Probleme de pub intempestives

Voici le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:03:58, on 23/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\documents and settings\propriétaire\local settings\application data\mikwoce.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Propriétaire\Mes documents\Fichier mozilla\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.eorezo.com/cgi-bin/adve [...] t=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWA-110] C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Curb tool help dart] C:\Documents and Settings\All Users\Application Data\Move Bore Curb Tool\Vga blue.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [borenurb] C:\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\Wait keep.exe
O4 - HKCU\..\Run: [mikwoce] "c:\documents and settings\propriétaire\local settings\application data\mikwoce.exe" mikwoce
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wi [...] 4218018214
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 6591 bytes

Voici le rapport obtenu avec Lop S&D.exe:

--------------------\\ Lop S&D 4.2.4-6 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : BIOS Date: 06/18/04 09:40:43 Ver: 08.00.09
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081023-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 37 Go Free : 16 Go
D:\ (CD or DVD)
E:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 20-10-2008|20:35 )
Option : [1] ( 23/10/2008|20:54 )

--------------------\\ Listing des dossiers dans APPLIC~1

[23/06/2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/10/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/06/2008|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[18/09/2008|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[31/08/2008|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/10/2008|18:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Move Bore Curb Tool
[10/07/2008|19:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[04/10/2008|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TreeCardGames
[23/06/2008|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/09/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[24/06/2008|12:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/09/2008|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[23/06/2008|12:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/06/2008|12:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[23/06/2008|12:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/06/2008|12:37] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[08/10/2008|23:22] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[08/10/2008|23:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[24/06/2008|18:35] C:\DOCUME~1\PROPRI~1\APPLIC~1\DAEMON Tools
[02/08/2008|20:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\DeepBurner
[09/09/2008|20:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\EoRezo
[20/09/2008|19:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[23/09/2008|17:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
[09/09/2008|21:12] C:\DOCUME~1\PROPRI~1\APPLIC~1\ItsLabel
[21/10/2008|19:47] C:\DOCUME~1\PROPRI~1\APPLIC~1\Less city first
[21/10/2008|20:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\LimeWire
[23/06/2008|12:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[19/10/2008|21:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\MahJong Suite
[01/09/2008|17:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[08/07/2008|12:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
[01/09/2008|17:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\MP-Manager
[21/10/2008|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org2
[24/06/2008|20:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\SecuROM
[10/10/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\SpeedSim
[24/06/2008|21:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sports Interactive
[23/06/2008|12:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[12/10/2008|17:29] C:\DOCUME~1\PROPRI~1\APPLIC~1\uTorrent
[10/07/2008|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[20/09/2008|19:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Zylom

