Navigateur opera et tout ce qui va avec ! sos !

Logiciel & apps Logiciel Général
1

bonjour !
je passe à opera, mozilla bugue ! comment je fais pour qu’opéra aille plus vite ? Je vous assure qu’il rame ! et quand j’ouvre un nouvel onglet, il m’ouvre speed dial ! je voudrais qu’il m’ouvre une page avec google ! une idée ?
Merci à tous !

2

Salut,

Si ça se trouve ton système est infecter par des virus est autres spywares.

Tu peux faire une analyse en ligne : webscanner.kaspersky.fr…

3

bonsoir Fais ceci
www.clubic.com…

4

je comprends rien, mais j’ai fais ce que tu as dit ! maintenant, je colle le rapport ici ou dans un nouveau topic ? Merci de ton aide !

5

Colle les rapports ici, dans ce topic, pour centraliser.

6

ok, alors voilà, dans l’ordre, le hijackthis1 puis 2 et le mbam :
moi je pige rien du tout ! merci de votre aide à tous ! bises

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:18:17, on 02/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe[/b][/b]
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
C:\Program Files\eMule\emule.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\scan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = search.msn.fr…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mystart.incredimail.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ie.redirect.hp.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ie.redirect.hp.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM…\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM…\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM…\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM…\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe”
O4 - HKLM…\Run: [SmartRAM] C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe /m
O4 - HKLM…\Run: [Advanced WindowsCare V2 Personal] “C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe” /startup
O4 - HKLM…\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
O4 - HKLM…\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKCU…\Run: [msnmsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKCU…\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - .DEFAULT User Startup: AutoTBar.exe (User ‘Default user’)
O8 - Extra context menu item: Add to Windows &Live Favorites - favorites.live.com…
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - cdn.scan.onecare.live.com…
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - www.update.microsoft.com…
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe

–
End of file - 7196 bytes

le hijackthis2 :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:06:32, on 02/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\eMule\emule.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Propriétaire\Bureau\scan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = search.msn.fr…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mystart.incredimail.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = ie.redirect.hp.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ie.redirect.hp.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ie.redirect.hp.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM…\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM…\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM…\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM…\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe”
O4 - HKLM…\Run: [SmartRAM] C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe /m
O4 - HKLM…\Run: [Advanced WindowsCare V2 Personal] “C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe” /startup
O4 - HKLM…\Run: [AutoTBar] c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE
O4 - HKLM…\Run: [avgnt] “C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe” /min
O4 - HKCU…\Run: [msnmsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKCU…\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - .DEFAULT User Startup: AutoTBar.exe (User ‘Default user’)
O8 - Extra context menu item: Add to Windows &Live Favorites - favorites.live.com…
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - cdn.scan.onecare.live.com…
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - www.update.microsoft.com…
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

–
End of file - 7383 bytes

enfin le mbam:
Malwarebytes’ Anti-Malware 1.25
Version de la base de données: 1103
Windows 5.1.2600 Service Pack 3

10:04:53 02/09/2008
mbam-log-09-02-2008 (10-04-43).txt

Type de recherche: Examen complet (C:|)
Eléments examinés: 123029
Temps écoulé: 1 hour(s), 6 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\RADIO_USA (Adware.Agent) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\RADIO_USA (Adware.Agent) -> No action taken.
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\RADIO_USA\RadioPlayer (Adware.Agent) -> No action taken.

Fichier(s) infecté(s):
C:\System Volume Information_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP131\A0018156.dll (Adware.Shopper) -> No action taken.
C:\System Volume Information_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP218\A0043372.exe (Rogue.ErrorExpertSetup) -> No action taken.
C:\System Volume Information_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP219\A0043750.exe (Rogue.ErrorExpertSetup) -> No action taken.
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\RADIO_USA\Error.Log (Adware.Agent) -> No action taken.
bisous et merci !

