probleme avec rapid antivirus
Dernière réponse : dans Sécurité
salut a tous.
voila, j'ai un souci avec des popup qui s'affiche en permanance du genre " Attn! Critical System Warning" et rapid antivirus.
j'ai essayer avast et A-quared mais impossible de m'en débarrasser, je supprime mais ils reviennent a chaque démarrage du pc.
merci par avance pour votre aide.
voici un rapport de hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:51:58, on 07/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\vphc710.exe
C:\WINDOWS\system32\oodtray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Nero\Nero 9\InCD\InCD.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\WINDOWS\system32\msiconf.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Philips\Philips SPC710NC Webcam\TrayMin710.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Vuze\Azureus.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [phc710] C:\WINDOWS\vphc710.exe
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 9\InCD\InCD.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [loader.exe] C:\WINDOWS\system32\loader.exe
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [msiexec.exe] msiconf.exe
O4 - HKCU\..\Run: [loader.exe] C:\WINDOWS\system32\loader.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: TrayMin710.exe.lnk = ?
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_0_3_3....
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
--
End of file - 12418 bytes
voila, j'ai un souci avec des popup qui s'affiche en permanance du genre " Attn! Critical System Warning" et rapid antivirus.
j'ai essayer avast et A-quared mais impossible de m'en débarrasser, je supprime mais ils reviennent a chaque démarrage du pc.
merci par avance pour votre aide.
voici un rapport de hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:51:58, on 07/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\vphc710.exe
C:\WINDOWS\system32\oodtray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Nero\Nero 9\InCD\InCD.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\WINDOWS\system32\msiconf.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Philips\Philips SPC710NC Webcam\TrayMin710.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Vuze\Azureus.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=10611&gct...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [phc710] C:\WINDOWS\vphc710.exe
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 9\InCD\InCD.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [loader.exe] C:\WINDOWS\system32\loader.exe
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [msiexec.exe] msiconf.exe
O4 - HKCU\..\Run: [loader.exe] C:\WINDOWS\system32\loader.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: TrayMin710.exe.lnk = ?
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_0_3_3....
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\InCDSrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
--
End of file - 12418 bytes
Autres pages sur : probleme rapid antivirus
Lassé par la pub ? Créez un compte
Bonjour,
[#ff0000]! Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]
Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.
AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
* le nom de la partition peut changer
[#ff0000]! Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]
AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
* le nom de la partition peut changer
voici quand meme le rapport Angeldark, mon pc est redevenu comme à la normale:
ComboFix 08-11-07.01 - Propriétaire 2008-11-07 22:19:50.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.765 [GMT 1:00]
Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\drivers\downld
c:\windows\system32\iAlmcoin.dll
c:\windows\system32\loader.exe
c:\windows\system32\msiconf.exe
.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-07 au 2008-11-07 ))))))))))))))))))))))))))))))))))))
.
2008-11-07 22:11 . 2008-11-07 22:11 <REP> d-------- c:\program files\CCleaner
2008-11-07 20:11 . 2008-11-07 20:55 <REP> d-------- c:\program files\a-squared Anti-Malware
2008-11-07 19:36 . 2008-11-07 19:36 <REP> d-------- c:\program files\Trend Micro
2008-11-07 18:30 . 2008-11-07 21:05 <REP> d-------- c:\program files\Spybot - Search & Destroy
2008-11-07 18:30 . 2008-11-07 20:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-06 22:50 . 2008-11-07 01:23 <REP> d-------- c:\program files\MSVideoPlugin
2008-11-05 19:28 . 2003-01-02 12:31 <REP> d-a------ c:\documents and settings\Administrateur\WINDOWS
2008-11-05 19:28 . 2003-01-02 11:14 <REP> d-a------ c:\documents and settings\Administrateur\Voisinage réseau
2008-11-05 19:28 . 2003-01-02 11:14 <REP> d-a------ c:\documents and settings\Administrateur\Voisinage d'impression
2008-11-05 19:28 . 2003-01-01 18:21 <REP> d-a------ c:\documents and settings\Administrateur\Modèles
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Mes documents
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Menu Démarrer
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Favoris
2008-11-05 19:28 . 2008-11-05 23:29 <REP> d-a------ c:\documents and settings\Administrateur\Bureau
2008-11-05 19:28 . 2003-01-01 20:32 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\Symantec