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[23/10/2008 20:00][--ah-----] C:\WINDOWS\tasks\AE640A76918BBC16.job
[23/10/2008 17:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[24/04/2003 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( AE640A76918BBC16.job )=( c:\docume~1\propri~1\applic~1\lessci~1\helpsavelies.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[23/06/2008|12:18] C:\Program Files\Adobe
[23/06/2008|12:46] C:\Program Files\Alwil Software
[23/09/2008|17:45] C:\Program Files\ANI
[21/10/2008|19:37] C:\Program Files\Astonsoft
[23/07/2008|17:34] C:\Program Files\Audacity
[30/08/2008|12:13] C:\Program Files\Circle Developement
[23/06/2008|12:17] C:\Program Files\Common Files
[23/06/2008|12:12] C:\Program Files\ComPlus Applications
[24/06/2008|18:40] C:\Program Files\DAEMON Tools Lite
[23/09/2008|17:43] C:\Program Files\D-Link
[15/10/2008|16:00] C:\Program Files\Dofus
[09/09/2008|20:00] C:\Program Files\EoRezo
[20/09/2008|13:09] C:\Program Files\Everest Poker
[16/09/2008|17:38] C:\Program Files\Fichiers communs
[23/09/2008|17:45] C:\Program Files\InstallShield Installation Information
[23/06/2008|12:53] C:\Program Files\Intel
[15/10/2008|18:12] C:\Program Files\Internet Explorer
[09/09/2008|20:22] C:\Program Files\Java
[23/06/2008|13:23] C:\Program Files\Lavasoft
[10/10/2008|18:31] C:\Program Files\Less city first
[24/07/2008|18:45] C:\Program Files\LimeWire
[04/10/2008|20:05] C:\Program Files\MahJong Suite
[22/08/2008|01:31] C:\Program Files\Messenger
[30/08/2008|12:13] C:\Program Files\Messenger Plus! Live
[23/06/2008|12:31] C:\Program Files\microsoft frontpage
[02/10/2008|21:11] C:\Program Files\Microsoft IntelliType Pro
[02/10/2008|21:10] C:\Program Files\Microsoft IntelliType Pro 6.02
[02/07/2008|20:48] C:\Program Files\Microsoft Office
[27/06/2008|23:09] C:\Program Files\Movie Maker
[23/10/2008|19:40] C:\Program Files\Mozilla Firefox
[01/09/2008|17:25] C:\Program Files\MPMAN
[23/06/2008|12:11] C:\Program Files\MSN
[23/06/2008|12:11] C:\Program Files\MSN Gaming Zone
[11/07/2008|13:21] C:\Program Files\MSXML 4.0
[27/06/2008|23:06] C:\Program Files\NetMeeting
[23/06/2008|12:42] C:\Program Files\Neuf
[23/06/2008|12:54] C:\Program Files\NSC
[17/09/2008|20:54] C:\Program Files\Oberon Media
[09/09/2008|20:23] C:\Program Files\OpenOffice.org 2.4
[27/06/2008|23:06] C:\Program Files\Outlook Express
[14/10/2008|21:20] C:\Program Files\Proxomitron Naoko v4.5
[14/10/2008|19:59] C:\Program Files\RegCleaner
[23/06/2008|12:14] C:\Program Files\Services en ligne
[23/10/2008|20:22] C:\Program Files\SlySoft
[10/07/2008|18:55] C:\Program Files\Sony Ericsson
[17/09/2008|20:53] C:\Program Files\SopCast
[02/10/2008|16:13] C:\Program Files\SpeedSim
[24/06/2008|20:56] C:\Program Files\Sports Interactive
[23/06/2008|12:17] C:\Program Files\Uninstall Information
[24/06/2008|18:53] C:\Program Files\uTorrent
[10/07/2008|12:24] C:\Program Files\VideoLAN
[24/06/2008|12:28] C:\Program Files\Windows Live
[30/08/2008|12:43] C:\Program Files\Windows Media Connect 2
[30/08/2008|12:50] C:\Program Files\Windows Media Player
[27/06/2008|23:06] C:\Program Files\Windows NT
[23/06/2008|12:11] C:\Program Files\WindowsUpdate
[16/09/2008|20:10] C:\Program Files\WinZip
[23/06/2008|12:31] C:\Program Files\xerox
[24/06/2008|20:57] C:\Program Files\Zero G Registry
[21/09/2008|00:29] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[08/10/2008|23:22] C:\Program Files\Fichiers communs\Adobe
[23/06/2008|12:54] C:\Program Files\Fichiers communs\InstallShield
[23/06/2008|12:17] C:\Program Files\Fichiers communs\Java
[02/07/2008|20:48] C:\Program Files\Fichiers communs\Microsoft Shared
[23/06/2008|12:13] C:\Program Files\Fichiers communs\MSSoap
[23/06/2008|09:23] C:\Program Files\Fichiers communs\ODBC
[23/06/2008|12:13] C:\Program Files\Fichiers communs\Services
[23/06/2008|09:23] C:\Program Files\Fichiers communs\SpeechEngines
[27/06/2008|23:06] C:\Program Files\Fichiers communs\System
[10/07/2008|19:36] C:\Program Files\Fichiers communs\Teleca Shared
[24/06/2008|12:26] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/06/2008|13:23] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 40 Processes )

