Pages internet qui s'ouvrent toutes seules

Résolu/Fermé
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 - 11 nov. 2008 à 22:11
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 - 11 déc. 2008 à 01:43
Bonjour,
j'utilise windows XP et Mozilla firefox mais depui peu jai des fenetres internet ki souvrent toute seules, des sites de poker, casino ,de rencontre... c de pire en pire minan c des diziane de fenetres qui souvrent toute les 10secondes
comment faire ??
aidez moi svp
A voir également:

32 réponses

anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
11 nov. 2008 à 22:15
Bonsoir,


Télécharge hijackthis (logiciel de diagnostique) sur ton bureau : https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/

Installe le, lance le et clique sur "Do a system scan and save a logfile".
Fais un copier-coller du rapport entier sur le forum

0
NourMIS Messages postés 46 Date d'inscription dimanche 11 mai 2008 Statut Membre Dernière intervention 30 avril 2009 1
11 nov. 2008 à 22:18
bsr, En fait ton ordi est infecté tu px le désinfecter gratuitement par secuser , en cliquant sur le lien suivant :
http://www.secuser.com/antivirus/index.htm
Si ça resoudra pas tn probleme tiens moi au courant comme ça je te donne une autre solution.
bonne soirée
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
11 nov. 2008 à 22:23
.
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
11 nov. 2008 à 22:22
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:18:48, on 11/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\Windl\mirc.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\WINDOWS\system32\mirc.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Winamp\winamp.exe
C:\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O6 "USB001" /M "Stylus CX3200"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Windl] C:\WINDOWS\Windl\mirc.exe
O4 - HKLM\..\Run: [mirc] C:\WINDOWS\system32\mirc.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O17 - HKLM\System\CCS\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
11 nov. 2008 à 22:24
voila le rapport avec HijackThis
merci de m'aider c super sympa!
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
11 nov. 2008 à 22:25
Il y a deux infections, on va commencer par la plus facile à supprimer : Search Settings


Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
11 nov. 2008 à 22:32
-----------\\ ToolBar S&D 1.2.4 XP/Vista


"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [1] ( 11/11/2008|22:27 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Dealio
C:\Program Files\Dealio\kb127
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings
C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\DOCUME~1\ADMINI~1\Cookies\administrateur@cs.shopperreports[1].txt

-----------\\ Extensions

(Administrateur) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Search Bar"="http://www.google.fr/toolbar/ie8/sidebar.html"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.google.fr/?gws_rd=ssl"
"Default_Search_URL"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Start Page"="https://www.google.fr/?gws_rd=ssl"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\00000001.TMP
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\0x040c.ini
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\autorun.inf
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\CoD4MW.msi
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\CRACK + SERIAL
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Extras
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\FirewallInstallHelper.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\instmsia.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\instmsiw.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\ISSetup.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\PB.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\pbsvc.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\setup.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup.ini
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\splash.bmp
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\version.inf
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\WindowsInstaller-KB893803-x86.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\CRACK + SERIAL\iw3sp.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\CRACK + SERIAL\Serial Call Of Duty 4.txt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2005_d3dx9_25_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2005_d3dx9_25_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_d3dx9_30_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_d3dx9_30_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_MDX1_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_MDX1_x86_Archive.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_xinput_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Apr2006_xinput_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_d3dx10_33_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_d3dx10_33_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_d3dx9_33_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_d3dx9_33_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_xinput_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\APR2007_xinput_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Aug2005_d3dx9_27_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Aug2005_d3dx9_27_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\AUG2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\AUG2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\AUG2006_xinput_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\AUG2006_xinput_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\BDANT.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\BDAXP.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Dec2005_d3dx9_28_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Dec2005_d3dx9_28_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_d3dx10_00_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_d3dx10_00_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_d3dx9_32_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_d3dx9_32_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DEC2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DSETUP.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\dsetup32.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\dx.inf
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\dxdllreg_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\dxnt.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\DXSETUP.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\dxupdate.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2005_d3dx9_24_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2005_d3dx9_24_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2006_d3dx9_29_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2006_d3dx9_29_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Feb2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\FEB2007_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\FEB2007_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Jun2005_d3dx9_26_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Jun2005_d3dx9_26_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_d3dx10_34_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_d3dx10_34_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_d3dx9_34_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_d3dx9_34_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\JUN2007_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Oct2005_xinput_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\Oct2005_xinput_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\OCT2006_d3dx9_31_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\OCT2006_d3dx9_31_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\OCT2006_XACT_x64.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\DirectX\OCT2006_XACT_x86.cab
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\help.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\license.txt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\manual.pdf
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\msr.txt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\PBEULA.txt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\credits.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\customer_support.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\legal.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\license.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\msr.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\readme.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\Help\_top.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\audio_problems.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\autoplay.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\cd_dvd_problems.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\compressed_drive.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\crashes.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\directx.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\patches.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\sound_conflicts.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\tech_help.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\_main.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\_main2.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\html\_toc.htm
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\Activision.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\ap_xp_large.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\ap_xp_small.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\DevLogo.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\dma_large.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\dma_small.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\GameLogo.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\redstripe.jpg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Docs\FRA\images\spacer.gif
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Extras\Reader
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Extras\Reader\AdbeRdr708_en_US.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\binkw32.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\cod.bmp
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\cod4.ico
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\codlogo.bmp
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\iw3mp.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\iw3sp.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\localization.txt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\mss32.dll
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_00.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_01.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_02.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_03.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_04.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_05.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_06.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_07.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_08.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_09.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_10.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\iw_11.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw00.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw01.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw02.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw03.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw04.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw05.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\localized_french_iw06.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\ac130_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\ac130_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Aftermath_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Aftermath_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\airlift_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Airlift_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\airplane_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\ambush_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Ambush_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\armada_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Armada_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\asad_speech_180.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\attract.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\atvi.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\black.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\blackout_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Blackout_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\bog_a_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\bog_a_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\bog_b_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\bog_b_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\cargoship_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\cargoship_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\cod_intro.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\coup_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\coup_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\credits_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\default.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\dog_vs_player_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\hunted_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\hunted_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\icbm_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\icbm_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\IW_logo.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\jeepride_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\jeepride_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\killhouse_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\killhouse_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\Killhouse_monitor1.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\launchfacility_a_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\launchfacility_a_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\launchfacility_b_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\launchfacility_b_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\legal.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\scoutsniper_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\scoutsniper_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\simplecredits_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\sniperescape_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\village_assault_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\village_assault_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\village_defend_fade.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\village_defend_load.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\main\video\zakhaev_escape.bik
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\milesEq.flt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\mssds3d.flt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\mssdsp.flt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\msseax.flt
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\mssmp3.asi
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\miles\mssvoice.asi
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\7za.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\default_server.cfg
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\makeMod.bat
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\mod.csv
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\mod.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\Mods\ModWarfare\z_modwarfare.iwd
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\ac130.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\aftermath.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\airlift.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\airplane.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\ambush.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\armada.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\blackout.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\bog_a.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\bog_b.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\cargoship.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\code_post_gfx.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\code_post_gfx_mp.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\common.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\common_mp.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\coup.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\hunted.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\icbm.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\jeepride.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\killhouse.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\launchfacility_a.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\launchfacility_b.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\localized_code_post_gfx_mp.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\localized_common_mp.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_backlot.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_backlot_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_bloc.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_bloc_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_bog.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_bog_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_cargoship.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_cargoship_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_citystreets.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_citystreets_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_convoy.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_convoy_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_countdown.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_countdown_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_crash.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_crash_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_crossfire.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_crossfire_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_farm.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_farm_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_overgrown.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_overgrown_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_pipeline.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_pipeline_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_shipment.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_shipment_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_showdown.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_showdown_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_strike.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_strike_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_vacant.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\mp_vacant_load.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\scoutsniper.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\simplecredits.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\sniperescape.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\ui.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\ui_mp.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\village_assault.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\Data\zone\french\village_defend.ff
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc\AUTORUN.EXE
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc\autorun.ini
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc\CoD4.exe
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc\cod4.ico
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur)\Setup\rsrc\Data.CAB
C:\DOCUME~1\ADMINI~1\Recent\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur).rar.lnk
C:\DOCUME~1\ADMINI~1\Recent\CRACK + SERIAL.lnk
C:\DOCUME~1\ADMINI~1\Recent\[PC GAME Crack] Saints Row 2 (Crack NO CD + Serial).rar.lnk



