télécharge le FixWareout d'un de ces deux sites, sur le bureau:
http://downloads.subratam.org/Fixwareout.exe
https://www.bleepingcomputer.com/download/linux/
Ferme toutes les fenêtres de tous les programmes ouverts.

Lance le Fixwareout.exe: clique sur Next, puis Install, puis assure toi que "Run fixit" est activé puis clique sur Finish.

Le fix va commencer, suis les messages à l'écran.
Il te sera demandé de redémarrer ton ordinateur, fais-le.
Ton système mettra un peu plus de temps au démarrage, c'est normal.
Une fois le scan terminé, un rapport va s'afficher. ==> tu peux en faire un copier/coller et le poster sur ce forum.

Note : [Le bureau sans icône va apparaître ainsi qu'une petite fenêtre ayant pour titre BFU. Clique sur OK et patiente jusqu'à la fin du scan. (Ca peut prendre plusieurs minutes pendant lesquelles tu as l'impression que rien ne se passe. Patiente!)
Quand ton système aura redémarré, suis les invites des messages.]

Poste le rapport de FixWareout. ==> (Il est enregistré dans "Poste de travail" > C:\FixWareout\report.txt).

Poste enfin un nouveau log HijackThis.

ptiono · Answer

Voili voilà le resultat
Username "hp" - 21/02/2008 16:37:30 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

Cache de résolution DNS vidé.


System was rebooted successfully. 
 
~~~~~ Postrun check 
HKLM\SOFTWARE\~\Winlogon\ "System"="" 
....
....
~~~~~ Misc files. 
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe"
"SunJavaUpdateSched"="\"C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup"
"NvMediaCenter"="RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit"
"nwiz"="nwiz.exe /installquiet /nodetect"
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe"
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"QPService"="\"C:\Program Files\HP\QuickPlay\QPService.exe\""
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe"
"QlbCtrl"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,48,65,77,6c,65,\
74,74,2d,50,61,63,6b,61,72,64,5c,48,50,20,51,75,69,63,6b,20,4c,61,75,6e,63,\
68,20,42,75,74,74,6f,6e,73,5c,51,6c,62,43,74,72,6c,2e,65,78,65,20,2f,53,74,\
61,72,74,00
"Cpqset"="C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe"
"RecGuard"="C:\Windows\SMINST\RecGuard.exe"
"TVPService"="\"C:\Program Files\HP\TVPlay\TVPService.exe\""
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe"
"Sony Ericsson PC Suite"="\"C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe\" /startoptions"
"QuickTime Task"="\"C:\Program Files\QuickTime\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\Program Files\iTunes\iTunesHelper.exe\""
"!AVG Anti-Spyware"="\"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe\" /minimized"
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe"
"Adobe Reader Speed Launcher"="\"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe\""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe\""
"msnmsgr"="\"C:\Program Files\Windows Live\Messenger\msnmsgr.exe\" /background"
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe"
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
"RayV"="C:\Program Files\RayV\RayV\RayV.exe /background"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~
 


et le rapport





Logfile of HijackThis v1.99.1
Scan saved at 16:48:49, on 21/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX00.953\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SXG Advisor - {A2F12137-1918-4F31-B179-94C21A1E2BC2} - C:\WINDOWS\dmdvpnvnp.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [TVPService] "C:\Program Files\HP\TVPlay\TVPService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe /background
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8} - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Media Library Service(HP TVPlay) - Cyberlink - C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: CyberLink Background Capture Service (CBCS HP TVPlay) (TVPCapSvc) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS HP TVPlay) (TVPSched) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe

ptiono · Answer

Des infos pour moi?
Merci
Ptiono

ptiono · Answer

...

ptiono · Answer

?

Utilisateur anonyme · Answer

bonsoir recommence l'option 2 de smitfraudfix en mode sans echecs 

http://www.commentcamarche.net/forum/affich 5098082 help virus de merde#6

ptiono · Answer

Je n'arrive pas à trouver le fichier smithfraud.exe en mode sans echec! c'est un truc de fou!
Comment faire?

Utilisateur anonyme · Answer

bonsoir , on va faire autrement :

Télécharges ComboFix à partir d'un de ces liens :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
https://forospyware.com
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Et important, enregistre le sur le bureau.

Avant d'utiliser ComboFix :

&#9658; Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.


Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

ptiono · Answer

Voili voilou, J'ai eu 3 messages de spybot me disant que le registre avait changé et si oui ou non j'acceptais les modifs...j'ai dits NON Voilà le rapport ComboFix 08-02-22.3 - hp 2008-02-22 20:57:35.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.487 [GMT 1:00] Endroit: C:\Documents and Settings\hp\Bureau\ComboFix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat C:\WINDOWS\dat.txt C:\WINDOWS\search_res.txt D:\Autorun.inf ----- BITS: Possible sites infectés ----- hxxp://softworldnetwork.com hxxp://onsafepro.com . ((((((((((((((((((((((((((((( Fichiers créés 2008-01-22 to 2008-02-22 )))))))))))))))))))))))))))))))))))) . 2008-02-21 16:37 . 2008-02-21 16:45 d-------- C:\fixwareout 2008-02-20 12:47 . 2008-02-20 13:17 5,010 --a------ C:\WINDOWS\system32 mp.reg 2008-02-20 12:46 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2008-02-20 12:46 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2008-02-20 12:46 . 2008-02-16 19:46 85,504 --a------ C:\WINDOWS\system32\VACFix.exe 2008-02-20 12:46 . 2008-02-08 10:37 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe 2008-02-20 12:46 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2008-02-20 12:46 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2008-02-20 12:46 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2008-02-19 21:26 . 2008-02-19 21:26 d-------- C:\Documents and Settings\Administrateur\Application Data\Lavasoft 2008-02-19 21:26 . 2008-02-19 21:26 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2008-02-19 21:25 . 2006-07-01 01:52 d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau 2008-02-19 21:25 . 2006-07-01 01:52 d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression 2008-02-19 21:25 . 2007-05-10 02:11 d--h----- C:\Documents and Settings\Administrateur\Modèles 2008-02-19 21:25 . 2007-05-10 02:11 dr------- C:\Documents and Settings\Administrateur\Mes documents 2008-02-19 21:25 . 2007-05-10 02:11 dr------- C:\Documents and Settings\Administrateur\Menu Démarrer 2008-02-19 21:25 . 2007-05-10 02:11 dr------- C:\Documents and Settings\Administrateur\Favoris 2008-02-19 21:25 . 2007-05-10 02:11 d-------- C:\Documents and Settings\Administrateur\Bureau 2008-02-19 19:13 . 2008-02-19 19:13 d-------- C:\Documents and Settings\hp\Application Data\InstallShield 2008-02-09 19:42 . 2008-02-09 19:42 d-------- C:\Program Files\RayV 2008-02-09 12:22 . 2008-02-09 12:21 691,545 --a------ C:\WINDOWS\unins000.exe 2008-02-09 12:22 . 2008-02-09 12:22 3,454 --a------ C:\WINDOWS\unins000.dat 2008-01-28 21:54 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2008-01-28 21:54 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\dllcache\hidusb.sys 2008-01-28 20:22 . 2008-01-28 20:22 268 --ah----- C:\sqmdata00.sqm 2008-01-28 20:22 . 2008-01-28 20:22 244 --ah----- C:\sqmnoopt00.sqm . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-22 08:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater 2008-02-21 21:24 --------- d-----w C:\Program Files\eMule 2008-02-20 05:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-02-18 20:15 --------- d-----w C:\Program Files\a-squared Free 2008-02-18 20:12 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-02-09 18:41 --------- d-----w C:\Program Files\Odebit Multimédia 2008-02-09 12:34 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-02-09 10:24 --------- d-----w C:\Program Files\Windows Live 2008-02-08 10:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-01-28 19:28 --------- d-----w C:\Documents and Settings\hp\Application Data\Azureus 2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll 2008-01-06 10:00 --------- d-----w C:\Program Files\Photo Viewer 2007-12-19 22:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-12-18 09:51 179,584 ------w C:\WINDOWS\system32\dllcache\mrxdav.sys 2007-12-08 05:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-12-06 11:03 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2007-12-06 11:02 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-12-06 11:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-12-06 04:59 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll 2007-12-04 18:41 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll 2007-12-04 18:41 550,912 ------w C:\WINDOWS\system32\dllcache\oleaut32.dll 2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr 2007-10-15 01:36 0 ----a-w C:\Documents and Settings\hp\Application Data\wklnhst.dat 2005-09-24 06:49 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll . [code]

------w         1,396,246 2004-05-04 16:49:58  C:\Documents and Settings\hp\Mes documents\Logiciels Compaq\PocketPC Essentials Pack - Full programs, Tested, Working, Best of the best\Oxford Dict of Business and MSDict PPC 2.00 .exe