2008-11-05 19:28 . 2003-01-02 12:25 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\Sonic
2008-11-05 19:28 . 2003-01-02 12:35 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\SampleView
2008-11-05 19:28 . 2003-01-02 12:30 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\InterTrust
2008-11-05 19:28 . 2003-01-02 12:42 <REP> d-a------ c:\documents and settings\Administrateur\.javaws
2008-11-05 19:28 . 2008-11-05 19:28 <REP> d-------- c:\documents and settings\Administrateur
2008-11-05 18:55 . 2008-11-05 18:55 <REP> d-------- c:\program files\Fichiers communs\L&H
2008-11-05 18:36 . 2008-11-05 18:36 <REP> d-------- c:\program files\Microsoft Reader
2008-11-05 18:36 . 2003-06-05 17:15 57,436 --a------ c:\windows\DASShp.dll
2008-11-05 18:30 . 2008-11-05 18:30 <REP> d-------- c:\program files\Fichiers communs\xing shared
2008-11-05 18:29 . 2008-11-05 18:29 <REP> d-------- c:\program files\Real
2008-11-05 18:29 . 2008-11-05 18:29 <REP> d-------- c:\program files\Fichiers communs\Real
2008-11-05 18:11 . 2008-11-05 18:11 446,976 --a------ c:\windows\system32\ShellMPD.dll
2008-11-05 18:10 . 2008-11-05 18:11 <REP> d-------- c:\program files\MSN Pictures Displayer
2008-11-05 18:10 . 2008-11-07 21:10 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\MSN Pictures Displayer
2008-11-04 21:25 . 2008-11-05 18:53 <REP> d-------- c:\program files\Microsoft Games
2008-11-04 19:45 . 2007-05-16 16:45 3,497,832 --a------ c:\windows\system32\d3dx9_34.dll
2008-11-04 19:45 . 2007-05-16 16:45 1,124,720 --a------ c:\windows\system32\D3DCompiler_34.dll
2008-11-04 19:45 . 2007-03-12 16:42 1,123,696 --a------ c:\windows\system32\D3DCompiler_33.dll
2008-11-04 19:45 . 2007-05-16 16:45 443,752 --a------ c:\windows\system32\d3dx10_34.dll
2008-11-04 19:45 . 2007-03-15 16:57 443,752 --a------ c:\windows\system32\d3dx10_33.dll
2008-11-04 19:45 . 2007-06-20 20:46 266,088 --a------ c:\windows\system32\xactengine2_8.dll
2008-11-04 19:45 . 2007-04-04 18:55 261,480 --a------ c:\windows\system32\xactengine2_7.dll
2008-11-04 19:45 . 2007-04-04 18:53 81,768 --a------ c:\windows\system32\xinput1_3.dll
2008-11-04 19:45 . 2007-06-20 20:45 18,280 --a------ c:\windows\system32\x3daudio1_2.dll
2008-11-04 19:32 . 2008-11-06 23:08 <REP> d-------- c:\program files\Cobra 11 - Crash Time
2008-11-03 19:52 . 2008-11-03 19:52 236 --a------ C:\sqmdata01.sqm
2008-11-03 19:52 . 2008-11-03 19:52 200 --a------ C:\sqmnoopt01.sqm
2008-11-01 18:20 . 2008-11-07 19:18 <REP> d-------- c:\program files\Windows Live Safety Center
2008-10-31 20:00 . 2008-11-06 22:29 <REP> d-------- c:\program files\ArcSoft
2008-10-31 20:00 . 2008-10-31 20:00 <REP> d-------- c:\documents and settings\All Users\Application Data\ArcSoft
2008-10-31 19:14 . 2008-10-30 17:00 187,025 --------- c:\windows\hpoins21.dat.temp
2008-10-31 19:14 . 2008-02-13 02:15 7,262 --------- c:\windows\hpomdl21.dat.temp
2008-10-31 17:56 . 2008-10-31 17:56 <REP> d-------- C:\temp
2008-10-31 17:54 . 2008-10-31 18:00 <REP> d-------- c:\documents and settings\Propriétaire\.jpi_cache
2008-10-31 17:54 . 2008-10-31 18:00 <REP> d-------- c:\documents and settings\Propriétaire\.jpi_cache
2008-10-31 17:54 . 2008-10-31 17:54 <REP> d-------- c:\documents and settings\Propriétaire\.java
2008-10-31 17:54 . 2008-10-31 17:54 <REP> d-------- c:\documents and settings\Propriétaire\.java
2008-10-31 17:38 . 2008-10-31 17:38 <REP> d-------- c:\documents and settings\All Users\Application Data\RoboForm
2008-10-31 17:37 . 2008-10-31 17:37 <REP> d-------- c:\program files\Siber Systems
2008-10-31 07:28 . 2008-10-31 19:06 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Nero
2008-10-30 21:43 . 2008-10-30 21:43 4,767 --a------ c:\windows\Irremote.ini
2008-10-30 21:41 . 2008-10-30 21:41 <REP> d-------- c:\program files\Windows Sidebar
2008-10-30 21:21 . 2008-09-01 14:31 129,560 --a------ c:\windows\system32\drivers\InCDFs.sys
2008-10-30 21:21 . 2008-09-01 14:31 41,752 --a------ c:\windows\system32\drivers\InCDRm.sys
2008-10-30 21:21 . 2008-09-01 14:31 40,216 --a------ c:\windows\system32\drivers\InCDPass.sys
2008-10-30 21:21 . 2008-09-01 14:31 19,352 --a------ c:\windows\system32\drivers\InCDRec.sys
2008-10-30 21:20 . 2008-10-30 21:42 <REP> d-------- c:\program files\Nero
2008-10-30 21:20 . 2008-10-30 21:54 <REP> d-------- c:\program files\Fichiers communs\Nero
2008-10-30 21:20 . 2008-10-31 16:57 <REP> d-------- c:\documents and settings\All Users\Application Data\Nero
2008-10-30 21:15 . 2008-10-30 21:29 <REP> d-------- c:\windows\system32\XPSViewer
2008-10-30 21:14 . 2008-10-30 21:14 <REP> d-------- c:\program files\Reference Assemblies
2008-10-30 21:14 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
2008-10-30 21:02 . 2008-11-03 20:24 <REP> d-------- c:\program files\eMule
2008-10-30 20:32 . 2008-10-30 20:32 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Template
2008-10-30 18:18 . 2008-10-30 18:18 <REP> d-------- c:\program files\Windows Media Connect 2
2008-10-30 18:17 . 2008-10-30 18:17 <REP> d-------- c:\windows\system32\LogFiles
2008-10-30 18:17 . 2008-10-30 18:17 <REP> d-------- c:\windows\system32\drivers\UMDF
2008-10-30 17:36 . 2008-10-30 17:36 <REP> d-------- c:\documents and settings\All Users\Application Data\nView_Profiles