1 - "C:\ToolBar SD\TB_1.txt" - 11/11/2008|22:28 - Option : [1]

-----------\\ Fin du rapport a 22:28:44,56
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
11 nov. 2008 à 22:51
Avec autant de cracks et keygens, pas étonnant que ton ordinateur soit infecté ! Les cracks installent très souvent des infections : https://forum.malekal.com/viewtopic.php?f=33&t=893
Il faut les bannir complément... Si tu ne les supprimes pas, inutile de continuer la désinfection, les cracks et keygens réinfecteront ton ordinateur sans arrêt !

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
11 nov. 2008 à 22:58
A ok je comprend minan pourquoi mon pc y rame lol mais sans cracks et keygens mes jeux von plu marcher!!??
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790 > Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
11 nov. 2008 à 23:06
"sans cracks et keygens mes jeux von plu marcher "

Non, en effet...
Tu dis "mes jeux" : tous tes jeux sont crackés ? Ici je n'en vois qu'un (call of duty), il y en a d'autres ?
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015
11 nov. 2008 à 23:15
jai que call of duty 4 qui est cracké
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015
11 nov. 2008 à 23:20
y faut que je déseinstal call of duty ??
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 00:30
Oui, désinstalle le jeu cracké.
Ensuite, pour supprimer les cracks :


---> Télécharge OTMoveIt3 (de OldTimer) sur ton Bureau : http://oldtimer.geekstogo.com/OTMoveIt3.exe
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie/colle le texte suivant dans le cadre « Paste Instructions for Items to be Moved » et clique sur Moveit :
:files 
C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur) 
C:\DOCUME~1\ADMINI~1\Recent\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur).rar.lnk 
C:\DOCUME~1\ADMINI~1\Recent\CRACK + SERIAL.lnk 
C:\DOCUME~1\ADMINI~1\Recent\[PC GAME Crack] Saints Row 2 (Crack NO CD + Serial).rar.lnk 

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles
Le nom du rapport correspond au moment de sa création : date_heure.log




Ensuite, pour la barre d'outil infectée, relance Toolbar-S&D en double-cliquant sur le raccourci.
Tape sur "2" puis valide en appuyant sur "Entrée".

! Ne ferme pas la fenêtre lors de la suppression !

Un rapport sera généré, poste son contenu ici.
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 00:47
========== FILES ==========
File/Folder C:\DOCUME~1\ADMINI~1\Bureau\rc jeux\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur) not found.
C:\DOCUME~1\ADMINI~1\Recent\Call Of Duty 4 - Modern Warfare FR + Crack & Serial (By Serial-Crackeur).rar.lnk moved successfully.
C:\DOCUME~1\ADMINI~1\Recent\CRACK + SERIAL.lnk moved successfully.
C:\DOCUME~1\ADMINI~1\Recent\[PC GAME Crack] Saints Row 2 (Crack NO CD + Serial).rar.lnk moved successfully.

OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 11122008_004247
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 00:52
-----------\\ ToolBar S&D 1.2.4 XP/Vista


"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 12/11/2008| 0:47 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\Dealio\kb127
Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@cs.shopperreports[1].txt
Supprime! - C:\Program Files\Dealio
Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Administrateur) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Search Bar"="http://www.google.fr/toolbar/ie8/sidebar.html"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.google.fr/?gws_rd=ssl"
"Default_Search_URL"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 11/11/2008|22:28 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 12/11/2008| 0:48 - Option : [2]

-----------\\ Fin du rapport a 0:48:48,29
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 02:00
Pour l'autre infection maintenant :

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.

• Puis, ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur une touche pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau rapport Hijackthis !

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 02:33
en touca jte remercie de m'aider parce que toute seul faire tout sa s'était impossible!!
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 03:24
juste une question! ce que tu me dit de faire la sa ne va pa me suprimée mes données (musique,film...)???
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790 > Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 03:58
SDFix est fait pour supprimer des infections, en principe tes données personnelles ne risquent rien...