[/code] ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A2F12137-1918-4F31-B179-94C21A1E2BC2}] C:\WINDOWS\dmdvpnvnp.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 22:00 15360] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-24 19:17 68856] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 15:25 94208] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 08:59 204288] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488] "RayV"="C:\Program Files\RayV\RayV\RayV.exe" [2007-11-20 09:12 4306208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2006-05-03 21:58 458752] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-26 20:48 7561216] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-04-26 20:48 86016] "nwiz"="nwiz.exe" [2006-04-26 20:48 1519616 C:\WINDOWS\system32 wiz.exe] "High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2006-04-17 21:29 61952 C:\WINDOWS\system32\CHDAudPropShortcut.exe] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-04-01 06:01 761946] "QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [2006-04-11 20:54 102400] "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 22:11 49152] "QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-03-07 13:38 131072] "Cpqset"="C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe" [2006-05-02 09:36 40960] "RecGuard"="C:\Windows\SMINST\RecGuard.exe" [2005-10-11 09:23 1187840] "TVPService"="C:\Program Files\HP\TVPlay\TVPService.exe" [2006-04-03 12:34 135168] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 09:50 155648] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17 159744] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 05:24 286720] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-08-15 19:15 271672] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 22:00 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ D‚marrage rapide de HP Photosmart Premier.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2005-09-24 08:39:30 73728] Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-06-24 19:17:20 124912] Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2007-02-05 14:40:46 118784] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 14:39 294400] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= %windir%\system32\sessmgr.exe:@xpsp2res.dll,-22019 "C:\Program Files\AOL 9.0\waol.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "C:\Program Files\Freeplayer\vlc\vlc.exe"= "C:\Program Files\eMule\emule.exe"= "C:\Program Files\HP\TVPlay\TVPlay.exe"= "C:\Program Files\HP\TVPlay\TVPService.exe"= "C:\Program Files\Azureus\Azureus.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= %windir%\Network Diagnostic\xpnetdiag.exe:@xpsp3res.dll,-20000 "C:\Program Files\iTunes\iTunes.exe"= "C:\Program Files\VideoLAN\VLC\vlc.exe"= "C:\Program Files\adslTV\adsltv.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\RayV\RayV\RayV.exe"= "C:\Program Files\HP\HP Software Update\HPWUCli.exe"= R2 CyberLink Media Library Service(HP TVPlay);CyberLink Media Library Service(HP TVPlay);"C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe" [2006-04-03 12:34] R2 TVPCapSvc;CyberLink Background Capture Service (CBCS HP TVPlay);"C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe" [2006-04-03 12:35] R2 TVPSched;CyberLink Task Scheduler (CTS HP TVPlay);"C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe" [2006-04-03 12:35] R3 5U870CAP_VID_1262&PID_25FD;HP Pavilion Webcam ;C:\WINDOWS\system32\Drivers\5U870CAP.sys [2006-05-10 00:02] R3 nvsmu;nvsmu;C:\WINDOWS\system32\DRIVERS vsmu.sys [2006-03-06 00:49] S3 MODBDA2;DiBcom MOD3000 TV receiver;C:\WINDOWS\system32\Drivers\modbda2.sys [2006-05-13 08:52] . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-02-18 12:21:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-22 20:59:36 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe????????????,?@? ????W??????R?@?????,?@ Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-02-22 21:00:02 ComboFix-quarantined-files.txt 2008-02-22 20:00:00 . 2008-02-13 20:10:14 --- E O F ---

Utilisateur anonyme · Answer

poste un nouveau rapport hijackthis

ptiono · Answer

Logfile of HijackThis v1.99.1
Scan saved at 21:59:09, on 22/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX00.234\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SXG Advisor - {A2F12137-1918-4F31-B179-94C21A1E2BC2} - C:\WINDOWS\dmdvpnvnp.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [TVPService] "C:\Program Files\HP\TVPlay\TVPService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe /background
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8} - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Media Library Service(HP TVPlay) - Cyberlink - C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: CyberLink Background Capture Service (CBCS HP TVPlay) (TVPCapSvc) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS HP TVPlay) (TVPSched) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe

ptiono · Answer

....

Utilisateur anonyme · Answer

???

Utilisateur anonyme · Answer

connais tu  ce programme :C:\Program Files\RayV\RayV\RayV.exe

ptiono · Answer

C'est un programme que j'ai chargé pour regarder des chaines TV etrangères
C'est pas top????
Merci pour ton aide

Utilisateur anonyme · Answer

ok merci je trouvais peu d'infos dessus .


Ouvre le Bloc Notes.
Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

*****************************
REGEDIT4

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A2F12137-1918-4F31-B179-94C21A1E2BC2}]



*****************************
Clique sur "Fichier", "Enregistrer sous".
Clique sur Bureau (dans la colonne de gauche)
Dans Nom du fichier tu écris fix.reg
Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
Tu cliques sur Enregistrer.
Tu fermes le Bloc-notes

Sur ton bureau, tu double-clique sur l'icône de Fix.reg
Tu acceptes l'avertissement concernant la fusion
Le fix va travailler sans se manifester.
A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.



ensuite


télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :


C:\WINDOWS\dmdvpnvnp.dll


clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
copie et colle le rapport ici
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

ptiono · Answer

Voila

File/Folder C:\WINDOWS\dmdvpnvnp.dll not found.
 