IEXPLORE.EXE ~ [PID:2108]
IEXPLORE.EXE ~ [PID:2392]
IEXPLORE.EXE ~ [PID:4020]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bis1.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Move Bore Curb Tool
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Move Bore Curb Tool\Vga blue.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\flap new amok each.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\help save lies.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\krufvazz.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\lbkppdpv.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\sdzufcet.exe
C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\Wait keep.exe
C:\Program Files\lessci~1
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsj3.tmp
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsy18.tmp
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@advertstream[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@advertising[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adin.bigpoint[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@bigpoint[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@fr.xblaster.bigpoint[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@fr1.darkorbit.bigpoint[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.casinoking[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@casinoking[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.cotedazurpalace[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@cotedazurpalace[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adopt.euroclick[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adopt.euroclick[3].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@pacificpoker[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@partypoker[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@32vegas[1].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.32vegas[2].txt
C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@888[1].txt
C:\WINDOWS\Tasks\AE640A76918BBC16.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"borenurb"="C:\\DOCUME~1\\PROPRI~1\\APPLIC~1\\LESSCI~1\\Wait keep.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Curb tool help dart"="C:\\Documents and Settings\\All Users\\Application Data\\Move Bore Curb Tool\\Vga blue.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-23 20:55:44
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 467

--------------------\\ Recherche d'autres infections


C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce.dat
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce.exe
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce_nav.dat
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PROPRI~1\Application Data\uTorrent\Football Manager 2008 (PC) + crack.torrent
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\fm.exe
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\FM2008.iso
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\How to get a Nintendo Wii for nothing (United Kingdom Residents only).rtf
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\instructions.txt


[F:1230][D:47]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
[F:508][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
[F:4904][D:11]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 23/10/2008|20:58 - Option : [1]

--------------------\\ Fin du rapport a 20:58:18

Voici le nouveau rapport généré après cette étape:

--------------------\\ Lop S&D 4.2.4-6 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : BIOS Date: 06/18/04 09:40:43 Ver: 08.00.09
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081023-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 37 Go Free : 16 Go
D:\ (CD or DVD)
E:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 20-10-2008|20:35 )
Option : [2] ( 23/10/2008|21:05 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Move Bore Curb Tool\Vga blue.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\flap new amok each.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\help save lies.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\krufvazz.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\lbkppdpv.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\sdzufcet.exe
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1\Wait keep.exe
Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsj3.tmp
Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\nsy18.tmp
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@advertstream[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@advertising[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@bigpoint[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@fr.xblaster.bigpoint[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@fr1.darkorbit.bigpoint[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.casinoking[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@casinoking[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adopt.euroclick[3].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@pacificpoker[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@partypoker[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@32vegas[1].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@banner.32vegas[2].txt
Supprime! - C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@888[1].txt
Supprime! - C:\WINDOWS\Tasks\AE640A76918BBC16.job
Supprime! - C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bis1.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Move Bore Curb Tool
Supprime! - C:\DOCUME~1\PROPRI~1\APPLIC~1\lessci~1
Supprime! - C:\Program Files\lessci~1
Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[23/06/2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/10/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/06/2008|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[18/09/2008|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[31/08/2008|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/07/2008|19:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[04/10/2008|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TreeCardGames
[23/06/2008|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[16/09/2008|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[24/06/2008|12:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[18/09/2008|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[23/06/2008|12:14] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/06/2008|12:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[23/06/2008|12:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[23/06/2008|12:37] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[08/10/2008|23:22] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[08/10/2008|23:23] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[24/06/2008|18:35] C:\DOCUME~1\PROPRI~1\APPLIC~1\DAEMON Tools
[02/08/2008|20:08] C:\DOCUME~1\PROPRI~1\APPLIC~1\DeepBurner
[09/09/2008|20:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\EoRezo
[20/09/2008|19:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[23/09/2008|17:42] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
[09/09/2008|21:12] C:\DOCUME~1\PROPRI~1\APPLIC~1\ItsLabel
[21/10/2008|20:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\LimeWire
[23/06/2008|12:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[19/10/2008|21:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\MahJong Suite
[01/09/2008|17:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[08/07/2008|12:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
[01/09/2008|17:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\MP-Manager
[21/10/2008|19:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\OpenOffice.org2
[24/06/2008|20:58] C:\DOCUME~1\PROPRI~1\APPLIC~1\SecuROM
[10/10/2008|22:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\SpeedSim
[24/06/2008|21:00] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sports Interactive
[23/06/2008|12:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[12/10/2008|17:29] C:\DOCUME~1\PROPRI~1\APPLIC~1\uTorrent
[10/07/2008|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\vlc
[20/09/2008|19:40] C:\DOCUME~1\PROPRI~1\APPLIC~1\Zylom

