Bonjour
mon pc est infectée par un adware style navipromo qui se nomme IE
antivirus impossible d'ouvrir une fenêtre sur IE sans osn apparition
agressive et musclée qui se solde souvent par un plantage complet d'ie
même topo pour explorer sur le pc .
j'ai essayé navilog mais il ne le détecte pas
sur ci joint voici la capture d'écran du problème
http://www.cijoint.fr/cjlink.php?file=cj200807/cijaC8FhBN.jpg.
je viens de télécharger asquared mais si quelqu'un a une idée pour
éradiquer le problème je suis preneur
merci
Y Pl
Bonjour
mon pc est infectée par un adware style navipromo qui se nomme IE
antivirus impossible d'ouvrir une fenêtre sur IE sans osn apparition
agressive et musclée qui se solde souvent par un plantage complet d'ie
même topo pour explorer sur le pc .
j'ai essayé navilog mais il ne le détecte pas
sur ci joint voici la capture d'écran du problème
http://www.cijoint.fr/cjlink.php?file=cj200807/cijaC8FhBN.jpg.
je viens de télécharger asquared mais si quelqu'un a une idée pour
éradiquer le problème je suis preneur
merci
Y Pl
Bonjour
mon pc est infectée par un adware style navipromo qui se nomme IE
antivirus impossible d'ouvrir une fenêtre sur IE sans osn apparition
agressive et musclée qui se solde souvent par un plantage complet d'ie
même topo pour explorer sur le pc .
j'ai essayé navilog mais il ne le détecte pas
sur ci joint voici la capture d'écran du problème
http://www.cijoint.fr/cjlink.php?file=cj200807/cijaC8FhBN.jpg.
je viens de télécharger asquared mais si quelqu'un a une idée pour
éradiquer le problème je suis preneur
merci
Y Pl
bonjour
ne surtout pas télécharcher lelogiciel proposé...
faire un hijackthis
et poster le log ici
boris ryser
bonjour
ne surtout pas télécharcher lelogiciel proposé...
faire un hijackthis
et poster le log ici
boris ryser
bonjour
ne surtout pas télécharcher lelogiciel proposé...
faire un hijackthis
et poster le log ici
boris ryser
re
question idiote hijackthis est un anti spyware
j'ai déjà spyremover sur ma machine
voici le rapport de cemidi
--- Report generated: 2008-07-14 12:47 ---
HitsLink: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
et celui d'hier soir
--- Report generated: 2008-07-13 23:10 ---
Comet Cursors: Interface (_IBhoEvents) (Registry key, fixed)
HKEY_LOCAL_MACHINESoftwareClassesInterface{4937D5D1-2039-409A-BD83-FEC9B39B2356}
Avenue A, Inc.: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Advertising.com: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
BlueStreak: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
re
question idiote hijackthis est un anti spyware
j'ai déjà spyremover sur ma machine
voici le rapport de cemidi
--- Report generated: 2008-07-14 12:47 ---
HitsLink: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
et celui d'hier soir
--- Report generated: 2008-07-13 23:10 ---
Comet Cursors: Interface (_IBhoEvents) (Registry key, fixed)
HKEY_LOCAL_MACHINESoftwareClassesInterface{4937D5D1-2039-409A-BD83-FEC9B39B2356}
Avenue A, Inc.: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Advertising.com: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
BlueStreak: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
re
question idiote hijackthis est un anti spyware
j'ai déjà spyremover sur ma machine
voici le rapport de cemidi
--- Report generated: 2008-07-14 12:47 ---
HitsLink: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
et celui d'hier soir
--- Report generated: 2008-07-13 23:10 ---
Comet Cursors: Interface (_IBhoEvents) (Registry key, fixed)
HKEY_LOCAL_MACHINESoftwareClassesInterface{4937D5D1-2039-409A-BD83-FEC9B39B2356}
Avenue A, Inc.: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Advertising.com: Tracking cookie (Internet Explorer: Administrateur)
(Cookie, fixed)
Tradedoubler: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
BlueStreak: Tracking cookie (Internet Explorer: Administrateur) (Cookie,
fixed)
--- SpyRemover version: 2.23 (build: 20041027) ---
2004-05-19 blindman.exe (1.0.0.0)
2004-12-16 Remover.exe (2.0.0.0)
2004-11-02 TeaTimer.exe (1.3.0.14)
2004-04-26 unins000.exe (51.13.0.0)
2004-05-19 Update.exe (1.3.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2004-05-19 borlndmm.dll (7.0.4.453)
2004-05-19 delphimm.dll (7.0.4.453)