OTMoveIt2 v1.0.20 log created on 02222008_223926

Utilisateur anonyme · Answer

ensuite le nettoyage

1) telecharge avg anti spyware et ccleaner


Telecharge AVG anti spywares

http://www.grisoft.com/doc/downloads-products/ww/crp/0?prd=triasw
Installe le puis...Lancer AVG Anti-Spyware.
Clique sur le menu Mise à jour.
Dans le paragraphe Mise à jour manuelle, cliquer sur le bouton Commencer la mise à jour.
Attends la fin de cette mise à jour puis ferme le programme.
Ne pas lancer d'analyse maintenant



Telecharge

-- CCleaner
https://www.ccleaner.com/ccleaner/download
Choisi de préférence la version SLIM-No Toolbar.
Installe-le en prenant soin de décocher les diverses options dont la barre Yahoo et la mise à jour.
Lance CCleaner puis Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Pour les autres paramètres, laisse-le avec ses réglages par défaut.
Ferme le programme pour l’instant.



2) Redémarre en mode sans échec

Regarde ici avant : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.



Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

3) Lance AVG Anti-Spyware 7.5

--Réglages

Clique sur le menu Analyse (de la barre d'outils).
Clique sur l'onglet Paramètres.
Dans Comment réagir? clique sur Actions recommandées et choisir Quarantaine.
Dans Comment faire l'analyse ? et dans Programmes potentiellement dangereux, vérifier que toutes les cases soient cochées.
Dans Rapports cocher "générer un rapport après chaque analyse"

-- Scan
Dans l'onglet Analyse
Clique sur Analyse complète du système.
Important : Ne pas ouvrir de fenêtre, ne pas lancer de programme pendant l'exécution de AVG Anti-Spyware, car cela pourrait interférer avec le processus de recherche.
Cliquer sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.(C:\Programfiles\AVG Antispyware 7.5\Reports)
Ensuite
Très important : A la fin de l'analyse, clique sur " Appliquer toutes les actions"

Puis ferme AVG Anti-Spyware.

4) Suppression de fichiers inutiles avec CCleaner

Lance CCleaner en double-cliquant sur son raccourci sur le bureau.
Puis dans le menu Nettoyeur
Clique sur Analyse (laisser travailler cela peut durer longtemps la 1ere fois)
Clique sur le bouton Lancer le nettoyage.
Clique une seconde fois sur le bouton Lancer le nettoyage
clique sur registre cherche et repare les erreurs effectue trois fois la manip pour que se sois éfficace !

5) Rapports

Fais redémarrer le PC en mode normal puis poste en réponse :

* Le rapport d AVG antispyware 7.5 situé ici C:\Programfiles\AVG Antispyware 7.5\Reports
* poste moi un nouveau rapport hijackthis