2008-10-30 17:12 . 2008-10-30 17:12 <REP> d-------- c:\program files\Roxio
2008-10-30 17:12 . 2008-10-30 17:12 <REP> d-------- c:\program files\Fichiers communs\SureThing Shared
2008-10-30 13:13 . 2007-11-01 04:28 970,752 -ra------ c:\windows\system32\hpotiop5.dll
2008-10-30 13:13 . 2007-11-01 04:28 729,088 -ra------ c:\windows\system32\hpowiax5.dll
2008-10-30 13:13 . 2007-11-01 04:28 364,544 -ra------ c:\windows\system32\hppldcoi.dll
2008-10-30 13:13 . 2007-11-01 04:28 309,760 -ra------ c:\windows\system32\difxapi.dll
2008-10-30 13:13 . 2007-11-01 04:28 303,104 -ra------ c:\windows\system32\hpovst12.dll
2008-10-30 13:10 . 2008-10-30 13:10 <REP> d-------- c:\program files\Hewlett-Packard
2008-10-30 13:10 . 2008-10-30 13:10 <REP> d-------- c:\documents and settings\All Users\Application Data\HP Product Assistant
2008-10-30 13:09 . 2008-10-30 13:09 <REP> d-------- c:\program files\Fichiers communs\HP
2008-10-30 13:07 . 2008-10-31 19:21 186,723 --a------ c:\windows\hpoins21.dat
2008-10-30 13:07 . 2008-02-13 02:15 7,262 --------- c:\windows\hpomdl21.dat
2008-10-30 12:52 . 2008-10-30 12:59 <REP> d-------- c:\windows\SxsCaPendDel
2008-10-30 00:01 . 2008-10-30 00:03 19,559 --------- c:\windows\hpqins13.dat.temp
2008-10-29 23:58 . 2008-10-30 17:24 19,546 --a------ c:\windows\hpqins13.dat
2008-10-29 21:14 . 2008-10-29 21:14 <REP> d-------- c:\program files\Micro Application
2008-10-29 21:13 . 2008-10-29 21:13 101 --a------ c:\windows\NAVIGMA.INI
2008-10-29 21:10 . 2008-11-07 21:09 44,653 --a------ c:\windows\system32\oodbs.lor
2008-10-29 21:08 . 2008-10-29 21:08 236 --a------ C:\sqmdata00.sqm
2008-10-29 21:08 . 2008-10-29 21:08 200 --a------ C:\sqmnoopt00.sqm
2008-10-29 20:53 . 2008-10-29 20:53 0 --a------ c:\windows\OODCNT.INI
2008-10-29 14:34 . 2008-10-29 14:34 <REP> d-------- c:\windows\system32\oodag
2008-10-29 12:41 . 2008-10-29 12:41 <REP> d-------- c:\program files\OO Software
2008-10-29 00:04 . 2008-10-29 00:04 <REP> d--hs---- C:\found.000
2008-10-28 22:23 . 2008-10-28 22:23 <REP> d-------- c:\documents and settings\All Users\Application Data\TomTom
2008-10-28 22:21 . 2008-10-28 22:21 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\TomTom
2008-10-28 22:13 . 2008-10-28 22:13 <REP> d-------- c:\program files\TomTom HOME 2
2008-10-28 21:39 . 2006-10-16 10:34 644,864 --a------ c:\windows\system32\drivers\phc710.sys
2008-10-28 21:39 . 2006-04-14 15:33 15,488 --a------ c:\windows\phc710.ini
2008-10-28 21:39 . 2004-02-27 17:36 13,023 --a------ c:\windows\phc710.src
2008-10-28 21:38 . 2008-11-01 13:35 <REP> d-------- c:\program files\Tomtomax Maxi-Box
2008-10-28 21:06 . 2008-10-28 21:06 98,304 --a------ c:\windows\system32\CmdLineExt.dll
2008-10-28 20:40 . 2008-10-28 20:47 43,520 --a------ c:\windows\system32\CmdLineExt03.dll
2008-10-28 20:39 . 2008-10-28 20:39 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Atari
2008-10-28 20:36 . 2008-10-28 20:36 <REP> d-------- c:\program files\Fichiers communs\PocketSoft
2008-10-28 20:36 . 2002-02-27 18:50 197,120 --a------ c:\windows\patchw32.dll
2008-10-28 20:34 . 2008-10-28 20:34 <REP> d-------- c:\program files\Atari
2008-10-28 20:30 . 2008-10-28 20:30 <REP> d-------- c:\program files\DAEMON Tools Lite
2008-10-28 20:27 . 2008-10-28 20:27 717,296 --a------ c:\windows\system32\drivers\sptd.sys
2008-10-28 20:26 . 2008-10-28 20:26 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\DAEMON Tools
2008-10-28 20:00 . 2008-10-28 20:00 <REP> d-------- c:\program files\MSXML 4.0
2008-10-28 19:59 . 2008-11-03 19:45 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\ArcSoft
2008-10-28 19:57 . 2008-10-31 20:00 <REP> d-------- c:\program files\Fichiers communs\ArcSoft
2008-10-28 19:57 . 2004-12-07 10:11 258,352 --a------ c:\windows\system32\unicows.dll
2008-10-28 19:57 . 1995-08-01 04:44 212,480 --a------ c:\windows\PCDLIB32.DLL
2008-10-28 19:57 . 2008-04-13 19:45 60,032 --a------ c:\windows\system32\drivers\USBAUDIO.sys
2008-10-28 19:57 . 2008-04-13 19:45 60,032 --a--c--- c:\windows\system32\dllcache\usbaudio.sys
2008-10-28 19:27 . 2008-10-28 21:39 <REP> d-------- c:\program files\Philips
2008-10-28 19:27 . 2006-10-16 10:18 344,064 --------- c:\windows\vphc710.exe
2008-10-28 19:27 . 2006-10-16 10:18 344,064 --a------ c:\windows\system32\vphc710.exe
2008-10-28 19:27 . 2006-08-16 09:50 118,784 --a------ c:\windows\system32\vphc710.dll
2008-10-28 19:27 . 2004-02-16 13:59 61,440 --a------ c:\windows\system32\cphc710.dll
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-06 21:29 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-05 17:05 --------- d---a-w c:\program files\Symantec
2008-11-05 17:05 --------- d---a-w c:\program files\Fichiers communs\Symantec Shared
2008-11-05 17:05 --------- d---a-w c:\documents and settings\All Users\Application Data\Symantec
2008-11-04 18:44 278,728 ----a-w c:\windows\system32\drivers\atksgt.sys
2008-11-04 18:44 25,416 ----a-w c:\windows\system32\drivers\lirsgt.sys
2008-10-28 20:52 --------- d---a-w c:\program files\Fichiers communs\Adobe
2008-10-28 17:57 --------- d---a-w c:\program files\Microsoft Works
2008-10-27 23:59 --------- d---a-w c:\program files\Fichiers communs\InstallShield