2004-05-19 Tools.dll (2.0.0.0)
2004-05-19 UnzDll.dll (1.73.1.1)
2004-05-19 ZipDll.dll (1.73.2.0)
2008-02-13 IncludesCookies.sbi (*)
2006-10-06 IncludesDialer.sbi (*)
2007-06-26 IncludesDialerC.sbi (*)
2006-10-06 IncludesHijackers.sbi (*)
2007-04-25 IncludesHijackersC.sbi (*)
2006-10-06 IncludesKeyloggers.sbi (*)
2007-04-25 IncludesKeyloggersC.sbi (*)
2004-05-04 IncludesLSP.sbi (*)
2006-10-06 IncludesMalware.sbi (*)
2007-04-25 IncludesMalwareC.sbi (*)
2006-10-06 IncludesPUPS.sbi (*)
2007-04-25 IncludesPUPSC.sbi (*)
2007-04-25 IncludesRevision.sbi (*)
2006-10-06 IncludesSecurity.sbi (*)
2007-04-25 IncludesSecurityC.sbi (*)
2006-10-06 IncludesSpybots.sbi (*)
2008-02-13 IncludesSpybotsC.sbi (*)
2006-10-06 IncludesTrojans.sbi (*)
2008-02-13 IncludesTrojansC.sbi (*)
ok
le voilà
Logfile of HijackThis v1.99.1
Scan saved at 18:10:17, on 14/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMultiResMultiRes.exe
C:Program FilesLogitechiTouchiTouch.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesEsetnod32kui.exe
C:WINDOWSsystem32LVCOMSX.EXE
C:Program FilesLogitechVideoLogiTray.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSALCMTR.EXE
C:Program FilesLogMeInx86LogMeInSystray.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesJavajre1.6.0_07binjusched.exe
C:Program FilesAdobeAcrobat 8.0AcrobatAcrotray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMacrogamingSweetIMSweetIM.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesGoogleGoogle UpdaterGoogleUpdater.exe
C:Program FilesLogitechVideoFxSvr2.exe
C:Program Filesa-squared Freea2service.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32driversCDAC11BA.EXE
C:WINDOWSsystem32cisvc.exe
C:WINDOWSsystem32CTSvcCDA.EXE
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesEsetnod32krn.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32MsPMSPSv.exe
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesFichiers communsMicrosoft SharedWindows
LiveWLLoginProxy.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesIEProMiniDM.exe
C:PROGRA~1WINZIPwinzip32.exe
C:Documents and SettingsAdministrateurLocal
SettingsTempHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page > http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet
ExplorerMain,Default_Search_URL > http://go.microsoft.com/fwlink/?LinkIdT896 R1 -
HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page > http://go.microsoft.com/fwlink/?LinkIdT896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page > http://fr.msn.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant
= R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title > Windows Internet Explorer optimisé pour MSN
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet
Settings,ProxyOverride = localhost;*.local
R0 - HKCUSoftwareMicrosoftInternet
ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:Program
FilesIEProiepro.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesFichiers
communsAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:Program FilesJavajre1.6.0_07binssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no
file) O2 - BHO: IE.Filter - {8B2AE9C0-1555-4C92-905A-531532F15698} -
C:WINDOWSsystem32intefltr.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers
communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper -
{AE7CD045-E861-484f-8273-0445EE161910} - C:Program
FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program
FilesGoogleGoogleToolbarNotifier2.1.1119.1736swg.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} -
C:Program FilesXiNetTransport 2NTIEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [MultiRes] C:Program FilesMultiResMultiRes.exe
O4 - HKLM..Run: [zBrowser Launcher] C:Program
FilesLogitechiTouchiTouch.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software
UpdateHPWuSchd2.exe
O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe"
/WAITSERVICE
O4 - HKLM..Run: [RemoveWGA] C:Documents and
SettingsAdministrateurBureauRemoveWGA.exe -startup
O4 - HKLM..Run: [LVCOMSX] C:WINDOWSsystem32LVCOMSX.EXE
O4 - HKLM..Run: [LogitechVideoRepair] C:Program
FilesLogitechVideoISStart.exe
O4 - HKLM..Run: [LogitechVideoTray] C:Program
FilesLogitechVideoLogiTray.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE
C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE
C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [LogMeIn GUI] "C:Program
FilesLogMeInx86LogMeInSystray.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program
FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program
FilesJavajre1.6.0_07binjusched.exe"
O4 - HKLM..Run: [Acrobat Assistant 8.0] "C:Program
FilesAdobeAcrobat 8.0AcrobatAcrotray.exe"
O4 - HKLM..Run: [Adobe_ID0EYTHM]
C:PROGRA~1FICHIE~1AdobeADOBEV~1ServerbinVERSIO~2.EXE
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [updateMgr] C:Program FilesAdobeAcrobat
7.0AcrobatAdobeUpdateManager.exe AcPro7_0_5 -reboot 1
O4 - HKCU..Run: [SweetIM] C:Program
FilesMacrogamingSweetIMSweetIM.exe O4 - Global Startup: Adobe
Reader Synchronizer.lnk = C:Program FilesAdobeAcrobat
8.0AcrobatAdobeCollabSync.exe O4 - Global Startup: Lancement rapide d'Adobe
Acrobat.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:Program
FilesGoogleGoogle UpdaterGoogleUpdater.exe
O8 - Extra context menu item: &Télécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddLink.html
O8 - Extra context menu item: Ajouter au fichier PDF existant -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu
item: Convertir la cible du lien en Adobe PDF
- res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF
existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en
fichier Adobe PDF - res://C:Program FilesAdobeAcrobat
7.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddList.html
O9 - Extra button: IE7Pro Preferences -
{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences
- {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll O9 - Extra 'Tools' menuitem: Console Java
(Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263}
- C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583}
- %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network
Diagnosticxpnetdiag.exe (file missing)
O10 - Unknown file in Winsock LSP: c:program
filesbonjourmdnsnsp.dll O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj
Class) - http://m6video.m6.fr/1click/install/files/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0
Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags
Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo
Uploader 4 Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader3.cab O16 -
DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader
Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader.cab O16 -
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1138802973890
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
http://download.divx.com/player/DivXBrowserPlugin.cab?s6 O16 - DPF:
{6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection
Class) -
http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader
Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)
-
http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer
Activex Control) - https://secure.logmein.com/activex/RACtrl.cab O17 -
HKLMSystemCCSServicesTcpip..{787AA58B-BA30-4674-96CE-4B3586458CDB}:
NameServer = 80.10.246.130,80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O20 - Winlogon Notify: LMIinit - C:WINDOWSSYSTEM32LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
- C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH -
C:Program Filesa-squared Freea2service.exe
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3)
- Unknown owner - C:Program FilesFichiers communsAdobeAdobe
Version Cue CS3ServerbinVersionCueCS3.exe" -win32service (file
missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
(Bonjour Service) - Apple Computer, Inc. - C:Program
FilesBonjourmDNSResponder.exe O23 - Service: C-DillaCdaC11BA -
Macrovision - C:WINDOWSsystem32driversCDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative
Technology Ltd - C:WINDOWSsystem32CTSvcCDA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. -
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program
FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:Program FilesFichiers
communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:Program
FilesiPodbiniPodService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc.