ptiono · Answer

Voili voilou pour AVG



[01/09/2007 11:19:34] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/09/2007 11:19:34] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/09/2007 13:34:29] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/09/2007 13:34:29] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[01/09/2007 13:34:29] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/09/2007 18:09:50] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/09/2007 18:09:51] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/09/2007 01:20:36] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/09/2007 01:20:36] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[02/09/2007 01:20:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/09/2007 13:49:14] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[02/09/2007 13:49:34] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/09/2007 13:49:34] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/09/2007 19:04:35] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[02/09/2007 19:04:54] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/09/2007 19:04:54] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[03/09/2007 10:48:57] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[03/09/2007 10:49:15] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[03/09/2007 10:49:16] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[03/09/2007 23:31:14] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[03/09/2007 23:31:35] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[03/09/2007 23:31:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/09/2007 22:50:25] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[04/09/2007 22:50:47] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/09/2007 22:50:47] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[05/09/2007 22:33:22] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[05/09/2007 22:33:44] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[05/09/2007 22:33:44] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[05/09/2007 22:33:44] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[06/09/2007 22:56:30] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[06/09/2007 22:56:52] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[06/09/2007 22:56:52] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[06/09/2007 22:56:52] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/09/2007 21:53:29] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/09/2007 21:53:29] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/09/2007 23:30:37] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[07/09/2007 23:31:01] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/09/2007 23:31:01] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[08/09/2007 23:18:08] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[08/09/2007 23:18:08] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[08/09/2007 23:18:08] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[09/09/2007 21:20:18] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[09/09/2007 21:20:38] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[09/09/2007 21:20:38] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[09/09/2007 21:20:39] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[10/09/2007 22:35:44] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[10/09/2007 22:36:05] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[10/09/2007 22:36:05] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 21:32:06] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/09/2007 21:32:24] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 21:32:24] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 21:47:55] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 21:47:55] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 22:21:57] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/09/2007 22:22:38] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 22:22:39] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[11/09/2007 22:22:39] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 22:37:16] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/09/2007 22:37:34] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 22:37:34] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 23:00:56] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 23:00:57] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 23:05:10] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 23:05:10] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 23:16:16] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/09/2007 23:16:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 23:16:32] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[11/09/2007 23:16:32] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/09/2007 23:51:32] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/09/2007 23:51:44] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/09/2007 23:51:44] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[11/09/2007 23:51:44] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[13/09/2007 10:47:38] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[13/09/2007 10:47:38] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[13/09/2007 10:47:38] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[14/09/2007 10:58:18] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[14/09/2007 10:58:19] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[15/09/2007 09:56:59] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[15/09/2007 09:57:10] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[15/09/2007 09:57:10] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[16/09/2007 01:39:37] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[16/09/2007 01:39:37] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[16/09/2007 01:39:38] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[16/09/2007 01:43:51] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[16/09/2007 01:44:03] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[16/09/2007 01:44:03] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[16/09/2007 01:44:03] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[16/09/2007 21:03:10] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[16/09/2007 21:03:23] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[16/09/2007 21:03:23] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[16/09/2007 21:03:23] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[18/09/2007 08:39:40] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[18/09/2007 08:39:57] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[18/09/2007 08:39:58] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[19/09/2007 10:49:28] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[19/09/2007 10:49:46] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[19/09/2007 10:49:47] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[20/09/2007 22:37:56] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[20/09/2007 22:38:08] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[20/09/2007 22:38:08] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[22/09/2007 00:46:11] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[22/09/2007 00:46:24] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[22/09/2007 00:46:25] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[22/09/2007 23:45:15] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[22/09/2007 23:45:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[22/09/2007 23:45:32] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/09/2007 08:41:58] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/09/2007 08:42:19] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/09/2007 08:42:20] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/09/2007 22:04:04] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/09/2007 22:04:18] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/09/2007 22:04:18] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/09/2007 23:56:39] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/09/2007 23:56:39] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[27/09/2007 11:52:41] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[27/09/2007 11:52:41] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/09/2007 11:40:03] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/09/2007 11:40:03] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/09/2007 20:14:45] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[28/09/2007 20:15:04] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/09/2007 20:15:05] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/09/2007 23:58:03] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[28/09/2007 23:58:23] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/09/2007 23:58:23] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[29/09/2007 14:17:27] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[29/09/2007 14:17:48] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[29/09/2007 14:17:48] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[29/09/2007 14:17:48] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[29/09/2007 23:56:54] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[29/09/2007 23:57:12] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[29/09/2007 23:57:12] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[29/09/2007 23:57:13] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[30/09/2007 22:36:55] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[30/09/2007 22:37:15] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[30/09/2007 22:37:15] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[30/09/2007 22:37:15] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/10/2007 23:26:37] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/10/2007 23:26:56] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/10/2007 23:26:56] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[01/10/2007 23:26:56] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/10/2007 19:00:48] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/10/2007 19:00:48] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/10/2007 22:51:47] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[02/10/2007 22:52:06] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/10/2007 22:52:06] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/10/2007 06:32:14] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/10/2007 06:32:14] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/10/2007 