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015
12 nov. 2008 à 04:16
ok bon je vais faire ce que tu ma dit dé demin! merci quand sa sera fait jafficherai le rapport
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015
12 nov. 2008 à 16:17
[b]SDFix: Version 1.240 /b
Run by Administrateur on 12/11/2008 at 15:52

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services /b:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files /b:

Trojan Files Found:

C:\Documents and Settings\Administrateur\Local Settings\Temp\ubi1DB.tmp.exe - Deleted
C:\WINDOWS\system32\aliases.ini - Deleted
C:\WINDOWS\system32\mirc.ini - Deleted
C:\WINDOWS\system32\mIRC.exe - Deleted
C:\WINDOWS\system32\reg.reg - Deleted
C:\WINDOWS\system32\remote.ini - Deleted
C:\WINDOWS\system32\script.ini - Deleted
C:\WINDOWS\system32\servers.ini - Deleted





Removing Temp Files

[b]ADS Check /b:



[b]Final Check /b:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-12 16:09:36
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:07,14,cd,1d,09,5a,a2,ad,3f,dc,99,02,1d,41,6f,69,fe,02,67,23,41,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,5c,af,80,65,6c,18,74,47,b4,97,bc,6e,80,23,43,fe,b2,..
"khjeh"=hex:db,81,fc,75,21,f1,ef,0e,12,ff,17,9b,cd,13,bb,77,c9,1b,f6,56,9e,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:f1,8e,5e,d4,5e,29,a3,a3,63,c8,26,6a,67,0a,30,f9,63,cb,a9,76,f1,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:1c,fe,fd,12,40,88,1a,ab,a2,8c,03,72,2e,26,ab,e3,0e,df,31,92,49,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:38,ac,29,e7,9e,15,43,c3,5b,36,c1,71,78,94,04,08,78,21,ba,d3,d2,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:c4,85,f3,4b,59,93,f8,3e,93,10,55,4d,12,35,21,3e,d5,11,ca,b8,fb,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:07,14,cd,1d,09,5a,a2,ad,3f,dc,99,02,1d,41,6f,69,fe,02,67,23,41,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,5c,af,80,65,6c,18,74,47,b4,97,bc,6e,80,23,43,fe,b2,..
"khjeh"=hex:db,81,fc,75,21,f1,ef,0e,12,ff,17,9b,cd,13,bb,77,c9,1b,f6,56,9e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:f1,8e,5e,d4,5e,29,a3,a3,63,c8,26,6a,67,0a,30,f9,63,cb,a9,76,f1,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:1c,fe,fd,12,40,88,1a,ab,a2,8c,03,72,2e,26,ab,e3,0e,df,31,92,49,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:38,ac,29,e7,9e,15,43,c3,5b,36,c1,71,78,94,04,08,78,21,ba,d3,d2,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:c4,85,f3,4b,59,93,f8,3e,93,10,55,4d,12,35,21,3e,d5,11,ca,b8,fb,..

scanning hidden registry entries ...

scanning hidden files ...

C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1


[b]Remaining Services /b:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.0"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\MSN Messenger\\msnmsgr.exe"="C:\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\\Program Files\\Media Player Classic\\mplayerc.exe"="C:\\Program Files\\Media Player Classic\\mplayerc.exe:*:Enabled:Media Player Classic"
"C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"="C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe:*:Enabled:Update Service"
"C:\\WINDOWS\\explorer.exe"="C:\\WINDOWS\\explorer.exe:*:Enabled:Explorateur Windows"
"C:\\Program Files\\WinRAR\\WinRAR.exe"="C:\\Program Files\\WinRAR\\WinRAR.exe:*:Enabled:WinRAR archiver"
"C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"="C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe:*:Enabled:Far Cry 2"
"C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"="C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"="C:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe:*:Enabled:Editeur"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe"="C:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe:*:Enabled:Hercules Webcam Station Evolution SE"
"C:\\WINDOWS\\Windl\\mirc.exe"="C:\\WINDOWS\\Windl\\mirc.exe:*:Disabled:mIRC"
"C:\\WINDOWS\\system32\\mirc.exe"="C:\\WINDOWS\\system32\\mirc.exe:*:Disabled:mIRC"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.0"

[b]Remaining Files /b:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes /b:

Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Mon 2 Jun 2008 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 8 Nov 2008 910 ...HR --- "C:\Documents and Settings\Administrateur\Application Data\SecuROM\UserData\securom_v7_01.bak"
Wed 28 May 2003 65,088 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\3COM 3c556 Packet\3C556.COM"
Wed 28 May 2003 12,732 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\3COM 3c509 Packet\3C5X9PD.COM"
Wed 28 May 2003 26,424 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\3COM 3c59x Packet\3C59XPD.COM"
Wed 28 May 2003 28,062 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1207F Packet\EN5251PD.COM"
Wed 28 May 2003 10,710 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1207C Packet\PCIPD.COM"
Wed 28 May 2003 10,083 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1207D Packet\ACCPKT.COM"
Wed 28 May 2003 10,257 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX Packet\PCIPD.COM"
Wed 28 May 2003 29,499 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1203 Packet\PCIPD.COM"
Wed 28 May 2003 12,660 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1204 Packet\VLNWPD.COM"
Wed 28 May 2003 11,031 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1207 Packet\PCIPD.COM"
Wed 28 May 2003 17,952 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1200 Packet\EC32PD.COM"
Wed 28 May 2003 9,424 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1208 Packet\1208PD.COM"
Wed 28 May 2003 7,825 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1650 Packet\NWPD.COM"
Wed 28 May 2003 13,673 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1640 Packet\NWPD.COM"
Wed 28 May 2003 14,438 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1658 Packet\NWPD.COM"
Wed 28 May 2003 7,825 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN166X Packet\NWPD.COM"
Wed 28 May 2003 7,825 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1651 Packet\NWPD.COM"
Wed 28 May 2003 7,825 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1652 Packet\NWPD.COM"
Wed 28 May 2003 7,243 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1653 Packet\NE2PD.COM"
Wed 28 May 2003 24,767 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN2216 Packet\PCMPD.COM"
Wed 28 May 2003 7,463 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1625 Packet\NEPD.COM"
Wed 28 May 2003 7,825 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1656 Packet\NWPD.COM"
Wed 28 May 2003 10,286 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN2228 Packet\PCMPD.COM"
Wed 28 May 2003 25,460 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN2218 Packet\PCMPD.COM"
Wed 28 May 2003 28,866 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN2320 Packet\EN5251PD.COM"
Wed 28 May 2003 14,438 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\ACCTON EN1657 Packet\NWPD.COM"
Wed 28 May 2003 8,544 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\Elndis.sys"
Wed 28 May 2003 33,149 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\Usbd.sys"
Wed 28 May 2003 51,150 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPI1394.SYS"
Wed 28 May 2003 35,340 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPI2DOS.SYS"
Wed 28 May 2003 14,378 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPI4DOS.SYS"
Wed 28 May 2003 37,984 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPI8DOS.SYS"
Wed 28 May 2003 44,828 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPI8U2.SYS"
Wed 28 May 2003 29,628 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPICD.SYS"
Wed 28 May 2003 52,106 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPIEHCI.SYS"
Wed 28 May 2003 49,250 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPIOHCI.SYS"
Wed 28 May 2003 50,600 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\ASPIUHCI.SYS"
Wed 28 May 2003 161,792 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\BOOTSRV.SYS"
Wed 28 May 2003 174,080 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\bootsrv16.sys"
Wed 28 May 2003 21,971 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\BTCDROM.SYS"
Wed 28 May 2003 30,955 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\BTDOSM.SYS"
Wed 28 May 2003 202,517 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\CMDS.EXE"
Wed 28 May 2003 374,038 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\CMDS16.EXE"
Wed 28 May 2003 22,158 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\COUNTRY.SYS"
Wed 28 May 2003 1,608 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\DEVICE.COM"
Wed 28 May 2003 15,345 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\DISPLAY.SYS"
Wed 28 May 2003 7,840 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\DLSHELP.SYS"
Wed 28 May 2003 56,821 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\E.EXE"
Wed 28 May 2003 64,425 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\FLASHPT.SYS"
Wed 28 May 2003 32,396 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\GUEST.EXE"
Wed 28 May 2003 14,160 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\HIMEM.SYS"
Wed 28 May 2003 10,898 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\KEYB.COM"
Wed 28 May 2003 53,556 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\KEYBOARD.SYS"
Wed 28 May 2003 15,777 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\MODE.COM"
Wed 28 May 2003 37,681 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\MOUSE.COM"
Wed 28 May 2003 354,304 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\msbootsrv16.sys"
Wed 28 May 2003 21,180 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\MSCDEX.EXE"
Wed 28 May 2003 354,263 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\Net.exe"
Wed 28 May 2003 8,513 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\NETBIND.COM"
Wed 28 May 2003 41,302 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\OAKCDROM.SYS"
Wed 28 May 2003 129,240 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\OHCI.EXE"
Wed 28 May 2003 28,439 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\Paralink.com"
Wed 28 May 2003 13,770 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\PROTMAN.EXE"
Wed 28 May 2003 130,980 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\UHCI.EXE"
Wed 28 May 2003 11,854 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305) Packet\DE305.COM"
Wed 28 May 2003 52,715 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450 Packet\DE450.COM"
Wed 28 May 2003 62,391 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500 Packet\DE500.COM"
Wed 28 May 2003 11,491 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DLink DMF560-TX Packet\Lmpd.com"
Wed 28 May 2003 17,791 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DLink DT620 Packet\Dt620pd.com"
Wed 28 May 2003 17,043 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\DLink DE400 Packet\De400pd.com"
Wed 28 May 2003 11,786 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\IBM Crystal LAN Packet\Epktisa.com"
Wed 28 May 2003 18,300 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX Packet\Ktc110p.com"
Wed 28 May 2003 48,224 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL Packet\L100al.com"
Wed 28 May 2003 13,360 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Laneed LD-CDF Packet\Ldcdt.com"
Wed 28 May 2003 9,190 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL Packet\Ldpcil.com"
Wed 28 May 2003 12,567 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Melco LPC2-T\Lpchkat2.com"
Wed 28 May 2003 44,640 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\FETPKT.COM"
Wed 28 May 2003 56,896 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\Rtspkt.com"
Wed 28 May 2003 44,640 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T Packet\fetpkt.com"
Wed 28 May 2003 9,692 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\PXE Packet Driver\Undipd.com"
Wed 28 May 2003 9,537 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\SN 2000p Packet\PNPPD.COM"
Wed 28 May 2003 32,484 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\WaveLAN Packet\Wvlan42.com"
Wed 28 May 2003 52,225 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom Ethernet 10-100 + Modem\Cbendis.exe"
Wed 28 May 2003 48,491 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom RE10BT\Ce3ndis.exe"
Wed 28 May 2003 50,405 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom RE10 - RE100 Packet\Ce3pd.com"
Wed 28 May 2003 33,860 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom PE3-10Bx\Pe3ndis.exe"
Wed 28 May 2003 50,175 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom Re-100Btx + Ce3B-100Btx\Ce3ndis.exe"
Wed 28 May 2003 50,795 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX\Cbendis.exe"
Wed 28 May 2003 48,223 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX Packet\Cbepd.com"
Wed 28 May 2003 48,641 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS\Xpsndis.exe"
Wed 28 May 2003 49,015 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS Packet\Xpspd.com"
Wed 28 May 2003 53,786 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\pcdos\command.com"
Wed 28 May 2003 44,240 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\pcdos\IBMBIO.COM"
Wed 28 May 2003 42,550 A..H. --- "C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Template\common\pcdos\IBMDOS.COM"

[b]Finished![/
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 16:22
Parfait, maintenant télécharge et installe Malwarebytes' Anti-Malware
- A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
- Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
- Puis va dans l'onglet "Recherche", coche "Exécuter un examen rapide" puis "Rechercher"
- Sélectionne tes disques durs" puis clique sur "Lancer l’examen"
- A la fin du scan, clique sur Afficher les résultats
- Coche tous les éléments détectés puis clique sur Supprimer la sélection
- Enregistre le rapport
- S'il t'est demandé de redémarrer, clique sur Yes

Poste le rapport de scan après la suppression ici


Puis poste un nouveau rapport hijackthis


0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 17:05
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1389
Windows 5.1.2600 Service Pack 2

12/11/2008 16:55:44
mbam-log-2008-11-12 (16-55-44).txt

Type de recherche: Examen rapide
Eléments examinés: 45321
Temps écoulé: 3 minute(s), 17 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\cmdow.exe (Malware.Tool) -> Quarantined and deleted successfully.
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 17:28
(RAPPORT HijackThis)





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:08:56, on 12/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Apoint2K\HidFind.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\Windl\mirc.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O6 "USB001" /M "Stylus CX3200"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Windl] C:\WINDOWS\Windl\mirc.exe
O4 - HKLM\..\Run: [mirc] C:\WINDOWS\system32\mirc.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O17 - HKLM\System\CCS\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 17:29
edit : désolé, double post involontaire
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 17:31
Ton ordinateur est encore infecté...
Est-ce que par hasard tu auras fait une restauration du système aujourd'hui ?