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[23/10/2008 17:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[24/04/2003 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[23/06/2008|12:18] C:\Program Files\Adobe
[23/06/2008|12:46] C:\Program Files\Alwil Software
[23/09/2008|17:45] C:\Program Files\ANI
[21/10/2008|19:37] C:\Program Files\Astonsoft
[23/07/2008|17:34] C:\Program Files\Audacity
[23/06/2008|12:17] C:\Program Files\Common Files
[23/06/2008|12:12] C:\Program Files\ComPlus Applications
[24/06/2008|18:40] C:\Program Files\DAEMON Tools Lite
[23/09/2008|17:43] C:\Program Files\D-Link
[15/10/2008|16:00] C:\Program Files\Dofus
[09/09/2008|20:00] C:\Program Files\EoRezo
[20/09/2008|13:09] C:\Program Files\Everest Poker
[16/09/2008|17:38] C:\Program Files\Fichiers communs
[23/09/2008|17:45] C:\Program Files\InstallShield Installation Information
[23/06/2008|12:53] C:\Program Files\Intel
[15/10/2008|18:12] C:\Program Files\Internet Explorer
[09/09/2008|20:22] C:\Program Files\Java
[23/06/2008|13:23] C:\Program Files\Lavasoft
[24/07/2008|18:45] C:\Program Files\LimeWire
[04/10/2008|20:05] C:\Program Files\MahJong Suite
[22/08/2008|01:31] C:\Program Files\Messenger
[30/08/2008|12:13] C:\Program Files\Messenger Plus! Live
[23/06/2008|12:31] C:\Program Files\microsoft frontpage
[02/10/2008|21:11] C:\Program Files\Microsoft IntelliType Pro
[02/10/2008|21:10] C:\Program Files\Microsoft IntelliType Pro 6.02
[02/07/2008|20:48] C:\Program Files\Microsoft Office
[27/06/2008|23:09] C:\Program Files\Movie Maker
[23/10/2008|19:40] C:\Program Files\Mozilla Firefox
[01/09/2008|17:25] C:\Program Files\MPMAN
[23/06/2008|12:11] C:\Program Files\MSN
[23/06/2008|12:11] C:\Program Files\MSN Gaming Zone
[11/07/2008|13:21] C:\Program Files\MSXML 4.0
[27/06/2008|23:06] C:\Program Files\NetMeeting
[23/06/2008|12:42] C:\Program Files\Neuf
[23/06/2008|12:54] C:\Program Files\NSC
[17/09/2008|20:54] C:\Program Files\Oberon Media
[09/09/2008|20:23] C:\Program Files\OpenOffice.org 2.4
[27/06/2008|23:06] C:\Program Files\Outlook Express
[14/10/2008|21:20] C:\Program Files\Proxomitron Naoko v4.5
[14/10/2008|19:59] C:\Program Files\RegCleaner
[23/06/2008|12:14] C:\Program Files\Services en ligne
[23/10/2008|20:22] C:\Program Files\SlySoft
[10/07/2008|18:55] C:\Program Files\Sony Ericsson
[17/09/2008|20:53] C:\Program Files\SopCast
[02/10/2008|16:13] C:\Program Files\SpeedSim
[24/06/2008|20:56] C:\Program Files\Sports Interactive
[23/06/2008|12:17] C:\Program Files\Uninstall Information
[24/06/2008|18:53] C:\Program Files\uTorrent
[10/07/2008|12:24] C:\Program Files\VideoLAN
[24/06/2008|12:28] C:\Program Files\Windows Live
[30/08/2008|12:43] C:\Program Files\Windows Media Connect 2
[30/08/2008|12:50] C:\Program Files\Windows Media Player
[27/06/2008|23:06] C:\Program Files\Windows NT
[23/06/2008|12:11] C:\Program Files\WindowsUpdate
[16/09/2008|20:10] C:\Program Files\WinZip
[23/06/2008|12:31] C:\Program Files\xerox
[24/06/2008|20:57] C:\Program Files\Zero G Registry
[21/09/2008|00:29] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[08/10/2008|23:22] C:\Program Files\Fichiers communs\Adobe
[23/06/2008|12:54] C:\Program Files\Fichiers communs\InstallShield
[23/06/2008|12:17] C:\Program Files\Fichiers communs\Java
[02/07/2008|20:48] C:\Program Files\Fichiers communs\Microsoft Shared
[23/06/2008|12:13] C:\Program Files\Fichiers communs\MSSoap
[23/06/2008|09:23] C:\Program Files\Fichiers communs\ODBC
[23/06/2008|12:13] C:\Program Files\Fichiers communs\Services
[23/06/2008|09:23] C:\Program Files\Fichiers communs\SpeechEngines
[27/06/2008|23:06] C:\Program Files\Fichiers communs\System
[10/07/2008|19:36] C:\Program Files\Fichiers communs\Teleca Shared
[24/06/2008|12:26] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/06/2008|13:23] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 36 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@advertising[3].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-23 21:07:32
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 467