2008-10-27 23:06 --------- d---a-w c:\program files\Easy Internet signup
2008-10-27 22:35 --------- d---a-w c:\program files\InterVideo
2008-09-24 09:40 4,122,368 ----a-r c:\windows\system32\drivers\alcxwdm.sys
2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
2008-09-08 23:03 51,712 ----a-w c:\windows\system32\sirenacm.dll
2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys
2008-08-20 09:54 287,256 ----a-r c:\windows\system32\AbaleZip.dll
2008-08-20 05:10 670,208 ----a-w c:\windows\system32\wininet.dll
2008-08-14 13:23 2,191,232 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 13:23 2,068,096 ----a-w c:\windows\system32\ntkrnlpa.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-10-02 16:44 325000 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-02 325000]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt]
@="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}"
[HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}]
2008-09-01 14:31 98328 --a------ c:\program files\Nero\Nero 9\InCD\NBHshx.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\HOMERunner.exe" [2008-09-26 206184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2003-04-07 114688]
"StorageGuard"="c:\program files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-02-13 155648]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2002-09-14 212992]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072]
"phc710"="c:\windows\vphc710.exe" [2006-10-16 344064]
"OODefragTray"="c:\windows\system32\oodtray.exe" [2007-06-28 2512128]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"InCD"="c:\program files\Nero\Nero 9\InCD\InCD.exe" [2008-09-01 1111064]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2008-11-02 2780816]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]
"VTTimer"="VTTimer.exe" [2003-05-08 c:\windows\system32\VTTimer.exe]
"AlcxMonitor"="ALCXMNTR.EXE" [2003-04-04 c:\windows\ALCXMNTR.EXE]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
mod_sm.lnk - c:\hp\bin\cloaker.exe [1999-11-07 27136]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
TrayMin710.exe.lnk - c:\program files\Philips\Philips SPC710NC Webcam\TrayMin710.exe [2008-10-28 278528]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^DTV Remote Control.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\DTV Remote Control.lnk
backup=c:\windows\pss\DTV Remote Control.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
--a------ 2008-02-22 10:33 72192 c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-08-08 13:11 490952 c:\program files\DAEMON Tools Lite\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBHGui]
--a------ 2008-09-01 14:31 2079256 c:\program files\Nero\Nero 9\InCD\NBHGui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm]
--a------ 2008-10-31 17:37 160592 c:\program files\Siber Systems\AI RoboForm\robotaskbaricon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-11-05 18:29 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--a------ 2007-04-16 15:28 577536 c:\windows\soundman.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 ACDaemon;ArcSoft Connect Daemon;c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2008-02-22 104960]
R2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2008-10-02 460168]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 CX2388X;ADS 2388x Video Capture;c:\windows\system32\drivers\cx88cap.sys [2005-05-24 160512]
R2 CX88TS;ADS DVBT 2388x Transport Stream Capture;c:\windows\system32\drivers\cx88ts.sys [2005-05-24 13824]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-08-29 935208]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2008-09-01 108568]
R3 CXBDATUNE;ADS DVB BDA Tuner/Demod;c:\windows\system32\drivers\cxBDAtun.sys [2005-05-24 108544]
R3 phc710;USB PC Camera (SPC710NC);c:\windows\system32\DRIVERS\phc710.sys [2006-10-16 644864]
R3 usbscan;Pilote de scanneur USB;c:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB;c:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-11-02 195752]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7053db48-a536-11dd-8d27-000c6ee1965c}]
\Shell\AutoRun\command - J:\InstallTomTomHOME.exe
*Newly Created Service* - PROCEXP90
.
- - - - ORPHELINS SUPPRIMES - - - -
HKCU-Run-loader.exe - c:\windows\system32\loader.exe
HKCU-Run-msiexec.exe - msiconf.exe
HKLM-Run-loader.exe - c:\windows\system32\loader.exe
.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\n24masw5.default\
FF -: plugin - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\n24masw5.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF -: plugin - c:\program files\Adobe\Acrobat 5.0\Reader\browser\nppdf32.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava11.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava12.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava13.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava32.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJPI141_02.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPOJI610.dll
FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-07 22:23:11
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
**************************************************************************
.