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 17:36
une restauration du system?? ba nn aujourdui jai simplemen fai ce que tu ma dit de faire
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
12 nov. 2008 à 17:41
D'accord, c'était juste pour être sûr.
Surtout, ne fais pas de restauration avant la fin de la désinfection, ça ramènerait toutes les infections qu'on a supprimé




On va utiliser Combofix pour finir la désinfection. Attention, ce logiciel est très puissant, une mauvaise utilisation peut faire des dégâts... Fais exactement ce qui suit :

Télécharge ComboFix (de sUBs) sur ton Bureau (et pas ailleurs !) :
Fais un clic droit sur ce lien et choisis "enregistrer la cible sous ... " : dans la fenêtre qui s'ouvre tape C-Fix, choisis le bureau comme destination et valide : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

--------------------------------------------- [ ! ATTENTION ! ] ----------------------------------------------------------
!! déconnecte toi, ferme toutes tes applications en cours et DESACTIVE TOUTES TES DEFENCES (anti-virus, antispyware, pare-feu) le temps de la manipulation : en effet , activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil ( voir planter le PC )...Tu les réactiveras donc après !!

Dans ton cas, il s'agit d'Avast (fais un clic-droit sur l'icone près de l'horloge et clique sur « Arrêter la protection résidente ») et du TeaTimer de Spybot (Lance Spybot --> clique sur Mode => coche Mode avancé => Outils => Résident => décoche la case Résident Tea Timer)

---> Surtout, si tu rencontres des difficultés à ce niveau là, dis le moi avant de poursuivre...

Tuto ici : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
---------------------------------------------------------------------------------------------------------------------------------

Ensuite :
double-clique sur C-Fix.exe (= combofix.exe ) .

Appuie sur une touche pour démarrer le scan .

Attention : n'utilise pas ta souris ni ton clavier pendant que le programme tourne. Cela pourrait figer l'ordi ---> si un message d'erreur windows apparait à un moment : clique sur la croix rouge en haut à droite de la fenêtre pour la fermer

Le rapport sera crée dans: C:\Combofix.txt , poste le ici stp


0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 18:04
pour spybot quand je décoche Résident teaTimer sa me met une petite fenetre a coté de l'horloge avec marquer modification du registre refusé
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009 > Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 18:20
je vien de lire sa aussi sur le tuto ke tu ma envoyer
Si vous utilisez Windows XP et si vous n'avez pas le CD Windows, ComboFix contient une procédure d'installation de la Console de Récupération Windows via le téléchargement d'un fichier depuis Microsoft

je tien juste a te dire comme mon pc a deja été formataté la c un windowsXP heuu pa tres legal lol je les pa acheter on me la instalé donc avec les truc de microsoft si il y a une securité je suis pas sur que sa marche
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
12 nov. 2008 à 18:21
ques ce que tu en pence??
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
13 nov. 2008 à 00:56
La console de récupération n'est pas obligatoire, et de toute façon ça ne fonctionnera pas pour toi... Voilà ce que c'est d'avoir un système piraté...

Après avoir décoché le TeaTimer et redémarré ton ordinateur, est-ce que l'icone du TeaTimer apparait encore près de l'horloge ? Si elle n'est plus là, c'est qu'il a bien été désactivé, tu peux donc utiliser Combofix (en faisant attention aux autres recommandations : fermer tous les programmes, désactiver Avast...)

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
13 nov. 2008 à 02:05
après avoir redémarrer effectivement l'icône TeaTimer n'apparait plus et il est bien décocher.
par contre Résident" SDHelper" lui et cocher!
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
13 nov. 2008 à 02:33
par contre Résident" SDHelper" lui et cocher!


C'est normal, tu peux faire le scan

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
13 nov. 2008 à 03:09
message aucune récupération de console windows et installé sur ce pc
vous aurez tout interé a linstalé
une conection internet et nécessaire
oui ou non ????
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
13 nov. 2008 à 03:11
sa sert a quoi la console de récupération ??
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
13 nov. 2008 à 15:25
Je t'ai déjà répondu plus haut... C'est pour revenir en arrière en cas de problème.
Ce n'est pas obligatoire, et de toute façon ça ne fonctionnera pas pour toi... Voilà ce que c'est d'avoir un système piraté...


0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
13 nov. 2008 à 16:36
Voici le rapport C-fix




ComboFix 08-11-11.01 - Administrateur 2008-11-13 16:29:41.1 - NTFSx86
Lancé depuis: c:\documents and settings\Administrateur\Bureau\C-Fix.exe

[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\IE4 Error Log.txt
c:\windows\system32\serv.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-13 au 2008-11-13 ))))))))))))))))))))))))))))))))))))
.