--------------------\\ Recherche d'autres infections


C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce.dat
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce.exe
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce_nav.dat
C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\mikwoce_navps.dat
==> EGDACCESS <==

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PROPRI~1\Application Data\uTorrent\Football Manager 2008 (PC) + crack.torrent
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\fm.exe
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\FM2008.iso
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\How to get a Nintendo Wii for nothing (United Kingdom Residents only).rtf
C:\DOCUME~1\PROPRI~1\Mes documents\Downloads\Football Manager 2008 (PC) + crack\instructions.txt


[F:1227][D:47]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
[F:504][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
[F:4985][D:11]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 23/10/2008|20:58 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 23/10/2008|21:09 - Option : [2]

--------------------\\ Fin du rapport a 21:09:15

On verra ça à la fin. Supprime ton crack de Football Manager.

Télécharge Navilog1.exe (IL-MAFIOSO)
Enregistre-le sur ton Bureau.
Lance l'installation en double cliquant sur navilog.exe.
Une fois l'installation terminée, l'utilitaire s'exécutera automatiquement.
(Si ce n'est pas le cas, double clique sur le raccourci présent sur le Bureau)

Laisse-toi guider par l'utilitaire. Choisis l'option 4 puis valide.

Il va te demander de saisir le nom de fichier. Saisie ce qui est en gras ci-dessous et rien d'autre puis valide :
mikwoce
Retape le nom de fichier quand cela te sera demandé.

L'utilitaire va t'informer qu'il va redémarrer l'ordinateur.
**Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts**
Appuie maintenant sur une touche, comme demandé.
(si ton PC ne redémarre pas automatiquement, fais-le manuellement)

Patiente jusqu'à l'apparition de ce message :
"*** Nettoyage Termine le ..... ***"

Le Bloc-notes va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver.
Referme le Bloc-notes. Ton bureau va maintenant réapparaître.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

Poste le rapport sauvegardé auparavant (C:\cleannavi.txt)
Ainsi qu'un nouveau rapport Hijackthis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:20:34, on 24/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\notepad.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Propriétaire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.eorezo.com/cgi-bin/adve [...] t=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWA-110] C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wi [...] 4218018214
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 5958 bytes