7

Salut

Dans hijackthis coche

Ce sont des entrer infectieuse

Désactive tes protection et utilise [combofix](http://download.bleepingcomputer.com/sUBs/ComboFix.exe) Laisse travailler et colle le rapport
8

Coucou et merci de ton aide !
alors j’ai fait ce que tu m’as dit, voici le rapport ! j’y comprends toujours rien ! lol ! heureusement que la communauté est là ! lol

ComboFix 08-09-01.05 - HP_Propriétaire 2008-09-03 10:43:57.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.264 [GMT 2:00]
Endroit: C:\Documents and Settings\HP_Propriétaire\Bureau\ComboFix.exe

  • Création d’un nouveau point de restauration
    .

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers créés 2008-08-03 to 2008-09-03 ))))))))))))))))))))))))))))))))))))
.

2008-09-02 10:45 . 2008-09-02 10:45 d-------- C:\Documents and Settings\Administrateur\Application Data\Thunderbird
2008-09-02 10:15 . 2008-09-02 10:15 d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2008-09-02 00:28 . 2008-09-02 00:28 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Malwarebytes
2008-09-02 00:28 . 2008-09-02 00:28 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Malwarebytes
2008-09-02 00:28 . 2008-09-02 00:28 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Malwarebytes
2008-09-02 00:27 . 2008-09-02 00:28 d-------- C:\Program Files\Malwarebytes’ Anti-Malware
2008-09-02 00:27 . 2008-09-02 00:27 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-09-02 00:27 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-02 00:27 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-09-02 00:24 . 2008-09-02 00:24 d-------- C:\Program Files\Avira
2008-09-02 00:24 . 2008-09-02 00:24 d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-08-30 20:38 . 2008-08-31 18:33 d-------- C:\Program Files\Opera
2008-08-30 09:24 . 2008-08-30 17:10 d-------- C:\Program Files\ma-config.com
2008-08-30 09:24 . 2008-08-30 17:10 d-------- C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-08-30 08:52 . 2008-08-30 08:52 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-08-30 08:52 . 2008-08-30 08:52 1,409 --a------ C:\WINDOWS\QTFont.for
2008-08-25 08:06 . 2008-08-25 08:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\IObit
2008-08-25 08:06 . 2008-08-25 08:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\IObit
2008-08-25 08:06 . 2008-08-25 08:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\IObit
2008-08-25 07:56 . 2008-08-25 07:56 d-------- C:\Program Files\IObit
2008-08-25 07:18 . 2008-08-25 07:52 d-------- C:\Program Files\Error Expert
2008-08-25 00:17 . 2008-04-17 16:22 208,896 --a------ C:\WINDOWS\system32\ConTest.dll
2008-08-25 00:17 . 2007-10-17 10:19 20,480 --a------ C:\WINDOWS\system32\SysRestore.dll
2008-08-16 14:33 . 2008-08-16 14:54 d-------- C:\Program Files\Western Digital
2008-08-16 14:23 . 2008-08-16 14:23 8 --a------ C:\Documents and Settings\HP_Propriétaire\Application Data\usb.dat
2008-08-16 14:23 . 2008-08-16 14:23 8 --a------ C:\Documents and Settings\HP_Propriétaire\Application Data\usb.dat
2008-08-16 14:23 . 2008-08-16 14:23 8 --a------ C:\Documents and Settings\HP_Propriétaire\Application Data\usb.dat
2008-08-16 12:34 . 2008-08-16 12:34 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Talkback
2008-08-16 12:34 . 2008-08-16 12:34 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Talkback
2008-08-16 12:34 . 2008-08-16 12:34 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Talkback
2008-08-16 12:08 . 2008-09-03 09:39 d-------- C:\Program Files\Mozilla Thunderbird
2008-08-16 12:08 . 2008-08-16 12:08 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird
2008-08-16 12:08 . 2008-08-16 12:08 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird
2008-08-16 12:08 . 2008-08-16 12:08 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird
2008-08-14 08:21 . 2008-08-14 08:21 d-------- C:\Program Files\Sun
2008-08-14 06:59 . 2008-08-14 06:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Search Settings
2008-08-14 06:59 . 2008-08-14 06:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Search Settings
2008-08-14 06:59 . 2008-08-14 06:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Search Settings