2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2008-11-12 16:42 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-12 16:42 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-11-12 16:08 . 2008-11-12 16:08 <REP> d-------- c:\windows\system32\xircom
2008-11-12 16:07 . 2008-11-12 16:07 <REP> d-------- c:\program files\microsoft frontpage
2008-11-12 15:51 . 2008-11-12 15:51 578,048 --a------ c:\windows\system32\DllCache\user32.dll
2008-11-12 15:36 . 2008-11-12 15:36 <REP> d-------- c:\windows\ERUNT
2008-11-12 02:00 . 2008-11-12 16:11 <REP> d-------- C:\SDFix
2008-11-12 00:42 . 2008-11-12 00:42 <REP> d-------- C:\_OTMoveIt
2008-11-11 22:25 . 2008-11-12 00:48 <REP> d-------- C:\ToolBar SD
2008-11-11 22:17 . 2008-11-11 22:17 <REP> d-------- c:\program files\Trend Micro
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\sounds
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\logs
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\download
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\cmd
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\channels
2008-11-10 23:53 . 2008-11-10 23:53 1,292,659 --a------ c:\windows\system32\free_cam.exe
2008-11-08 16:37 . 2008-11-08 16:37 <REP> dr-h----- c:\documents and settings\Administrateur\Application Data\SecuROM
2008-11-08 15:47 . 2008-11-09 16:57 <REP> d-------- c:\windows\SxsCaPendDel
2008-11-08 15:47 . 2008-11-08 15:47 <REP> d-------- c:\windows\Logs
2008-11-08 15:46 . 2008-11-08 15:46 <REP> d-------- c:\windows\system32\LogFiles
2008-11-08 15:46 . 2008-11-08 15:46 2,250,024 --a------ c:\windows\system32\pbsvc.exe
2008-11-08 15:46 . 2008-11-08 15:46 107,832 --a------ c:\windows\system32\PnkBstrB.exe
2008-11-08 15:46 . 2008-11-08 15:46 66,872 --a------ c:\windows\system32\PnkBstrA.exe
2008-11-08 15:46 . 2008-11-08 15:46 22,328 --a------ c:\windows\system32\drivers\PnkBstrK.sys
2008-11-08 15:46 . 2008-11-08 15:46 22,328 --a------ c:\documents and settings\Administrateur\Application Data\PnkBstrK.sys
2008-11-08 15:39 . 2008-11-08 15:39 <REP> d-------- c:\program files\Ubisoft
2008-11-04 12:56 . 2008-11-11 19:49 54,156 --ah----- c:\windows\QTFont.qfn
2008-11-04 12:56 . 2008-11-04 12:56 1,409 --a------ c:\windows\QTFont.for
2008-11-03 21:33 . 2008-11-03 21:33 319 --a------ c:\windows\game.ini
2008-11-03 21:17 . 2008-11-03 21:17 <REP> d--hs---- c:\windows\ftpcache
2008-11-03 00:30 . 2008-11-13 16:31 <REP> d-------- c:\windows\Windl
2008-11-01 01:43 . 2008-11-01 01:43 <REP> d-------- c:\documents and settings\Administrateur\WINDOWS
2008-11-01 01:43 . 1999-03-23 09:12 304,128 --a------ c:\windows\unin040c.exe
2008-10-30 01:13 . 2008-10-30 01:13 17,191 --a------ c:\windows\system32\script.dll
2008-10-29 23:47 . 2008-10-30 00:00 <REP> d-------- c:\program files\Audacity
2008-10-29 21:00 . 2008-10-29 21:00 46,420 --a------ c:\windows\system32\dico.dll
2008-10-29 20:47 . 2008-10-29 20:47 2,708 --a------ c:\windows\system32\bnc.dll
2008-10-29 02:17 . 2008-10-29 02:17 6,406 --a------ c:\windows\system32\scan.dll
2008-10-21 22:48 . 2008-10-21 22:48 635 --a------ c:\windows\Rtcw.INI
2008-10-14 22:35 . 2007-07-30 18:19 43,352 --a------ c:\windows\system32\wups2.dll
2008-10-14 22:35 . 2007-07-30 18:19 38,232 --a------ c:\windows\system32\wucltui.dll.mui
2008-10-14 22:35 . 2007-07-30 18:20 30,040 --a------ c:\windows\system32\wuaucpl.cpl.mui
2008-10-14 22:35 . 2007-07-30 18:19 30,040 --a------ c:\windows\system32\wuapi.dll.mui
2008-10-14 22:35 . 2007-07-30 18:18 21,336 --a------ c:\windows\system32\wuaueng.dll.mui

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-13 15:12 --------- d-----w c:\program files\Wanadoo
2008-11-13 03:11 --------- d-----w c:\program files\eMule
2008-11-11 22:52 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-29 21:45 --------- d-----w c:\program files\Free Easy Burner
2008-10-29 21:45 --------- d-----w c:\program files\EA GAMES
2008-10-01 23:52 --------- d-----w c:\program files\Java
2008-10-01 23:51 --------- d-----w c:\program files\Fichiers communs\Java
2008-09-30 12:58 3,820 ----a-w c:\windows\system32\download.dll
2008-09-26 09:44 --------- d-----w c:\program files\Hercules
2008-09-19 19:33 --------- d-----w c:\program files\Avanquest update
2008-09-19 15:17 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-09-19 15:17 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ggsemc_01005.Wdf
2008-09-16 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\BVRP Software
2008-09-16 15:21 --------- d-----w c:\program files\Sony Ericsson
2008-09-16 15:21 --------- d-----w c:\documents and settings\All Users\Application Data\Sony Ericsson
2008-09-16 15:16 21,672 ----a-w c:\windows\system32\drivers\ggsemc.sys
2008-09-16 15:16 13,352 ----a-w c:\windows\system32\drivers\ggflt.sys
2008-09-16 15:16 1,419,232 ----a-w c:\windows\system32\wdfcoinstaller01005.dll
2008-09-05 01:02 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2002-12-11 19:11 4,085,904 ----a-w c:\windows\system32\config\systemprofile\wmfdist.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2006-02-21 176128]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 802816]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 696320]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-04-17 110592]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2004-10-14 32768]
"EPSON Stylus CX3200"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2002-07-01 74752]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696]
"CamserviceDP"="c:\program files\Hercules\DualPix Exchange\Camservice.exe" [2007-08-10 81920]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"Windl"="c:\windows\Windl\mirc.exe" [2006-11-23 2076672]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 c:\windows\RTHDCPL.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.3ivx"= 3ivxVfWCodec.dll
"vidc.3iv2"= 3ivxVfWCodec.dll
"msacm.divxa32"= divxa32.acm
"VIDC.HFYU"= huffyuv.dll
"VIDC.VP31"= vp31vfw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Media Player Classic\\mplayerc.exe"=
"c:\\Program Files\\WinRAR\\WinRAR.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe"=
"c:\\WINDOWS\\Windl\\mirc.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 GhPciScan;GhostPciScanner;c:\program files\Symantec\Norton Ghost 2003\ghpciscan.sys [2003-05-28 5632]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R3 SynMini;USB2.0 1.3M WebCam;c:\windows\system32\Drivers\SynMini.sys [2006-08-09 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image;c:\windows\system32\Drivers\SynScan.sys [2006-08-09 7808]
S3 camfilt2;camfilt2;c:\windows\system32\Drivers\camfilt2.sys [2007-05-29 94208]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2008-09-16 13352]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-06-26 576680]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d10e92c6-031c-11dd-8a62-000000000000}]
\Shell\Auto\command - printer.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL printer.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ded82594-8350-11dd-b042-000000000000}]
\Shell\Auto\command - printer.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL printer.exe

*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Tâches planifiées'

2008-10-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 13:57]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-mirc - c:\windows\system32\mirc.exe


.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\1y9621se.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://google.fr
FF -: plugin - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\1y9621se.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF -: plugin - c:\program files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-13 16:31:09
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2008-11-13 16:31:46
ComboFix-quarantined-files.txt 2008-11-13 15:31:43

Avant-CF: 39,772,340,224 octets libres
Après-CF: 39,790,465,024 octets libres

173
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
13 nov. 2008 à 18:27
Reposte un rapport hijackthis pour compléter celui-ci stp

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
13 nov. 2008 à 18:53
rapport hijackthis






Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:49, on 13/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\Windl\mirc.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O6 "USB001" /M "Stylus CX3200"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Windl] C:\WINDOWS\Windl\mirc.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O17 - HKLM\System\CCS\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
15 nov. 2008 à 17:21
minan es ce que je peux réactiver mon antivirus et le par-feu?
0
eboat83 Messages postés 15 Date d'inscription jeudi 21 février 2008 Statut Membre Dernière intervention 15 novembre 2008 1
15 nov. 2008 à 18:08
Bonsoir,

je subis une infection depuis une semaine, des fenêtres internet, casino, paris sur internet etc... s'ouvrent intempestivement. J'ai bien lu les recommendations des utilisateurs de CCM et j'ai utilisé HijackThis - V 2.0.2. Voici ci-dessous le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:55:48, on 15/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\Prismsta.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\documents and settings\edwin\local settings\application data\kimkp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?fr=fptb-flv
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 89.9.0.1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ShowWnd] showwnd.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [Prism_Utility] Prismsta.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSetup] K:\Setup\Setup.exe /start /restart /l:fra
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe"
O4 - HKCU\..\Run: [kimkp] "c:\documents and settings\edwin\local settings\application data\kimkp.exe" kimkp
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-e35ba9123a6adda7.spaces.live.com/PhotoUpload/MsnPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95C229AF-15B5-450E-A1B0-03288FE3BAA2}: NameServer = 192.168.0.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{B4AD3ECB-03B9-408B-9B4B-970F76C2E3E5}: NameServer = 89.2.0.1,89.2.0.2
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Anti-Virus (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
16 nov. 2008 à 18:22
@ eboat83 :

J'ai vu que tu as ouvert un autre sujet, tu as bien fait (je ne peux pas aider plusieurs personnes dans le même sujet...)
Ton PC a une infection Navipromo, il faut utiliser navilog pour la supprimer complètement (suis le conseil de la personne qui te l'a recommandé), MalwareBytes ne le supprime pas entièrement...




@ Miss-Jennay :



Désactive tes protections (tu peux les réactiver dès que tu auras fini d'utiliser Combofix ;)


Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

----------------------------------------------------------
File::
C:\WINDOWS\Windl\mirc.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windl"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\Windl\\mirc.exe"=-

------------------------------------------------------------------

- Enregistre ce fichier sur ton bureau (et pas ailleurs !) sous le nom CFScript.txt
- Quitte le Bloc Notes

· Fais un glisser/déposer de ce fichier CFScript sur le fichier C-Fix.exe (combofix) comme sur ce lien : http://apu.mabul.org/up/apu/2008/09/06/img-2258535my8h.gif

* Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.
* Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
* Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
16 nov. 2008 à 19:18
ComboFix 08-11-11.01 - Administrateur 2008-11-16 19:07:07.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.573 [GMT 1:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\C-Fix.exe
Commutateurs utilisés :: c:\documents and settings\Administrateur\Bureau\CFScript.txt
* Un nouveau point de restauration a été créé

[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]

FILE ::
c:\windows\Windl\mirc.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\del.bat
c:\windows\system32\serv.dll
c:\windows\system32\servers.ini
c:\windows\Windl\mirc.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-16 au 2008-11-16 ))))))))))))))))))))))))))))))))))))
.

2008-11-16 01:06 . 2008-11-16 01:06 0 --a------ c:\windows\system32\mirc9.tm_
2008-11-15 23:23 . 2008-11-15 23:23 1,297,276 --a------ C:\lool.exe
2008-11-15 22:40 . 2008-11-15 22:40 1,293,031 --a------ C:\lol.exe
2008-11-15 20:08 . 2008-11-15 20:08 1,294,212 --a------ C:\sattack.exe
2008-11-15 19:34 . 2008-11-15 19:34 1,295,444 --a------ C:\hot_cam.exe
2008-11-12 16:58 . 2008-11-12 16:58 264 --------- c:\windows\system32\reg.reg
2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2008-11-12 16:42 . 2008-11-12 16:42 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2008-11-12 16:42 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-12 16:42 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-11-12 16:08 . 2008-11-12 16:08 <REP> d-------- c:\windows\system32\xircom
2008-11-12 16:07 . 2008-11-12 16:07 <REP> d-------- c:\program files\microsoft frontpage
2008-11-12 15:51 . 2008-11-12 15:51 578,048 --a------ c:\windows\system32\DllCache\user32.dll
2008-11-12 15:36 . 2008-11-12 15:36 <REP> d-------- c:\windows\ERUNT
2008-11-12 02:00 . 2008-11-12 16:11 <REP> d-------- C:\SDFix
2008-11-12 00:42 . 2008-11-12 00:42 <REP> d-------- C:\_OTMoveIt
2008-11-11 22:25 . 2008-11-12 00:48 <REP> d-------- C:\ToolBar SD
2008-11-11 22:17 . 2008-11-11 22:17 <REP> d-------- c:\program files\Trend Micro
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\sounds
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\logs
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\download
2008-11-10 23:54 . 2008-11-15 20:26 <REP> d-------- c:\windows\system32\cmd
2008-11-10 23:54 . 2008-11-10 23:54 <REP> d-------- c:\windows\system32\channels
2008-11-10 23:53 . 2008-11-15 22:44 1,292,804 --a------ c:\windows\system32\free_cam.exe
2008-11-08 16:37 . 2008-11-08 16:37 <REP> dr-h----- c:\documents and settings\Administrateur\Application Data\SecuROM
2008-11-08 15:47 . 2008-11-09 16:57 <REP> d-------- c:\windows\SxsCaPendDel
2008-11-08 15:47 . 2008-11-08 15:47 <REP> d-------- c:\windows\Logs
2008-11-08 15:46 . 2008-11-08 15:46 <REP> d-------- c:\windows\system32\LogFiles
2008-11-08 15:46 . 2008-11-08 15:46 2,250,024 --a------ c:\windows\system32\pbsvc.exe
2008-11-08 15:46 . 2008-11-08 15:46 107,832 --a------ c:\windows\system32\PnkBstrB.exe
2008-11-08 15:46 . 2008-11-08 15:46 66,872 --a------ c:\windows\system32\PnkBstrA.exe
2008-11-08 15:46 . 2008-11-08 15:46 22,328 --a------ c:\windows\system32\drivers\PnkBstrK.sys
2008-11-08 15:46 . 2008-11-08 15:46 22,328 --a------ c:\documents and settings\Administrateur\Application Data\PnkBstrK.sys
2008-11-08 15:39 . 2008-11-08 15:39 <REP> d-------- c:\program files\Ubisoft
2008-11-04 12:56 . 2008-11-11 19:49 54,156 --ah----- c:\windows\QTFont.qfn
2008-11-04 12:56 . 2008-11-04 12:56 1,409 --a------ c:\windows\QTFont.for
2008-11-03 21:33 . 2008-11-03 21:33 319 --a------ c:\windows\game.ini
2008-11-03 21:17 . 2008-11-03 21:17 <REP> d--hs---- c:\windows\ftpcache
2008-11-03 00:30 . 2008-11-16 19:07 <REP> d-------- c:\windows\Windl
2008-11-01 01:43 . 2008-11-01 01:43 <REP> d-------- c:\documents and settings\Administrateur\WINDOWS
2008-11-01 01:43 . 1999-03-23 09:12 304,128 --a------ c:\windows\unin040c.exe
2008-10-30 01:13 . 2008-11-12 16:55 16,998 --------- c:\windows\system32\script.dll
2008-10-30 01:10 . 2008-11-16 19:08 3,785 --a------ c:\windows\system32\mirc.ini
2008-10-30 01:10 . 2008-11-16 17:04 1,459 --a------ c:\windows\system32\remote.ini
2008-10-29 23:47 . 2008-10-30 00:00 <REP> d-------- c:\program files\Audacity
2008-10-29 21:00 . 2008-10-29 21:00 46,420 --------- c:\windows\system32\dico.dll
2008-10-29 21:00 . 2008-10-29 21:00 139 --------- c:\windows\system32\script.ini
2008-10-29 20:47 . 2008-10-29 20:47 2,708 --------- c:\windows\system32\bnc.dll
2008-10-29 04:16 . 2008-10-29 04:16 11 --------- c:\windows\system32\aliases.ini
2008-10-29 02:17 . 2008-10-29 02:17 6,406 --------- c:\windows\system32\scan.dll
2008-10-21 22:48 . 2008-10-21 22:48 635 --a------ c:\windows\Rtcw.INI