24.10.2008 18:43:51 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:43:51 - Backup Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\
24.10.2008 18:43:51 - Temp Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\
24.10.2008 18:43:51 - Using System's global Proxy settings
24.10.2008 18:43:52 - Launching GUI... display mode: 0
24.10.2008 18:43:52 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
24.10.2008 18:43:52 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
24.10.2008 18:43:51 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:43:51 - Backup Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\
24.10.2008 18:43:51 - Temp Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\
24.10.2008 18:43:51 - Using System's global Proxy settings
24.10.2008 18:43:52 - Launching GUI... display mode: 0
24.10.2008 18:43:52 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
24.10.2008 18:43:52 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
24.10.2008 18:43:52 - Avira AntiVir Personal - Free Antivirus
24.10.2008 18:44:25 - Connection failed while downloading via the system proxy the file http://dl8.freeav.net/upd/idx/master.idx.
24.10.2008 18:44:25 - Switching to next update server
24.10.2008 18:44:27 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\idx/master.idx to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\master.idx
24.10.2008 18:44:27 - Master IDX file has changed
24.10.2008 18:44:28 - Downloading the product.info file from http://dl10.freeav.net/upd/idx/classic-nt-en.info.gz
24.10.2008 18:44:50 - There was a problem updating from the specified server: Connection failed while downloading via the system proxy the file http://dl10.freeav.net/upd/idx/classic-nt-en.info.gz.
24.10.2008 18:44:50 - Switching to next update server
24.10.2008 18:45:02 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\idx/master.idx to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\master.idx
24.10.2008 18:45:02 - Master IDX file has changed
24.10.2008 18:45:02 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/classic-nt-en.info.gz
24.10.2008 18:45:05 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\classic-nt-en.info to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\classic-nt-en.info
24.10.2008 18:45:05 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/vdf.info.gz
24.10.2008 18:45:06 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/specvir-nt.info.gz
24.10.2008 18:45:06 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/ave2.info.gz
24.10.2008 18:45:07 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/info [...] en.info.gz
24.10.2008 18:45:08 - Module: SELFUPDATE Source: winwks\en\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 15
24.10.2008 18:45:09 - Module: MAIN Source: winwks\en\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 83
24.10.2008 18:45:14 - Module: COMMAPPDATA_AV Source: winwks\en\ Destination: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\ Files: 1
24.10.2008 18:45:14 - Module: COMMAPP Source: winwks\en\ Destination: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\JOBS\ Files: 4
24.10.2008 18:45:14 - Module: COMMAPDATA_AV_PROFILES Source: winwks\en\ Destination: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\ Files: 2
24.10.2008 18:45:14 - Module: TEXT Source: winwks\en\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 3
24.10.2008 18:45:14 - Module: VDF Source: vdf\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 4
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir2.vdf 7.0.5.20 < 7.0.7.59
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir3.vdf 7.0.5.23 < 7.0.7.88
24.10.2008 18:45:15 - Module: AVREP_NT Source: engine\nt\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avrep.dll 7.0.0.1 < 8.0.0.2
24.10.2008 18:45:15 - Module: AVE2 Source: ave2\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 14
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aecore.dll 8.1.2.6 < 8.1.2.8
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aegen.dll 8.1.0.41 < 8.1.0.42
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeheur.dll 8.1.0.59 < 8.1.0.63
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeoffice.dll 8.1.0.28 < 8.1.0.29
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescript.dll 8.1.1.8 < 8.1.1.9
24.10.2008 18:45:15 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeset.dat 8.2.0.4 < 8.2.0.9
24.10.2008 18:45:15 - Module: DRV Source: winwks\en\ Destination: C:\WINDOWS\SYSTEM32\drivers\ Files: 4
24.10.2008 18:45:15 - Module: PRODINFO Source: winwks\en\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1
24.10.2008 18:45:15 - Minifilter is installed
24.10.2008 18:45:15 - Minifilter is possible
24.10.2008 18:45:15 - Reading registry value successful: Software\Avira\AntiVir PersonalEdition Classic | FilterType
24.10.2008 18:45:15 - Initialize avnotify.exe
24.10.2008 18:45:15 - Starting avnotify.exe successful
24.10.2008 18:45:15 - Preparing to download files
24.10.2008 18:45:15 - 11 files need to be downloaded / copied from http://dl2.avgate.net/upd/
24.10.2008 18:45:16 - #1: Downloading and extracting http://dl2.avgate.net/upd/winwks/e [...] ist.ini.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\winwks\en\classic-nt/filelist.ini
24.10.2008 18:45:16 - #2: Downloading and extracting http://dl2.avgate.net/upd/winwks/e [...] uct.ini.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\winwks\en\classic-nt/product.ini
24.10.2008 18:45:17 - #3: Downloading and extracting http://dl2.avgate.net/upd/vdf/antivir2.vdf.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\vdf\antivir2.vdf
24.10.2008 18:46:05 - #4: Downloading and extracting http://dl2.avgate.net/upd/vdf/antivir3.vdf.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\vdf\antivir3.vdf
24.10.2008 18:46:08 - #5: Downloading and extracting http://dl2.avgate.net/upd/engine/nt/avrep.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\engine\nt\avrep.dll