2008-08-14 06:59 . 2005-11-29 10:43 86,016 --a------ C:\WINDOWS\system32\SLIPRT.DLL
2008-08-13 12:40 . 2008-08-13 12:40 d-------- C:\Program Files\Search Settings
2008-08-13 12:40 . 2008-08-13 12:40 d-------- C:\Program Files\Free Audio Pack
2008-08-13 00:04 . 2008-04-11 21:05 691,712 -----c— C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-08-13 00:04 . 2008-05-01 16:36 331,776 -----c— C:\WINDOWS\system32\dllcache\msadce.dll
2008-08-12 07:20 . 2008-08-12 07:20 129,984 --a------ C:\WINDOWS~GLC0001.TMP
2008-08-12 07:11 . 1998-02-19 16:26 193,536 --a------ C:\WINDOWS\system\DGNES132.DLL
2008-08-12 07:11 . 2008-08-12 07:11 129,984 --a------ C:\WINDOWS~GLC0000.TMP
2008-08-11 22:10 . 2008-08-11 22:11 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\iCloner
2008-08-11 22:10 . 2008-08-11 22:11 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\iCloner
2008-08-11 22:10 . 2008-08-11 22:11 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\iCloner
2008-08-11 22:06 . 2008-08-11 22:14 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTrans
2008-08-11 22:06 . 2008-08-11 22:14 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTrans
2008-08-11 22:06 . 2008-08-11 22:14 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTrans
2008-08-11 22:04 . 2008-08-11 22:04 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTransControlCenter
2008-08-11 22:04 . 2008-08-11 22:04 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTransControlCenter
2008-08-11 22:04 . 2008-08-11 22:04 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\CopyTransControlCenter
2008-08-11 19:59 . 2008-08-11 20:01 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\muvee Technologies
2008-08-11 19:59 . 2008-08-11 20:01 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\muvee Technologies
2008-08-11 19:59 . 2008-08-11 20:01 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\muvee Technologies
2008-08-11 08:38 . 2008-08-11 20:04 d-------- C:\Program Files\Fichiers communs\muvee Technologies
2008-08-11 08:30 . 2008-08-11 08:30 d-------- C:\Documents and Settings\All Users\Application Data\muvee Technologies
2008-08-11 08:13 . 2008-08-11 20:07 45,056 --a------ C:\WINDOWS\SIUnInst.exe
2008-08-11 07:34 . 2008-08-11 07:34 d-------- C:\Program Files\Yahoo!
2008-08-11 07:24 . 2008-08-11 07:24 d-------- C:\WINDOWS\masques
2008-08-11 07:24 . 2008-08-11 07:24 124 --a------ C:\WINDOWS\LMTransitionsPerso.lst
2008-08-11 06:46 . 2008-08-11 07:05 305 --a------ C:\WINDOWS\projRecent.lst
2008-08-11 06:42 . 2008-08-11 06:42 d-------- C:\WINDOWS\prefTransLM20
2008-08-11 06:42 . 2008-08-11 06:42 d-------- C:\WINDOWS\PrefsLM01
2008-08-10 22:06 . 2008-08-10 22:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\KC Softwares
2008-08-10 22:06 . 2008-08-10 22:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\KC Softwares
2008-08-10 22:06 . 2008-08-10 22:06 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\KC Softwares
2008-08-09 15:58 . 2008-08-09 15:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\PPTminimizer
2008-08-09 15:58 . 2008-08-09 15:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\PPTminimizer
2008-08-09 15:58 . 2008-08-09 15:59 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\PPTminimizer
2008-08-08 19:27 . 2008-08-08 19:28 d-------- C:\Program Files\Windows Live Safety Center
2008-08-08 19:02 . 2008-08-08 19:02 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Calendrier Xtra
2008-08-08 19:02 . 2008-08-08 19:02 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Calendrier Xtra
2008-08-08 19:02 . 2008-08-08 19:02 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Calendrier Xtra
2008-08-07 22:27 . 2008-08-13 11:12 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\OpenOffice.org2
2008-08-07 22:27 . 2008-08-13 11:12 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\OpenOffice.org2
2008-08-07 22:27 . 2008-08-13 11:12 d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\OpenOffice.org2
2008-08-07 21:55 . 2008-08-08 19:01 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-08-04 18:12 . 2008-08-04 18:12 d-------- C:\Documents and Settings\All Users\Application Data\Adobe(2)
2008-08-04 13:46 . 2008-08-04 13:46 d-------- C:\Program Files\Foxit Software