Heure de fin: 2008-11-07 22:25:41
ComboFix-quarantined-files.txt 2008-11-07 21:24:39
Avant-CF: 28 864 126 976 octets libres
Après-CF: 28,907,184,128 octets libres
295 --- E O F --- 2008-11-01 03:01:59
ComboFix 08-11-07.01 - Propriétaire 2008-11-07 22:19:50.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.765 [GMT 1:00]
Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\drivers\downld
c:\windows\system32\iAlmcoin.dll
c:\windows\system32\loader.exe
c:\windows\system32\msiconf.exe
.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-07 au 2008-11-07 ))))))))))))))))))))))))))))))))))))
.
2008-11-07 22:11 . 2008-11-07 22:11 <REP> d-------- c:\program files\CCleaner
2008-11-07 20:11 . 2008-11-07 20:55 <REP> d-------- c:\program files\a-squared Anti-Malware
2008-11-07 19:36 . 2008-11-07 19:36 <REP> d-------- c:\program files\Trend Micro
2008-11-07 18:30 . 2008-11-07 21:05 <REP> d-------- c:\program files\Spybot - Search & Destroy
2008-11-07 18:30 . 2008-11-07 20:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-06 22:50 . 2008-11-07 01:23 <REP> d-------- c:\program files\MSVideoPlugin
2008-11-05 19:28 . 2003-01-02 12:31 <REP> d-a------ c:\documents and settings\Administrateur\WINDOWS
2008-11-05 19:28 . 2003-01-02 11:14 <REP> d-a------ c:\documents and settings\Administrateur\Voisinage réseau
2008-11-05 19:28 . 2003-01-02 11:14 <REP> d-a------ c:\documents and settings\Administrateur\Voisinage d'impression
2008-11-05 19:28 . 2003-01-01 18:21 <REP> d-a------ c:\documents and settings\Administrateur\Modèles
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Mes documents
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Menu Démarrer
2008-11-05 19:28 . 2008-10-28 07:05 <REP> d-a------ c:\documents and settings\Administrateur\Favoris
2008-11-05 19:28 . 2008-11-05 23:29 <REP> d-a------ c:\documents and settings\Administrateur\Bureau
2008-11-05 19:28 . 2003-01-01 20:32 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\Symantec
2008-11-05 19:28 . 2003-01-02 12:25 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\Sonic
2008-11-05 19:28 . 2003-01-02 12:35 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\SampleView
2008-11-05 19:28 . 2003-01-02 12:30 <REP> d-a------ c:\documents and settings\Administrateur\Application Data\InterTrust
2008-11-05 19:28 . 2003-01-02 12:42 <REP> d-a------ c:\documents and settings\Administrateur\.javaws
2008-11-05 19:28 . 2008-11-05 19:28 <REP> d-------- c:\documents and settings\Administrateur
2008-11-05 18:55 . 2008-11-05 18:55 <REP> d-------- c:\program files\Fichiers communs\L&H
2008-11-05 18:36 . 2008-11-05 18:36 <REP> d-------- c:\program files\Microsoft Reader
2008-11-05 18:36 . 2003-06-05 17:15 57,436 --a------ c:\windows\DASShp.dll
2008-11-05 18:30 . 2008-11-05 18:30 <REP> d-------- c:\program files\Fichiers communs\xing shared
2008-11-05 18:29 . 2008-11-05 18:29 <REP> d-------- c:\program files\Real
2008-11-05 18:29 . 2008-11-05 18:29 <REP> d-------- c:\program files\Fichiers communs\Real
2008-11-05 18:11 . 2008-11-05 18:11 446,976 --a------ c:\windows\system32\ShellMPD.dll
2008-11-05 18:10 . 2008-11-05 18:11 <REP> d-------- c:\program files\MSN Pictures Displayer
2008-11-05 18:10 . 2008-11-07 21:10 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\MSN Pictures Displayer
2008-11-04 21:25 . 2008-11-05 18:53 <REP> d-------- c:\program files\Microsoft Games
2008-11-04 19:45 . 2007-05-16 16:45 3,497,832 --a------ c:\windows\system32\d3dx9_34.dll
2008-11-04 19:45 . 2007-05-16 16:45 1,124,720 --a------ c:\windows\system32\D3DCompiler_34.dll
2008-11-04 19:45 . 2007-03-12 16:42 1,123,696 --a------ c:\windows\system32\D3DCompiler_33.dll
2008-11-04 19:45 . 2007-05-16 16:45 443,752 --a------ c:\windows\system32\d3dx10_34.dll
2008-11-04 19:45 . 2007-03-15 16:57 443,752 --a------ c:\windows\system32\d3dx10_33.dll
2008-11-04 19:45 . 2007-06-20 20:46 266,088 --a------ c:\windows\system32\xactengine2_8.dll
2008-11-04 19:45 . 2007-04-04 18:55 261,480 --a------ c:\windows\system32\xactengine2_7.dll
2008-11-04 19:45 . 2007-04-04 18:53 81,768 --a------ c:\windows\system32\xinput1_3.dll
2008-11-04 19:45 . 2007-06-20 20:45 18,280 --a------ c:\windows\system32\x3daudio1_2.dll
2008-11-04 19:32 . 2008-11-06 23:08 <REP> d-------- c:\program files\Cobra 11 - Crash Time
2008-11-03 19:52 . 2008-11-03 19:52 236 --a------ C:\sqmdata01.sqm
2008-11-03 19:52 . 2008-11-03 19:52 200 --a------ C:\sqmnoopt01.sqm
2008-11-01 18:20 . 2008-11-07 19:18 <REP> d-------- c:\program files\Windows Live Safety Center
2008-10-31 20:00 . 2008-11-06 22:29 <REP> d-------- c:\program files\ArcSoft
2008-10-31 20:00 . 2008-10-31 20:00 <REP> d-------- c:\documents and settings\All Users\Application Data\ArcSoft
2008-10-31 19:14 . 2008-10-30 17:00 187,025 --------- c:\windows\hpoins21.dat.temp
2008-10-31 19:14 . 2008-02-13 02:15 7,262 --------- c:\windows\hpomdl21.dat.temp
2008-10-31 17:56 . 2008-10-31 17:56 <REP> d-------- C:\temp
2008-10-31 17:54 . 2008-10-31 18:00 <REP> d-------- c:\documents and settings\Propriétaire\.jpi_cache