24.10.2008 18:46:09 - #6: Downloading and extracting http://dl2.avgate.net/upd/ave2/aecore.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aecore.dll
24.10.2008 18:46:11 - #7: Downloading and extracting http://dl2.avgate.net/upd/ave2/aegen.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aegen.dll
24.10.2008 18:46:13 - #8: Downloading and extracting http://dl2.avgate.net/upd/ave2/aeheur.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeheur.dll
24.10.2008 18:46:19 - #9: Downloading and extracting http://dl2.avgate.net/upd/ave2/aeoffice.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeoffice.dll
24.10.2008 18:46:21 - #10: Downloading and extracting http://dl2.avgate.net/upd/ave2/aescript.dll.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aescript.dll
24.10.2008 18:46:22 - #11: Downloading and extracting http://dl2.avgate.net/upd/ave2/aeset.dat.gz to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeset.dat
24.10.2008 18:47:06 - Keyfile: OK [FULL Mode]
24.10.2008 18:47:06 - Status of service AntiVirService is running
24.10.2008 18:47:06 - Initialize avscan.exe
24.10.2008 18:47:06 - Initialize avcenter.exe
24.10.2008 18:47:06 - Initialize avgnt.exe
24.10.2008 18:47:06 - avscan.exe closed.
24.10.2008 18:47:07 - avgnt.exe closed.
24.10.2008 18:47:07 - Starting to install
24.10.2008 18:47:07 - File C:\Program Files\Avira\AntiVir PersonalEdition Classic\filelist.ini will not be backed up because it doesn't exist
24.10.2008 18:47:07 - File C:\Program Files\Avira\AntiVir PersonalEdition Classic\product.ini will not be backed up because it doesn't exist
24.10.2008 18:47:07 - Processing module MAIN Source: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\winwks\en\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:47:07 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\winwks\en\classic-nt/filelist.ini to C:\Program Files\Avira\AntiVir PersonalEdition Classic\filelist.ini
24.10.2008 18:47:07 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\winwks\en\classic-nt/product.ini to C:\Program Files\Avira\AntiVir PersonalEdition Classic\product.ini
24.10.2008 18:47:08 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir2.vdf to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\antivir2.vdf
24.10.2008 18:47:08 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir3.vdf to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\antivir3.vdf
24.10.2008 18:47:08 - Processing module VDF Source: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\vdf\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:47:09 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\vdf\antivir2.vdf to C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir2.vdf
24.10.2008 18:47:09 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\vdf\antivir3.vdf to C:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir3.vdf
24.10.2008 18:47:09 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\avrep.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\avrep.dll
24.10.2008 18:47:09 - Processing module AVREP_NT Source: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\engine\nt\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:47:09 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\engine\nt\avrep.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\avrep.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aecore.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aecore.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aegen.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aegen.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeheur.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aeheur.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeoffice.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aeoffice.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescript.dll to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aescript.dll
24.10.2008 18:47:10 - Copy file C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeset.dat to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\aeset.dat
24.10.2008 18:47:10 - Processing module AVE2 Source: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\ Destination: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
24.10.2008 18:47:11 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aecore.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aecore.dll
24.10.2008 18:47:13 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aegen.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aegen.dll
24.10.2008 18:47:14 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeheur.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeheur.dll
24.10.2008 18:47:15 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeoffice.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeoffice.dll
24.10.2008 18:47:17 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aescript.dll to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescript.dll
24.10.2008 18:47:17 - Copy file C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4901fb47\ave2\aeset.dat to C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeset.dat
24.10.2008 18:47:17 - A total of 11 files were updated
24.10.2008 18:47:17 - Initialize AVWSC.EXE
24.10.2008 18:47:17 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |UpdateInProgress
24.10.2008 18:47:17 - Status of service AntiVirService is running
24.10.2008 18:47:25 - Reinitialization of AntiVirService carried out successfully.
24.10.2008 18:47:25 - Starting avgnt.exe successful
24.10.2008 18:47:25 - Dialup: 0
24.10.2008 18:47:25 - Downloaded bytes: 5680430
24.10.2008 18:47:25 - Downloaded file(s): 11
24.10.2008 18:47:25 - Downloaded file(s): filelist.ini; product.ini; antivir2.vdf; antivir3.vdf; avrep.dll; aecore.dll; aegen.dll; aeheur.dll; aeoffice.dll; aescript.dll
24.10.2008 18:47:25 - Downloaded file(s): aeset.dat
24.10.2008 18:47:25 - Required time: 03:34
24.10.2008 18:47:25 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |LastUpdate
24.10.2008 18:47:34 - Update finished successfully