19:37:35] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/10/2007 19:37:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/10/2007 21:43:45] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[04/10/2007 21:44:02] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/10/2007 21:44:02] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[05/10/2007 20:58:04] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[05/10/2007 20:58:05] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[06/10/2007 00:40:43] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[06/10/2007 00:40:43] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[06/10/2007 21:21:55] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[06/10/2007 21:22:15] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[06/10/2007 21:22:15] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[06/10/2007 21:22:16] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[07/10/2007 10:09:09] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/10/2007 10:09:09] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/10/2007 23:12:50] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[07/10/2007 23:13:09] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/10/2007 23:13:09] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[09/10/2007 01:06:10] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[09/10/2007 01:06:10] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[09/10/2007 01:06:10] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[10/10/2007 12:14:59] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[10/10/2007 12:14:59] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[10/10/2007 12:14:59] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/10/2007 10:06:57] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/10/2007 10:06:58] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/10/2007 10:42:44] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/10/2007 10:43:02] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/10/2007 10:43:02] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[11/10/2007 10:43:02] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/10/2007 13:46:23] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/10/2007 13:46:43] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/10/2007 13:46:43] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/10/2007 18:16:28] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[11/10/2007 18:16:49] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/10/2007 18:16:49] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[11/10/2007 18:16:49] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[12/10/2007 10:12:00] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[12/10/2007 10:12:01] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[12/10/2007 10:12:01] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[12/10/2007 23:17:08] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[12/10/2007 23:17:08] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[14/10/2007 11:33:16] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[14/10/2007 11:33:36] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[14/10/2007 11:33:36] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[14/10/2007 11:33:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[14/10/2007 15:34:48] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[14/10/2007 15:35:08] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[14/10/2007 15:35:08] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[14/10/2007 15:35:09] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[14/10/2007 22:39:00] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[14/10/2007 22:39:19] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[14/10/2007 22:39:19] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[16/10/2007 11:12:56] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[16/10/2007 11:13:14] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[16/10/2007 11:13:14] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[16/10/2007 11:13:14] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[16/10/2007 22:39:08] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[16/10/2007 22:39:08] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[16/10/2007 22:39:08] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[18/10/2007 09:48:12] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[18/10/2007 09:48:31] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[18/10/2007 09:48:31] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[18/10/2007 09:48:31] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[19/10/2007 12:42:13] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[19/10/2007 12:42:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[19/10/2007 12:42:33] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[19/10/2007 22:44:30] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[19/10/2007 22:44:30] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/10/2007 02:03:08] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/10/2007 02:03:25] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/10/2007 02:03:26] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/10/2007 22:03:03] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/10/2007 22:03:21] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/10/2007 22:03:22] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[23/10/2007 13:59:59] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[23/10/2007 14:00:17] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[23/10/2007 14:00:17] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/10/2007 10:55:30] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/10/2007 10:55:48] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/10/2007 10:55:48] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[24/10/2007 10:55:48] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/10/2007 08:57:45] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[25/10/2007 08:58:05] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/10/2007 08:58:05] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[25/10/2007 08:58:05] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/10/2007 21:10:03] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[25/10/2007 21:10:23] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/10/2007 21:10:23] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[25/10/2007 21:10:24] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/10/2007 21:10:31] Error: Couldn't load clsid.dat, Value: 00000020,  Position: .\BhoViewer.cpp, 1189
[25/10/2007 21:10:31] Error: Couldn't load clsid.dat, Value: 00000020,  Position: .\BhoViewer.cpp, 1189
[25/10/2007 21:10:31] Error: Couldn't load clsid.dat, Value: 00000020,  Position: .\BhoViewer.cpp, 1189
[25/10/2007 21:10:31] Error: Couldn't load clsid.dat, Value: 00000020,  Position: .\BhoViewer.cpp, 1189
[25/10/2007 21:10:31] Error: Couldn't load clsid.dat, Value: 00000020,  Position: .\BhoViewer.cpp, 1189
[25/10/2007 21:44:50] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[25/10/2007 21:45:13] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/10/2007 21:45:13] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[25/10/2007 21:45:13] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[26/10/2007 12:53:06] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[26/10/2007 12:53:25] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[26/10/2007 12:53:26] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[26/10/2007 23:02:17] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[26/10/2007 23:02:36] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[26/10/2007 23:02:36] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[26/10/2007 23:02:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[27/10/2007 13:13:24] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[27/10/2007 13:13:44] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[27/10/2007 13:13:44] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[27/10/2007 16:12:08] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[27/10/2007 16:12:28] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[27/10/2007 16:12:28] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/10/2007 16:15:19] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[28/10/2007 16:15:39] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/10/2007 16:15:39] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[29/10/2007 09:46:18] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[29/10/2007 09:46:40] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[29/10/2007 09:46:40] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[30/10/2007 13:01:27] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[30/10/2007 13:01:46] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[30/10/2007 13:01:47] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[30/10/2007 23:41:40] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[30/10/2007 23:41:41] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/11/2007 10:50:12] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/11/2007 10:50:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/11/2007 10:50:32] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/11/2007 23:03:37] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/11/2007 23:03:59] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/11/2007 23:03:59] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[02/11/2007 20:36:47] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[02/11/2007 20:37:06] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[02/11/2007 20:37:07] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[03/11/2007 23:24:30] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[03/11/2007 23:24:30] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/11/2007 22:45:47] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[04/11/2007 22:46:07] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/11/2007 22:46:07] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[05/11/2007 22:19:51] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[05/11/2007 22:20:09] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[05/11/2007 22:20:09] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[05/11/2007 22:20:09] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[06/11/2007 23:13:29] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[06/11/2007 