2008-10-31 17:54 . 2008-10-31 18:00 <REP> d-------- c:\documents and settings\Propriétaire\.jpi_cache
2008-10-31 17:54 . 2008-10-31 17:54 <REP> d-------- c:\documents and settings\Propriétaire\.java
2008-10-31 17:54 . 2008-10-31 17:54 <REP> d-------- c:\documents and settings\Propriétaire\.java
2008-10-31 17:38 . 2008-10-31 17:38 <REP> d-------- c:\documents and settings\All Users\Application Data\RoboForm
2008-10-31 17:37 . 2008-10-31 17:37 <REP> d-------- c:\program files\Siber Systems
2008-10-31 07:28 . 2008-10-31 19:06 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Nero
2008-10-30 21:43 . 2008-10-30 21:43 4,767 --a------ c:\windows\Irremote.ini
2008-10-30 21:41 . 2008-10-30 21:41 <REP> d-------- c:\program files\Windows Sidebar
2008-10-30 21:21 . 2008-09-01 14:31 129,560 --a------ c:\windows\system32\drivers\InCDFs.sys
2008-10-30 21:21 . 2008-09-01 14:31 41,752 --a------ c:\windows\system32\drivers\InCDRm.sys
2008-10-30 21:21 . 2008-09-01 14:31 40,216 --a------ c:\windows\system32\drivers\InCDPass.sys
2008-10-30 21:21 . 2008-09-01 14:31 19,352 --a------ c:\windows\system32\drivers\InCDRec.sys
2008-10-30 21:20 . 2008-10-30 21:42 <REP> d-------- c:\program files\Nero
2008-10-30 21:20 . 2008-10-30 21:54 <REP> d-------- c:\program files\Fichiers communs\Nero
2008-10-30 21:20 . 2008-10-31 16:57 <REP> d-------- c:\documents and settings\All Users\Application Data\Nero
2008-10-30 21:15 . 2008-10-30 21:29 <REP> d-------- c:\windows\system32\XPSViewer
2008-10-30 21:14 . 2008-10-30 21:14 <REP> d-------- c:\program files\Reference Assemblies
2008-10-30 21:14 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
2008-10-30 21:02 . 2008-11-03 20:24 <REP> d-------- c:\program files\eMule
2008-10-30 20:32 . 2008-10-30 20:32 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Template
2008-10-30 18:18 . 2008-10-30 18:18 <REP> d-------- c:\program files\Windows Media Connect 2
2008-10-30 18:17 . 2008-10-30 18:17 <REP> d-------- c:\windows\system32\LogFiles
2008-10-30 18:17 . 2008-10-30 18:17 <REP> d-------- c:\windows\system32\drivers\UMDF
2008-10-30 17:36 . 2008-10-30 17:36 <REP> d-------- c:\documents and settings\All Users\Application Data\nView_Profiles
2008-10-30 17:12 . 2008-10-30 17:12 <REP> d-------- c:\program files\Roxio
2008-10-30 17:12 . 2008-10-30 17:12 <REP> d-------- c:\program files\Fichiers communs\SureThing Shared
2008-10-30 13:13 . 2007-11-01 04:28 970,752 -ra------ c:\windows\system32\hpotiop5.dll
2008-10-30 13:13 . 2007-11-01 04:28 729,088 -ra------ c:\windows\system32\hpowiax5.dll
2008-10-30 13:13 . 2007-11-01 04:28 364,544 -ra------ c:\windows\system32\hppldcoi.dll
2008-10-30 13:13 . 2007-11-01 04:28 309,760 -ra------ c:\windows\system32\difxapi.dll
2008-10-30 13:13 . 2007-11-01 04:28 303,104 -ra------ c:\windows\system32\hpovst12.dll
2008-10-30 13:10 . 2008-10-30 13:10 <REP> d-------- c:\program files\Hewlett-Packard
2008-10-30 13:10 . 2008-10-30 13:10 <REP> d-------- c:\documents and settings\All Users\Application Data\HP Product Assistant
2008-10-30 13:09 . 2008-10-30 13:09 <REP> d-------- c:\program files\Fichiers communs\HP
2008-10-30 13:07 . 2008-10-31 19:21 186,723 --a------ c:\windows\hpoins21.dat
2008-10-30 13:07 . 2008-02-13 02:15 7,262 --------- c:\windows\hpomdl21.dat
2008-10-30 12:52 . 2008-10-30 12:59 <REP> d-------- c:\windows\SxsCaPendDel
2008-10-30 00:01 . 2008-10-30 00:03 19,559 --------- c:\windows\hpqins13.dat.temp
2008-10-29 23:58 . 2008-10-30 17:24 19,546 --a------ c:\windows\hpqins13.dat
2008-10-29 21:14 . 2008-10-29 21:14 <REP> d-------- c:\program files\Micro Application
2008-10-29 21:13 . 2008-10-29 21:13 101 --a------ c:\windows\NAVIGMA.INI
2008-10-29 21:10 . 2008-11-07 21:09 44,653 --a------ c:\windows\system32\oodbs.lor
2008-10-29 21:08 . 2008-10-29 21:08 236 --a------ C:\sqmdata00.sqm
2008-10-29 21:08 . 2008-10-29 21:08 200 --a------ C:\sqmnoopt00.sqm
2008-10-29 20:53 . 2008-10-29 20:53 0 --a------ c:\windows\OODCNT.INI
2008-10-29 14:34 . 2008-10-29 14:34 <REP> d-------- c:\windows\system32\oodag
2008-10-29 12:41 . 2008-10-29 12:41 <REP> d-------- c:\program files\OO Software
2008-10-29 00:04 . 2008-10-29 00:04 <REP> d--hs---- C:\found.000
2008-10-28 22:23 . 2008-10-28 22:23 <REP> d-------- c:\documents and settings\All Users\Application Data\TomTom
2008-10-28 22:21 . 2008-10-28 22:21 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\TomTom
2008-10-28 22:13 . 2008-10-28 22:13 <REP> d-------- c:\program files\TomTom HOME 2
2008-10-28 21:39 . 2006-10-16 10:34 644,864 --a------ c:\windows\system32\drivers\phc710.sys
2008-10-28 21:39 . 2006-04-14 15:33 15,488 --a------ c:\windows\phc710.ini
2008-10-28 21:39 . 2004-02-27 17:36 13,023 --a------ c:\windows\phc710.src
2008-10-28 21:38 . 2008-11-01 13:35 <REP> d-------- c:\program files\Tomtomax Maxi-Box
2008-10-28 21:06 . 2008-10-28 21:06 98,304 --a------ c:\windows\system32\CmdLineExt.dll
2008-10-28 20:40 . 2008-10-28 20:47 43,520 --a------ c:\windows\system32\CmdLineExt03.dll