Avira AntiVir Personal
Report file date: lundi 27 octobre 2008 18:45

Scanning for 1707540 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: Propriétaire
Computer name: QUILAN-XFGY7NM3

Version information:
BUILD.DAT : 8.2.0.334 16933 Bytes 16/10/2008 14:55:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15
ANTIVIR2.VDF : 7.0.7.59 4366336 Bytes 19/10/2008 16:46:05
ANTIVIR3.VDF : 7.0.7.91 192000 Bytes 25/10/2008 16:45:03
Engineversion : 8.2.0.9
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.9 319867 Bytes 24/10/2008 16:46:22
AESCN.DLL : 8.1.1.3 123252 Bytes 14/10/2008 10:05:56
AERDL.DLL : 8.1.1.2 438644 Bytes 12/09/2008 06:06:02
AEPACK.DLL : 8.1.2.4 369014 Bytes 14/10/2008 10:05:56
AEOFFICE.DLL : 8.1.0.29 196988 Bytes 24/10/2008 16:46:20
AEHEUR.DLL : 8.1.0.63 1479032 Bytes 24/10/2008 16:46:19
AEHELP.DLL : 8.1.1.2 115062 Bytes 14/10/2008 10:05:56
AEGEN.DLL : 8.1.0.42 319861 Bytes 24/10/2008 16:46:13
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.2.8 172406 Bytes 24/10/2008 16:46:11
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 24/10/2008 16:46:09
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 27 octobre 2008 18:45

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'update.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'daemon.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process '9wifi.exe' - '1' Module(s) have been scanned
Scan process 'itype.exe' - '1' Module(s) have been scanned
Scan process 'AirGCFG.exe' - '1' Module(s) have been scanned
Scan process 'WZCSLDR2.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'slserv.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
30 processes with 30 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '52' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Propriétaire\Mes documents\LimeWire\Incomplete\T-324019600-Microsoft Office 2003 (Word, Excel, Outlook, PowerPoint, Access, and FrontPage).zip
[0] Archive type: ZIP
--> IE5/EN/IE4MFC40.CAB
[1] Archive type: CAB (Microsoft)
--> MFC40.INF
[WARNING] No further files can be extracted from this archive. The archive will be closed
--> IE5/EN/IELPKKO.CAB
[1] Archive type: CAB (Microsoft)
--> advpack.dll
[WARNING] No further files can be extracted from this archive. The archive will be closed
--> IE5/EN/NM2.CAB
[1] Archive type: CAB (Microsoft)
--> msica.dll
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\flap new amok each.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '49670595.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\help save lies.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '4972062a.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\krufvazz.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '497b063d.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\lbkppdpv.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '4971062d.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\sdzufcet.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '49800630.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\APPLIC~1\LESSCI~1\Wait keep.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '496f062e.qua'!
C:\Lop SD\Backup-Lop\DOCUME~1\PROPRI~1\LOCALS~1\Temp\bis1.exe
[DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[NOTE] The file was moved to '49790636.qua'!
C:\Lop SD\Backup-Lop\Program Files\Circle Developement\Uninstall.exe
[DETECTION] Is the TR/Swizzor.AAM Trojan
[NOTE] The file was moved to '496f063c.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!


End of the scan: lundi 27 octobre 2008 19:58
Used time: 1:13:36 Hour(s)

The scan has been done completely.

4329 Scanning directories
335205 Files were scanned
8 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
8 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
335195 Files not concerned
1984 Archives were scanned
5 Warnings
8 Notes

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:04:19, on 27/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
C:\Documents and Settings\Propriétaire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ogame.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ads.eorezo.com/cgi-bin/adve [...] t=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWA-110] C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wi [...] 4218018214
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 5865 bytes

ba pour le moment plus de pub mais depuis j'ai un message internet explorer qui s'affiche du genre page script ou un truc de genre voulez vous continuer avec cette page.

Et pour savoir que pourrais-tu me conseiller pour bien protéger mon pc!