23:13:46] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[06/11/2007 23:13:46] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/11/2007 22:47:10] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[07/11/2007 22:47:30] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/11/2007 22:47:30] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[08/11/2007 22:36:55] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[08/11/2007 22:37:16] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[08/11/2007 22:37:17] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[09/11/2007 18:03:19] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[09/11/2007 18:03:37] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[09/11/2007 18:03:37] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[10/11/2007 23:35:10] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[10/11/2007 23:35:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[10/11/2007 23:35:32] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[10/11/2007 23:35:33] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[11/11/2007 23:01:50] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[11/11/2007 23:01:50] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[13/11/2007 02:05:59] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[13/11/2007 02:06:18] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[13/11/2007 02:06:18] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[13/11/2007 02:06:18] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[14/11/2007 12:19:54] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[14/11/2007 12:20:16] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[14/11/2007 12:20:16] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[15/11/2007 00:22:57] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[15/11/2007 00:23:14] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[15/11/2007 00:23:15] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[15/11/2007 01:26:53] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[15/11/2007 01:27:13] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[15/11/2007 01:27:13] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[15/11/2007 02:24:58] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[15/11/2007 02:24:59] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[17/11/2007 11:09:46] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[17/11/2007 11:09:46] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[17/11/2007 11:09:46] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[17/11/2007 20:39:26] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[17/11/2007 20:39:45] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[17/11/2007 20:39:45] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[18/11/2007 18:29:22] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[18/11/2007 18:29:23] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[18/11/2007 18:29:23] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[19/11/2007 20:14:25] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[19/11/2007 20:14:43] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[19/11/2007 20:14:43] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[20/11/2007 23:01:57] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[20/11/2007 23:01:57] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[20/11/2007 23:01:58] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/11/2007 12:58:22] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/11/2007 12:58:40] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/11/2007 12:58:41] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/11/2007 14:12:14] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/11/2007 14:12:32] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/11/2007 14:12:34] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/11/2007 21:16:14] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/11/2007 21:16:37] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/11/2007 21:16:38] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[21/11/2007 22:39:36] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[21/11/2007 22:39:56] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[21/11/2007 22:39:56] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[21/11/2007 22:39:56] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[22/11/2007 12:03:19] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[22/11/2007 12:03:39] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[22/11/2007 12:03:39] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[22/11/2007 22:50:56] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[22/11/2007 22:50:56] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[22/11/2007 22:50:56] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/11/2007 11:13:05] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/11/2007 11:13:25] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/11/2007 11:13:25] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/11/2007 14:54:18] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/11/2007 14:54:38] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/11/2007 14:54:38] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[24/11/2007 18:08:22] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[24/11/2007 18:08:41] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[24/11/2007 18:08:42] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/11/2007 10:41:18] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[25/11/2007 10:41:37] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/11/2007 10:41:37] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[25/11/2007 10:41:38] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[25/11/2007 23:14:16] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[25/11/2007 23:14:34] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[25/11/2007 23:14:34] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[25/11/2007 23:14:34] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[26/11/2007 22:40:23] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[26/11/2007 22:40:23] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[26/11/2007 22:40:24] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/11/2007 10:46:18] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/11/2007 10:46:18] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[28/11/2007 10:46:18] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/11/2007 20:38:42] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[28/11/2007 20:39:02] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/11/2007 20:39:02] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/11/2007 20:42:08] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[28/11/2007 20:42:26] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/11/2007 20:42:26] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[28/11/2007 20:42:27] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[28/11/2007 23:48:36] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[28/11/2007 23:48:36] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[28/11/2007 23:48:36] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[29/11/2007 22:46:11] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[29/11/2007 22:46:31] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[29/11/2007 22:46:31] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/12/2007 01:20:02] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/12/2007 01:20:19] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/12/2007 01:20:19] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/12/2007 17:41:13] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/12/2007 17:41:35] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/12/2007 17:41:35] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[01/12/2007 17:41:35] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[01/12/2007 20:23:38] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[01/12/2007 20:23:59] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[01/12/2007 20:23:59] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[03/12/2007 11:58:33] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[03/12/2007 11:58:52] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[03/12/2007 11:58:52] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[04/12/2007 11:15:49] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[04/12/2007 11:16:09] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[04/12/2007 11:16:10] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[05/12/2007 10:00:39] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[05/12/2007 10:01:00] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[05/12/2007 10:01:00] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[05/12/2007 22:25:23] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[05/12/2007 22:25:43] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[05/12/2007 22:25:43] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[05/12/2007 22:25:43] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/12/2007 10:38:19] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/12/2007 10:38:19] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[07/12/2007 10:38:19] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[07/12/2007 23:54:33] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[07/12/2007 23:55:00] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[07/12/2007 23:55:00] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[07/12/2007 23:55:00] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[09/12/2007 00:37:34] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[09/12/2007 00:37:35] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[09/12/2007 00:37:35] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[09/12/2007 21:40:38] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[09/12/2007 21:40:59] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[09/12/2007 21:41:00] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[09/12/2007 21:41:00] Error: [CConnectionInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ConnectionInformation.cpp, 227
[10/12/2007 22:37:57] Error: failed to connect to server, Value: 00000002,  Position: .\Client.cpp, 26
[10/12/2007 22:38:19] Error: [CProcessInformation]: Creating snapshot for module enumeration failed., Value: 00000008,  Position: .\ProcessInformation.cpp, 274
[10/12/2007 22:38:19] Error: [CProcessInformation]: Module32First failed, Value: 00000012,  Position: .\ProcessInformation.cpp, 291
[10/