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-03 07:37 --------- d-----w C:\Program Files\eMule
2008-09-01 19:32 --------- d–h--w C:\Program Files\InstallShield Installation Information
2008-08-20 18:55 --------- d-----w C:\Program Files\myphotobook
2008-08-14 06:21 --------- d-----w C:\Program Files\Java
2008-08-14 06:10 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-08-14 05:47 --------- d-----w C:\Program Files\Google
2008-08-11 06:09 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\FileZilla
2008-08-11 06:09 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\FileZilla
2008-08-11 06:09 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\FileZilla
2008-08-07 19:16 --------- d-----w C:\Program Files\MSECache
2008-08-01 08:01 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AdobeUM
2008-08-01 08:01 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AdobeUM
2008-08-01 08:01 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AdobeUM
2008-08-01 07:59 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Sigel
2008-08-01 07:59 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Sigel
2008-08-01 07:59 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Sigel
2008-07-30 08:38 --------- d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-26 15:19 77,824 ----atw C:\WINDOWS\system32\DRWEBSP.DLL
2008-07-26 15:18 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\InstallShield
2008-07-26 15:18 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\InstallShield
2008-07-26 15:18 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\InstallShield
2008-07-25 09:25 --------- d-----w C:\Program Files\FileZilla FTP Client
2008-07-24 17:03 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Custom Skin Clock
2008-07-24 17:03 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Custom Skin Clock
2008-07-24 17:03 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Custom Skin Clock
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-07-06 13:49 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsYtn649_cfdg.exe
2008-07-06 13:49 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsYtn649_cfdg.exe
2008-07-05 18:47 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsWsa3Ve_cfdg.exe
2008-07-05 18:47 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsWsa3Ve_cfdg.exe
2008-07-05 18:31 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsYeS73b_cfdg.exe
2008-07-05 18:31 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsYeS73b_cfdg.exe
2008-07-05 18:28 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsLvf2F1_cfdg.exe
2008-07-05 18:28 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsLvf2F1_cfdg.exe
2008-07-05 18:25 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsSqS255_cfdg.exe
2008-07-05 18:25 1,599,488 --sh–w C:\Documents and Settings\HP_Propriétaire\Mes documentsSqS255_cfdg.exe
2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 15:10 670,208 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-21 10:58 671 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\waver_2.95.dat
2008-06-21 10:58 671 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\waver_2.95.dat
2008-06-21 10:58 671 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\waver_2.95.dat
2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Note les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
“{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}”= “C:\Program Files\Winamp Toolbar\winamptb.dll” [2008-03-20 1267040]

[HKEY_CLASSES_ROOT\clsid{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1]
[HKEY_CLASSES_ROOT\TypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“msnmsgr”=“C:\Program Files\Windows Live\Messenger\msnmsgr.exe” [2007-10-18 5724184]
“eMuleAutoStart”=“C:\Program Files\eMule\emule.exe” [2008-08-01 5480448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“hpsysdrv”=“c:\windows\system\hpsysdrv.exe” [1998-05-07 52736]
“IgfxTray”=“C:\WINDOWS\system32\igfxtray.exe” [2004-08-20 155648]
“HPHmon06”=“C:\WINDOWS\system32\hphmon06.exe” [2004-06-07 659456]
“Recguard”=“C:\WINDOWS\SMINST\RECGUARD.EXE” [2004-04-14 233472]
“SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe” [2008-06-10 144784]
“Advanced WindowsCare V2 Personal”=“C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe” [2008-08-21 2670672]
“avgnt”=“C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe” [2008-06-12 266497]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
“NoResolveSearch”= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
“NoSMBalloonTip”= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
“VIDC.YV12”= yv12vfw.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dllschannel.dlldigest.dllmsnsspc.dll