- C:Program FilesLogMeInx86RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:Program
FilesLogMeInx86LogMeIn.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program
FilesEsetnod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP -
C:WINDOWSsystem32HPZipm12.exe
merci
yann
ok
le voilà
Logfile of HijackThis v1.99.1
Scan saved at 18:10:17, on 14/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMultiResMultiRes.exe
C:Program FilesLogitechiTouchiTouch.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesEsetnod32kui.exe
C:WINDOWSsystem32LVCOMSX.EXE
C:Program FilesLogitechVideoLogiTray.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSALCMTR.EXE
C:Program FilesLogMeInx86LogMeInSystray.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesJavajre1.6.0_07binjusched.exe
C:Program FilesAdobeAcrobat 8.0AcrobatAcrotray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMacrogamingSweetIMSweetIM.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesGoogleGoogle UpdaterGoogleUpdater.exe
C:Program FilesLogitechVideoFxSvr2.exe
C:Program Filesa-squared Freea2service.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32driversCDAC11BA.EXE
C:WINDOWSsystem32cisvc.exe
C:WINDOWSsystem32CTSvcCDA.EXE
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesEsetnod32krn.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32MsPMSPSv.exe
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesFichiers communsMicrosoft SharedWindows
LiveWLLoginProxy.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesIEProMiniDM.exe
C:PROGRA~1WINZIPwinzip32.exe
C:Documents and SettingsAdministrateurLocal
SettingsTempHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page > http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet
ExplorerMain,Default_Search_URL > http://go.microsoft.com/fwlink/?LinkIdT896 R1 -
HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page > http://go.microsoft.com/fwlink/?LinkIdT896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page > http://fr.msn.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant
= R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title > Windows Internet Explorer optimisé pour MSN
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet
Settings,ProxyOverride = localhost;*.local
R0 - HKCUSoftwareMicrosoftInternet
ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:Program
FilesIEProiepro.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesFichiers
communsAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:Program FilesJavajre1.6.0_07binssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no
file) O2 - BHO: IE.Filter - {8B2AE9C0-1555-4C92-905A-531532F15698} -
C:WINDOWSsystem32intefltr.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers
communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper -
{AE7CD045-E861-484f-8273-0445EE161910} - C:Program
FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program
FilesGoogleGoogleToolbarNotifier2.1.1119.1736swg.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} -
C:Program FilesXiNetTransport 2NTIEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [MultiRes] C:Program FilesMultiResMultiRes.exe
O4 - HKLM..Run: [zBrowser Launcher] C:Program
FilesLogitechiTouchiTouch.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software
UpdateHPWuSchd2.exe
O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe"
/WAITSERVICE
O4 - HKLM..Run: [RemoveWGA] C:Documents and
SettingsAdministrateurBureauRemoveWGA.exe -startup
O4 - HKLM..Run: [LVCOMSX] C:WINDOWSsystem32LVCOMSX.EXE
O4 - HKLM..Run: [LogitechVideoRepair] C:Program
FilesLogitechVideoISStart.exe
O4 - HKLM..Run: [LogitechVideoTray] C:Program
FilesLogitechVideoLogiTray.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE
C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE
C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [LogMeIn GUI] "C:Program
FilesLogMeInx86LogMeInSystray.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program
FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program
FilesJavajre1.6.0_07binjusched.exe"
O4 - HKLM..Run: [Acrobat Assistant 8.0] "C:Program
FilesAdobeAcrobat 8.0AcrobatAcrotray.exe"
O4 - HKLM..Run: [Adobe_ID0EYTHM]
C:PROGRA~1FICHIE~1AdobeADOBEV~1ServerbinVERSIO~2.EXE