Utilisateur anonyme · Answer

bonjour , il y a eu  une erreur dans la creation du rapport avg , as tu applique toutes les actions ? te rappel tu des menaces trouves par avg ,: coockies traceurs trojans , .....

ptiono · Answer

Non, je sais simplement qu'il y avait 16 menaces moyennes

ptiono · Answer

J'ai refait Bitdefender: rien trouvé
Ccleaner ok
Adaware ok
Avast: rien trouvé
A-squared: voir rapport:5 objets détectés et mis en quarantaine

Version - a-squared Free 3.1
Dernière mise à jour: 23/02/2008 21:17:59

Réglages Scan:

Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Scan archives: Marche
Heuristiques: Marche
Scan ADS: Marche

Début du scan:	23/02/2008 21:19:03

Key: HKEY_USERS\S-1-5-21-3385849141-2414368247-2749822644-1006\software\kazaa 	Détecter: Trace.Registry.KaZaA
C:\Documents and Settings\hp\Cookies\hp@commentcamarche[1].txt 	Détecter: Trace.TrackingCookie
C:\WINDOWS\BDOSCAN8\SmitfraudFix\Process.exe 	Détecter: Riskware.RiskTool.Win32.Processor.20
C:\WINDOWS\BDOSCAN8\SmitfraudFix\Reboot.exe 	Détecter: Riskware.RiskTool.Win32.Reboot.f
C:\WINDOWS\system32\Process.exe 	Détecter: Riskware.RiskTool.Win32.Processor.20

Scanné

Fichiers: 	101861
Traces: 	371755
Cookies: 	13
Processus: 	53

Trouver

Fichiers: 	3
Traces: 	1
Cookies: 	1
Processus: 	0
Clés de Registre: 	0

Fin du Scan:	23/02/2008 22:34:48
Temps du Scan:	1:15:45

Voici un dernier Rapport

Logfile of HijackThis v1.99.1
Scan saved at 22:48:34, on 23/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
C:\Program Files\HP\TVPlay\TVPService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\a-squared Free\a2free.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX00.703\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A2F12137-1918-4F31-B179-94C21A1E2BC2} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [TVPService] "C:\Program Files\HP\TVPlay\TVPService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: admgcx - {068B0BB9-7EB0-47FA-A947-46B9055252C8} - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Media Library Service(HP TVPlay) - Cyberlink - C:\Program Files\HP\TVPlay\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: CyberLink Background Capture Service (CBCS HP TVPlay) (TVPCapSvc) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS HP TVPlay) (TVPSched) - Unknown owner - C:\Program Files\HP\TVPlay\Kernel\TV\TVPSched.exe


Tu penses que je suis tiré d'affaires?
Merci
PTIONO

Utilisateur anonyme · Answer

bonjour ca m'as l'air mieu voici ce que je te conseil fortement desisntal avast qui est bien moins performant que antivir ( en ce moment avast ne te protege pas vraiment , la preuve ton infection) :https://www.commentcamarche.net/telecharger/ 34055246 utilitaire de desinstallation de avast anti virus : antivir https://www.malekal.com/avira-free-security-antivirus-gratuit/ http://mickael.barroux.free.fr/securite/antivir.php <- tutoriel + complet par feu : kerio 4.2 gratuit apres les 30 jours d´evaluation, seules quelques fonctions vont etre desactivées celles qui touche le net, mais facilement paré par l´utilisation de firefox et de ad blok plus par exemple ( plug in firefox) https://www.hugedomains.com/domain_profile.cfm?d=geckozone&e=org moi j´utilise aussi le plug in https://addons.mozilla.org/fr/firefox/addon/433 il bloque les annimations flash et les remplace par un f clickable pour voir l ánnimation si desiré en pare feu je te conseil kerio : http://www.commentcamarche.net/telecharger/telechargement 206 kerio aide pour configurer kerio :http://www.malekal.com/kerio_firewall.php sinon tu as zone alarm free qui est plus simple d'utilisation mais un peu moin performant :https://www.commentcamarche.net/telecharger/ 157 zonealarm aide pour zone alarm :https://www.malekal.com/tutoriel-zonealarm-firewall/

ptiono · Answer

MERCI beaucoup à toi pour ces précieux conseils et j'espère que je n'aurais plus à te deranger
Cordialement
PTIONO

Utilisateur anonyme · Answer

de rien , ; -) une fois les consignes du poste 32 effectues poste moi dernier rapport hijackthis afin d'effecer le dernieres traces . ensuite se seras l'etape final la suppression des outils

Help!!!! virus de merde!

34 réponses

Discussions similaires

Newsletters