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-16 16:04 --------- d-----w c:\program files\Wanadoo
2008-11-16 04:57 --------- d-----w c:\program files\eMule
2008-11-11 22:52 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-29 21:45 --------- d-----w c:\program files\Free Easy Burner
2008-10-29 21:45 --------- d-----w c:\program files\EA GAMES
2008-10-01 23:52 --------- d-----w c:\program files\Java
2008-10-01 23:51 --------- d-----w c:\program files\Fichiers communs\Java
2008-09-30 12:58 3,820 ------w c:\windows\system32\download.dll
2008-09-26 09:44 --------- d-----w c:\program files\Hercules
2008-09-19 19:33 --------- d-----w c:\program files\Avanquest update
2008-09-19 15:17 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-09-19 15:17 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ggsemc_01005.Wdf
2008-09-16 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\BVRP Software
2008-09-16 15:21 --------- d-----w c:\program files\Sony Ericsson
2008-09-16 15:21 --------- d-----w c:\documents and settings\All Users\Application Data\Sony Ericsson
2008-09-16 15:16 21,672 ----a-w c:\windows\system32\drivers\ggsemc.sys
2008-09-16 15:16 13,352 ----a-w c:\windows\system32\drivers\ggflt.sys
2008-09-16 15:16 1,419,232 ----a-w c:\windows\system32\wdfcoinstaller01005.dll
2008-09-05 01:02 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2002-12-11 19:11 4,085,904 ----a-w c:\windows\system32\config\systemprofile\wmfdist.exe
.

((((((((((((((((((((((((((((( snapshot@2008-11-13_16.31.24.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-11-23 08:45:34 2,076,672 ------w c:\windows\system32\mirc.exe
+ 2008-11-16 16:04:43 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_180.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2006-02-21 176128]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 802816]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 696320]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-04-17 110592]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2004-10-14 32768]
"EPSON Stylus CX3200"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2002-07-01 74752]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-28 413696]
"CamserviceDP"="c:\program files\Hercules\DualPix Exchange\Camservice.exe" [2007-08-10 81920]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"PcDiagnostics"="c:\windows\System32\mirc.exe" [2006-11-23 2076672]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 c:\windows\RTHDCPL.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.3ivx"= 3ivxVfWCodec.dll
"vidc.3iv2"= 3ivxVfWCodec.dll
"msacm.divxa32"= divxa32.acm
"VIDC.HFYU"= huffyuv.dll
"VIDC.VP31"= vp31vfw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Media Player Classic\\mplayerc.exe"=
"c:\\Program Files\\WinRAR\\WinRAR.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Hercules\\DualPix Exchange\\Station2.exe"=
"c:\\WINDOWS\\system32\\mirc.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 GhPciScan;GhostPciScanner;c:\program files\Symantec\Norton Ghost 2003\ghpciscan.sys [2003-05-28 5632]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R3 SynMini;USB2.0 1.3M WebCam;c:\windows\system32\Drivers\SynMini.sys [2006-08-09 1116544]
R3 SynScan;USB2.0 1.3M WebCam Still Image;c:\windows\system32\Drivers\SynScan.sys [2006-08-09 7808]
S3 camfilt2;camfilt2;c:\windows\system32\Drivers\camfilt2.sys [2007-05-29 94208]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2008-09-16 13352]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-06-26 576680]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ded82594-8350-11dd-b042-000000000000}]
\Shell\Auto\command - printer.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL printer.exe
.
Contenu du dossier 'Tâches planifiées'

2008-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 13:57]
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-16 19:08:26
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2008-11-16 19:09:00
ComboFix-quarantined-files.txt 2008-11-16 18:08:54
ComboFix2.txt 2008-11-13 15:31:47

Avant-CF: 38 696 255 488 octets libres
Après-CF: 38,746,632,192 octets libres

176
0
anthony5151 Messages postés 10573 Date d'inscription vendredi 27 juin 2008 Statut Contributeur sécurité Dernière intervention 2 mars 2015 790
16 nov. 2008 à 21:22
Réactive tes protections, redémarre ton ordinateur puis reposte un rapport hijackthis stp

0
Miss-Jennay Messages postés 45 Date d'inscription mardi 11 novembre 2008 Statut Membre Dernière intervention 20 avril 2009
16 nov. 2008 à 21:54
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:51, on 16/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Hercules\DualPix Exchange\Camservice.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\System32\mirc.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3200" /O6 "USB001" /M "Stylus CX3200"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [PcDiagnostics] C:\WINDOWS\System32\mirc.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O17 - HKLM\System\CCS\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0705295E-77DA-424B-92F7-CE229E15DA53}: NameServer = 192.168.1.1,80.10.246.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
0