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [updateMgr] C:Program FilesAdobeAcrobat
7.0AcrobatAdobeUpdateManager.exe AcPro7_0_5 -reboot 1
O4 - HKCU..Run: [SweetIM] C:Program
FilesMacrogamingSweetIMSweetIM.exe O4 - Global Startup: Adobe
Reader Synchronizer.lnk = C:Program FilesAdobeAcrobat
8.0AcrobatAdobeCollabSync.exe O4 - Global Startup: Lancement rapide d'Adobe
Acrobat.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:Program
FilesGoogleGoogle UpdaterGoogleUpdater.exe
O8 - Extra context menu item: &Télécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddLink.html
O8 - Extra context menu item: Ajouter au fichier PDF existant -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu
item: Convertir la cible du lien en Adobe PDF
- res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF
existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en
fichier Adobe PDF - res://C:Program FilesAdobeAcrobat
7.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddList.html
O9 - Extra button: IE7Pro Preferences -
{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences
- {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll O9 - Extra 'Tools' menuitem: Console Java
(Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263}
- C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583}
- %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network
Diagnosticxpnetdiag.exe (file missing)
O10 - Unknown file in Winsock LSP: c:program
filesbonjourmdnsnsp.dll O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj
Class) - http://m6video.m6.fr/1click/install/files/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0
Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags
Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo
Uploader 4 Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader3.cab O16 -
DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader
Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader.cab O16 -
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1138802973890
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
http://download.divx.com/player/DivXBrowserPlugin.cab?s6 O16 - DPF:
{6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection
Class) -
http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader
Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)
-
http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer
Activex Control) - https://secure.logmein.com/activex/RACtrl.cab O17 -
HKLMSystemCCSServicesTcpip..{787AA58B-BA30-4674-96CE-4B3586458CDB}:
NameServer = 80.10.246.130,80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O20 - Winlogon Notify: LMIinit - C:WINDOWSSYSTEM32LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
- C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH -
C:Program Filesa-squared Freea2service.exe
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3)
- Unknown owner - C:Program FilesFichiers communsAdobeAdobe
Version Cue CS3ServerbinVersionCueCS3.exe" -win32service (file
missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
(Bonjour Service) - Apple Computer, Inc. - C:Program
FilesBonjourmDNSResponder.exe O23 - Service: C-DillaCdaC11BA -
Macrovision - C:WINDOWSsystem32driversCDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative
Technology Ltd - C:WINDOWSsystem32CTSvcCDA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. -
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program
FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:Program FilesFichiers
communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:Program
FilesiPodbiniPodService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc.
- C:Program FilesLogMeInx86RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:Program
FilesLogMeInx86LogMeIn.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program
FilesEsetnod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP -
C:WINDOWSsystem32HPZipm12.exe
merci
yann
ok
le voilà
Logfile of HijackThis v1.99.1
Scan saved at 18:10:17, on 14/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesMultiResMultiRes.exe
C:Program FilesLogitechiTouchiTouch.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesEsetnod32kui.exe
C:WINDOWSsystem32LVCOMSX.EXE
C:Program FilesLogitechVideoLogiTray.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSALCMTR.EXE