2008-10-28 20:39 . 2008-10-28 20:39 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Atari
2008-10-28 20:36 . 2008-10-28 20:36 <REP> d-------- c:\program files\Fichiers communs\PocketSoft
2008-10-28 20:36 . 2002-02-27 18:50 197,120 --a------ c:\windows\patchw32.dll
2008-10-28 20:34 . 2008-10-28 20:34 <REP> d-------- c:\program files\Atari
2008-10-28 20:30 . 2008-10-28 20:30 <REP> d-------- c:\program files\DAEMON Tools Lite
2008-10-28 20:27 . 2008-10-28 20:27 717,296 --a------ c:\windows\system32\drivers\sptd.sys
2008-10-28 20:26 . 2008-10-28 20:26 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\DAEMON Tools
2008-10-28 20:00 . 2008-10-28 20:00 <REP> d-------- c:\program files\MSXML 4.0
2008-10-28 19:59 . 2008-11-03 19:45 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\ArcSoft
2008-10-28 19:57 . 2008-10-31 20:00 <REP> d-------- c:\program files\Fichiers communs\ArcSoft
2008-10-28 19:57 . 2004-12-07 10:11 258,352 --a------ c:\windows\system32\unicows.dll
2008-10-28 19:57 . 1995-08-01 04:44 212,480 --a------ c:\windows\PCDLIB32.DLL
2008-10-28 19:57 . 2008-04-13 19:45 60,032 --a------ c:\windows\system32\drivers\USBAUDIO.sys
2008-10-28 19:57 . 2008-04-13 19:45 60,032 --a--c--- c:\windows\system32\dllcache\usbaudio.sys
2008-10-28 19:27 . 2008-10-28 21:39 <REP> d-------- c:\program files\Philips
2008-10-28 19:27 . 2006-10-16 10:18 344,064 --------- c:\windows\vphc710.exe
2008-10-28 19:27 . 2006-10-16 10:18 344,064 --a------ c:\windows\system32\vphc710.exe
2008-10-28 19:27 . 2006-08-16 09:50 118,784 --a------ c:\windows\system32\vphc710.dll
2008-10-28 19:27 . 2004-02-16 13:59 61,440 --a------ c:\windows\system32\cphc710.dll
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-06 21:29 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-05 17:05 --------- d---a-w c:\program files\Symantec
2008-11-05 17:05 --------- d---a-w c:\program files\Fichiers communs\Symantec Shared
2008-11-05 17:05 --------- d---a-w c:\documents and settings\All Users\Application Data\Symantec
2008-11-04 18:44 278,728 ----a-w c:\windows\system32\drivers\atksgt.sys
2008-11-04 18:44 25,416 ----a-w c:\windows\system32\drivers\lirsgt.sys
2008-10-28 20:52 --------- d---a-w c:\program files\Fichiers communs\Adobe
2008-10-28 17:57 --------- d---a-w c:\program files\Microsoft Works
2008-10-27 23:59 --------- d---a-w c:\program files\Fichiers communs\InstallShield
2008-10-27 23:06 --------- d---a-w c:\program files\Easy Internet signup
2008-10-27 22:35 --------- d---a-w c:\program files\InterVideo
2008-09-24 09:40 4,122,368 ----a-r c:\windows\system32\drivers\alcxwdm.sys
2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
2008-09-08 23:03 51,712 ----a-w c:\windows\system32\sirenacm.dll
2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys
2008-08-20 09:54 287,256 ----a-r c:\windows\system32\AbaleZip.dll
2008-08-20 05:10 670,208 ----a-w c:\windows\system32\wininet.dll
2008-08-14 13:23 2,191,232 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 13:23 2,068,096 ----a-w c:\windows\system32\ntkrnlpa.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-10-02 16:44 325000 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-02 325000]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt]
@="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}"
[HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}]
2008-09-01 14:31 98328 --a------ c:\program files\Nero\Nero 9\InCD\NBHshx.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\HOMERunner.exe" [2008-09-26 206184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2003-04-07 114688]
"StorageGuard"="c:\program files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-02-13 155648]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2002-09-14 212992]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072]
"phc710"="c:\windows\vphc710.exe" [2006-10-16 344064]
"OODefragTray"="c:\windows\system32\oodtray.exe" [2007-06-28 2512128]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"InCD"="c:\program files\Nero\Nero 9\InCD\InCD.exe" [2008-09-01 1111064]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2008-11-02 2780816]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]
"VTTimer"="VTTimer.exe" [2003-05-08 c:\windows\system32\VTTimer.exe]
"AlcxMonitor"="ALCXMNTR.EXE" [2003-04-04 c:\windows\ALCXMNTR.EXE]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
mod_sm.lnk - c:\hp\bin\cloaker.exe [1999-11-07 27136]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-11-05 4708864]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
TrayMin710.exe.lnk - c:\program files\Philips\Philips SPC710NC Webcam\TrayMin710.exe [2008-10-28 278528]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^DTV Remote Control.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\DTV Remote Control.lnk
backup=c:\windows\pss\DTV Remote Control.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