[HKLM~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]

[HKLM~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]

[HKLM~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^SNAL Horloge.lnk]

[HKLM~\startupfolder\C:^Documents and Settings^HP_Propriétaire^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DrWebScheduler
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k [X]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpIDerMail

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
–a------ 2004-09-09 21:10 344064 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BigDog303]
–a------ 2006-02-27 11:25 61440 C:\WINDOWS\VM303_STI.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD06]
–a------ 2004-06-07 19:53 49152 c:\Program Files\HP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
–a------ 2004-06-16 14:03 221184 C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
–a------ 2004-06-16 14:03 81920 C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a------ 2008-03-30 10:36 267048 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
–a------ 2003-02-11 12:02 61440 C:\hp\KBD\kbd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LSBWatcher]
–a------ 2004-10-14 22:54 253952 c:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
–a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a------ 2008-03-28 23:37 413696 C:\Program Files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
–a------ 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
–a------ 2004-06-29 18:06 88363 C:\WINDOWS\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
–a------ 2004-07-20 18:22 57344 C:\WINDOWS\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
–a------ 2004-07-29 02:34 2551808 C:\WINDOWS\ALCWZRD.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiSPower]
–a------ 2004-09-24 10:49 49152 C:\WINDOWS\system32\SiSPower.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
–a------ 2004-07-29 01:40 77824 C:\WINDOWS\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
“WMPNetworkSvc”=3 (0x3)
“WLSetupSvc”=3 (0x3)
“usnjsvc”=3 (0x3)
“ServiceLayer”=3 (0x3)
“Pml Driver HPZ12”=3 (0x3)
“iPod Service”=3 (0x3)
“gusvc”=3 (0x3)
“Adobe LM Service”=3 (0x3)
“Apple Mobile Device”=2 (0x2)

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
“%windir%\system32\sessmgr.exe”=
“C:\Program Files\Messenger\msmsgs.exe”=
“C:\Program Files\eMule\emule.exe”=
“C:\Program Files\iTunes\iTunes.exe”=
“%windir%\Network Diagnostic\xpnetdiag.exe”=
“C:\Program Files\Windows Live\Messenger\msnmsgr.exe”=
“C:\Program Files\Windows Live\Messenger\livecall.exe”=

R3 PRISM_A00;Intersil PRISM 802.11a/g Driver;C:\WINDOWS\system32\DRIVERS\PCTELSAP.SYS [2004-01-30 350282]
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 ASPI;Advanced SCSI Programming Interface Driver;C:\WINDOWS\System32\DRIVERS\ASPI32.sys [2002-07-17 16512]

Newly Created Service - CATCHME
Newly Created Service - PROCEXP90
.

        • ORPHANS REMOVED - - - -

MSConfigStartUp-VTTimer - VTTimer.exe

.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\mr1vwwzl.default
FireFox -: prefs.js - STARTUP.HOMEPAGE - google.fr…
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll
.

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net…
Rootkit scan 2008-09-03 10:45:52
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés …

Balayage caché autostart entries …

Balayage des fichiers cachés …

Scan terminé avec succès
Les fichiers cachés: 0

.
Temps d’accomplissement: 2008-09-03 10:46:48
ComboFix-quarantined-files.txt 2008-09-03 08:46:44

Pre-Run: 122,201,436,160 octets libres
Post-Run: 122,195,226,624 octets libres

271 — E O F — 2008-08-13 01:02:31

9

Pense aussi à faire un scan anti-virus?

10

je l’ai fait, rien de spécial ! mais firefox rame toujours sniff ! personne n’a d’idée ? Merci et bisous