C:Program FilesLogMeInx86LogMeInSystray.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesJavajre1.6.0_07binjusched.exe
C:Program FilesAdobeAcrobat 8.0AcrobatAcrotray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMacrogamingSweetIMSweetIM.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesGoogleGoogle UpdaterGoogleUpdater.exe
C:Program FilesLogitechVideoFxSvr2.exe
C:Program Filesa-squared Freea2service.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32driversCDAC11BA.EXE
C:WINDOWSsystem32cisvc.exe
C:WINDOWSsystem32CTSvcCDA.EXE
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesLogMeInx86RaMaint.exe
C:Program FilesLogMeInx86LogMeIn.exe
C:Program FilesLogMeInx86LMIGuardian.exe
C:Program FilesEsetnod32krn.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32MsPMSPSv.exe
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesFichiers communsMicrosoft SharedWindows
LiveWLLoginProxy.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesIEProMiniDM.exe
C:PROGRA~1WINZIPwinzip32.exe
C:Documents and SettingsAdministrateurLocal
SettingsTempHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page > http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL > http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet
ExplorerMain,Default_Search_URL > http://go.microsoft.com/fwlink/?LinkIdT896 R1 -
HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page > http://go.microsoft.com/fwlink/?LinkIdT896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page > http://fr.msn.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant
= R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title > Windows Internet Explorer optimisé pour MSN
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet
Settings,ProxyOverride = localhost;*.local
R0 - HKCUSoftwareMicrosoftInternet
ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:Program
FilesIEProiepro.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesFichiers
communsAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:Program FilesJavajre1.6.0_07binssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no
file) O2 - BHO: IE.Filter - {8B2AE9C0-1555-4C92-905A-531532F15698} -
C:WINDOWSsystem32intefltr.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers
communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper -
{AE7CD045-E861-484f-8273-0445EE161910} - C:Program
FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program
FilesGoogleGoogleToolbarNotifier2.1.1119.1736swg.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} -
C:Program FilesXiNetTransport 2NTIEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
C:Program FilesAdobeAcrobat 8.0AcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [MultiRes] C:Program FilesMultiResMultiRes.exe
O4 - HKLM..Run: [zBrowser Launcher] C:Program
FilesLogitechiTouchiTouch.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software
UpdateHPWuSchd2.exe
O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe"
/WAITSERVICE
O4 - HKLM..Run: [RemoveWGA] C:Documents and
SettingsAdministrateurBureauRemoveWGA.exe -startup
O4 - HKLM..Run: [LVCOMSX] C:WINDOWSsystem32LVCOMSX.EXE
O4 - HKLM..Run: [LogitechVideoRepair] C:Program
FilesLogitechVideoISStart.exe
O4 - HKLM..Run: [LogitechVideoTray] C:Program
FilesLogitechVideoLogiTray.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE
C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE
C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [LogMeIn GUI] "C:Program
FilesLogMeInx86LogMeInSystray.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program
FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program
FilesJavajre1.6.0_07binjusched.exe"
O4 - HKLM..Run: [Acrobat Assistant 8.0] "C:Program
FilesAdobeAcrobat 8.0AcrobatAcrotray.exe"
O4 - HKLM..Run: [Adobe_ID0EYTHM]
C:PROGRA~1FICHIE~1AdobeADOBEV~1ServerbinVERSIO~2.EXE
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [updateMgr] C:Program FilesAdobeAcrobat
7.0AcrobatAdobeUpdateManager.exe AcPro7_0_5 -reboot 1
O4 - HKCU..Run: [SweetIM] C:Program
FilesMacrogamingSweetIMSweetIM.exe O4 - Global Startup: Adobe
Reader Synchronizer.lnk = C:Program FilesAdobeAcrobat
8.0AcrobatAdobeCollabSync.exe O4 - Global Startup: Lancement rapide d'Adobe
Acrobat.lnk = ?