--a------ 2008-02-22 10:33 72192 c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-08-08 13:11 490952 c:\program files\DAEMON Tools Lite\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBHGui]
--a------ 2008-09-01 14:31 2079256 c:\program files\Nero\Nero 9\InCD\NBHGui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm]
--a------ 2008-10-31 17:37 160592 c:\program files\Siber Systems\AI RoboForm\robotaskbaricon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-11-05 18:29 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--a------ 2007-04-16 15:28 577536 c:\windows\soundman.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 ACDaemon;ArcSoft Connect Daemon;c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2008-02-22 104960]
R2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2008-10-02 460168]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 CX2388X;ADS 2388x Video Capture;c:\windows\system32\drivers\cx88cap.sys [2005-05-24 160512]
R2 CX88TS;ADS DVBT 2388x Transport Stream Capture;c:\windows\system32\drivers\cx88ts.sys [2005-05-24 13824]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-08-29 935208]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 9\InCD\NBHRegInCDSrv.exe [2008-09-01 108568]
R3 CXBDATUNE;ADS DVB BDA Tuner/Demod;c:\windows\system32\drivers\cxBDAtun.sys [2005-05-24 108544]
R3 phc710;USB PC Camera (SPC710NC);c:\windows\system32\DRIVERS\phc710.sys [2006-10-16 644864]
R3 usbscan;Pilote de scanneur USB;c:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB;c:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-11-02 195752]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7053db48-a536-11dd-8d27-000c6ee1965c}]
\Shell\AutoRun\command - J:\InstallTomTomHOME.exe
*Newly Created Service* - PROCEXP90
.
- - - - ORPHELINS SUPPRIMES - - - -
HKCU-Run-loader.exe - c:\windows\system32\loader.exe
HKCU-Run-msiexec.exe - msiconf.exe
HKLM-Run-loader.exe - c:\windows\system32\loader.exe
.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\n24masw5.default\
FF -: plugin - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\n24masw5.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF -: plugin - c:\program files\Adobe\Acrobat 5.0\Reader\browser\nppdf32.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava11.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava12.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava13.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJava32.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPJPI141_02.dll
FF -: plugin - c:\program files\Java\j2re1.4.1_02\bin\NPOJI610.dll
FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-07 22:23:11
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
**************************************************************************
.
Heure de fin: 2008-11-07 22:25:41
ComboFix-quarantined-files.txt 2008-11-07 21:24:39
Avant-CF: 28 864 126 976 octets libres
Après-CF: 28,907,184,128 octets libres
295 --- E O F --- 2008-11-01 03:01:59
Re,
Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.
Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
AIDE : Redémarrer en mode sans échec
Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
Afin de lancer la recherche, clic sur"Rechercher".
Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
-- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
-- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
[#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]
AIDE : Tuto en images sur MBAM
Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.
Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
AIDE : Redémarrer en mode sans échec
-- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
-- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
[#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]
AIDE : Tuto en images sur MBAM
voici le rapport et aucun element detecté merci a toi
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1374
Windows 5.1.2600 Service Pack 3
08/11/2008 21:46:43
mbam-log-2008-11-08 (21-46-43).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 142376
Temps écoulé: 55 minute(s), 38 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Il y a des restes.
Télécharge Toolbar-S&D ([#ff0000]Team IDN[/#ff]) sur ton Bureau.
Lance l'installation du programme en exécutant le fichier téléchargé.
Double-clique maintenant sur le raccourci de Toolbar-S&D.
Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
Poste le rapport généré. (C:\TB.txt)
Télécharge Toolbar-S&D ([#ff0000]Team IDN[/#ff]) sur ton Bureau.
Lassé par la pub ? Créez un compte
- Contenus similaires :
- ForumProbleme norton antivirus
- solutionsProbleme antivirus xp 2008
- ForumProbleme avast antivirus
- ForumProbleme antivirus software alert
- ForumNorton antivirus,probleme a l'installation
- ForumProbleme virus antivirus
- ForumProbleme d'installation antivirus firewall
- ForumProbleme avec kaspersky antivirus 2010
- ForumProbleme installation 2 antivirus
- ForumNorton antivirus probleme
- Voir plus