O4 - Global Startup: Outil de mise à jour Google.lnk = C:Program
FilesGoogleGoogle UpdaterGoogleUpdater.exe
O8 - Extra context menu item: &Télécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddLink.html
O8 - Extra context menu item: Ajouter au fichier PDF existant -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu
item: Convertir la cible du lien en Adobe PDF
- res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF -
res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF
existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en
fichier Adobe PDF - res://C:Program FilesAdobeAcrobat
7.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un
fichier PDF existant - res://C:Program FilesAdobeAcrobat
8.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport -
C:Program FilesXiNetTransport 2NTAddList.html
O9 - Extra button: IE7Pro Preferences -
{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences
- {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program
FilesIEProiepro.dll O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll O9 - Extra 'Tools' menuitem: Console Java
(Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.6.0_07binssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263}
- C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583}
- %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network
Diagnosticxpnetdiag.exe (file missing)
O10 - Unknown file in Winsock LSP: c:program
filesbonjourmdnsnsp.dll O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj
Class) - http://m6video.m6.fr/1click/install/files/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0
Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags
Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo
Uploader 4 Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader3.cab O16 -
DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader
Control) -
http://upload.facebook.com/controls/FacebookPhotoUploader.cab O16 -
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1138802973890
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
http://download.divx.com/player/DivXBrowserPlugin.cab?s6 O16 - DPF:
{6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection
Class) -
http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader
Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)
-
http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader
Class) -
http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer
Activex Control) - https://secure.logmein.com/activex/RACtrl.cab O17 -
HKLMSystemCCSServicesTcpip..{787AA58B-BA30-4674-96CE-4B3586458CDB}:
NameServer = 80.10.246.130,80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
C:PROGRA~1WI1F86~1MESSEN~1MSGRAP~1.DLL
O20 - Winlogon Notify: LMIinit - C:WINDOWSSYSTEM32LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
- C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH -
C:Program Filesa-squared Freea2service.exe
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3)
- Unknown owner - C:Program FilesFichiers communsAdobeAdobe
Version Cue CS3ServerbinVersionCueCS3.exe" -win32service (file
missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
(Bonjour Service) - Apple Computer, Inc. - C:Program
FilesBonjourmDNSResponder.exe O23 - Service: C-DillaCdaC11BA -
Macrovision - C:WINDOWSsystem32driversCDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative
Technology Ltd - C:WINDOWSsystem32CTSvcCDA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. -
C:Program FilesFichiers communsMacrovision SharedFLEXnet
PublisherFNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program
FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:Program FilesFichiers
communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:Program
FilesiPodbiniPodService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc.
- C:Program FilesLogMeInx86RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:Program
FilesLogMeInx86LogMeIn.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program
FilesEsetnod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP -
C:WINDOWSsystem32HPZipm12.exe
merci
yann
faire un hijackthis
et poster le log ici
faire un hijackthis
et poster le log ici
faire un hijackthis
et poster le log ici
Si je fais un copier coller de votre log ici :
http://www.hijackthis.de/fr
Je ne vois qu'un programme qui pourrait être dangereux : Nasty.
Il y a par contre beaucoup de choses superflues ...
Si je fais un copier coller de votre log ici :
http://www.hijackthis.de/fr
Je ne vois qu'un programme qui pourrait être dangereux : Nasty.
Il y a par contre beaucoup de choses superflues ...
Si je fais un copier coller de votre log ici :
http://www.hijackthis.de/fr
Je ne vois qu'un programme qui pourrait être dangereux : Nasty.
Il y a par contre beaucoup de choses superflues ...
merci pour l'aide et le temps passé
j'en ai profité pour faire un peu de nettoyage (un peu seulement)
le fichier nasty est alcmtr.exe offert par realtek!!?
d'autre part le responsable de ce désordre est un crack pour un jeu chargé
par mon p.. d'ado !!!
a squared a fini par réveillé nod32 qui s'est enfin mis au boulot.
merci aussi pour le lien hijackthis
merci pour l'aide et le temps passé
j'en ai profité pour faire un peu de nettoyage (un peu seulement)
le fichier nasty est alcmtr.exe offert par realtek!!?
d'autre part le responsable de ce désordre est un crack pour un jeu chargé
par mon p.. d'ado !!!
a squared a fini par réveillé nod32 qui s'est enfin mis au boulot.
merci aussi pour le lien hijackthis
merci pour l'aide et le temps passé
j'en ai profité pour faire un peu de nettoyage (un peu seulement)
le fichier nasty est alcmtr.exe offert par realtek!!?
d'autre part le responsable de ce désordre est un crack pour un jeu chargé
par mon p.. d'ado !!!
a squared a fini par réveillé nod32 qui s'est enfin mis au boulot.
merci aussi pour le lien hijackthis