lenteur et deconnection

lenteur et deconnection
Mariev5833	Le 18/02/2009 à 11:42
	Bonjour à tous,j"ai encore un souci de lenteur ainsi qu"un probléme de déconnection,il m"es impossible de jouer en ligne ,de regarder une video plein écran ,mon pc pc redémarre.je vous joins un rapport.Merci d"avance .Marie.Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:37:09, on 18/02/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Documents and Settings\marie\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\marie\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} (IsHere Class) - http://barremagique.aliceadsl.fr/download/BarreMagique.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209393760464 O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-b8f6c0f0f74bcdad.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_0_3_0.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O24 - Desktop Component 0: (no name) - http://www.rencontresauvergne.com/personals/member_photos/beta/20080421-033308-2048382486_s.jpg O24 - Desktop Component 1: (no name) - http://www.google.it/intl/en_com/images/logo_plain.png -- End of file - 7965 bytes
Mister_masque	Le 18/02/2009 à 13:20
	Salut Mariev, C'est pas pour t'embêter, mais c'est la dernière fois que je te désinfecte pour ce type d'infection. Je veux bien qu'on est pas de connaissance. Pareil, tu cliques sur des pop-up et télécharge sans réfléchir, du coup, oui, t'es infecté # 1 - Suppression de l'infection Télécharge AdRemover de Cyrildu17 Exécute le et installe le en cliquant sur suivant et en laissant les options par défaut Exécute la nouvelle icône qui est apparu sur ton Bureau, clique sur "Ok" si une fenêtre apparait, pour choisir la langue tape F puis tape Entrée Sélectionne l'option A (Recherche) avec la touche A et tape Entrée Patiente, quand le scan et finit, appuie sur une touche pour afficher le rapport et psote le sur le forum NB: Le rapport se trouve dans C:\Ad-Report-Date.log --
Mariev5833	Le 18/02/2009 à 18:11
	Voici le rapport demandé ,oui en effet je suis désolée ,je suis réguliérement infactée ,mais nous sommes plusieurs utilisateurs du pc ,promis je passe le mot.Merci pour ta patience.Marie. ------- LOGFILE OF AD-REMOVER 1.1.1.3 \| ONLY XP/VISTA ------- Updated by C_XX on 15/02/2009 at 10:20 Start at: 18:06:55 \| Mer 18/02/2009 \| Boot mode: Normal Boot Option: SCAN \| Executed from: C:\Program Files\Ad-remover\Ad-remover.bat Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600) Computer Name: M-F02C307CBFB24 Current User: marie - Administrator Drive(s): - C:\ (File System: NTFS) - D:\ (File System: CDFS) - E:\ (File System: CDFS) System Drive: C:\ Windows Directory: C:\WINDOWS\ System Directory: C:\WINDOWS\System32\ --- Running Processes: 38 +-----------------\| Boonty/Boonty Games Elements Found: . . +-----------------\| Eorezo Elements Found: HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9} HKCR\AppID\EoRezoBHO.DLL HKCR\EoRezoBHO.EoBho HKCR\EoRezoBHO.EoBho.1 HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A} HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F} HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E} HKCU\Software\EoRezo HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350} HKLM\Software\EoRezo HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9} HKLM\Software\Classes\AppID\EoRezoBHO.DLL HKLM\Software\Classes\EoRezoBHO.EoBho HKLM\Software\Classes\EoRezoBHO.EoBho.1 HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F} HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E} HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A} HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1 HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1 HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper . C:\Program Files\EoRezo C:\Program Files\EoRezo\EoAdv C:\Program Files\EoRezo\lang C:\Documents and Settings\marie\Application Data\EoRezo C:\Documents and Settings\marie\Application Data\EoRezo\db C:\Documents and Settings\marie\Application Data\EoRezo\eoDesktop C:\Documents and Settings\marie\Application Data\EoRezo\eoStats C:\Documents and Settings\marie\Application Data\EoRezo\SoftwareUpdate C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-336925EB.pf C:\Documents and Settings\marie\Cookies\marie@eorezo[1].txt C:\Documents and Settings\pierre\Cookies\pierre@eorezo[1].txt +-----------------\| Infected Poker Softwares Elements Found: . +-----------------\| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Found: . . +-----------------\| It's TV Elements Found: HKCU\Software\ItsLabel HKU\S-1-5-21-1659004503-436374069-725345543-1003\Software\ItsLabel . C:\Documents and Settings\marie\Application Data\ItsLabel C:\Documents and Settings\marie\Application Data\ItsLabel\ItsTV +-----------------\| Sweetim Elements Found: HKCU\Software\SweetIM HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} HKLM\Software\SweetIM HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420 HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9 . C:\WINDOWS\Installer\71a3a5.msi C:\Program Files\SweetIM C:\Program Files\SweetIM\Toolbars C:\Program Files\SweetIM\Toolbars\Internet Explorer C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources C:\WINDOWS\Installer\{59971D79-8111-42C2-9E40-883A0C277E78} C:\Documents and Settings\All Users\Application Data\SweetIM C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\mariec05@hotmail.fr C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\marvelooous-life@hotmail.fr C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\conf\users\om_droit@hotmail.fr C:\Documents and Settings\All Users\Application Data\SweetIM\Messenger\data\contentdb C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer C:\Documents and Settings\All Users\Application Data\SweetIM\Toolbars\Internet Explorer\cache +-----------------\| Added Scan: ---- Mozilla FireFox Version [Unable to get version] ---- ProfilePath: mztqjn5j.default . Prefs.js: Browser.Search.DefaultEngineName: "MyStart Rechercher" Prefs.js: Browser.Search.SelectedEngine: "MyStart Rechercher" . (Prefs.js) FOUND: user_pref("browser.startup.homepage", "http://y.lo.st"); . . . . ---- Internet Explorer Version 7.0.5730.13 ---- +-[HKEY_CURRENT_USER\..\Internet Explorer\Main] Search bar: hxxp://www.google.com/ie Search Page: hxxp://www.google.com Start page: hxxp://www.google.fr/ +-[HKEY_USERS\S-1-5-21-1659004503-436374069-725345543-1003\..\Internet Explorer\Main] Search bar: hxxp://www.google.com/ie Search Page: hxxp://www.google.com Start page: hxxp://www.google.fr/ +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main] Default_Page_URL: hxxp://fr.yahoo.com Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60076 Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Start page: hxxp://www.msn.com/ +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS] Tabs: hxxp://y.lo.st +---------------------------------------------------------------------------+ [~7205 Bytes] - "C:\Ad-Report-Scan-18.02.2009.log" - End at: 18:08:48 \| 18/02/2009 . +-----------------\| E.O.F - 130 Lines .
Mister_masque	Le 18/02/2009 à 18:43
	Reuh, # 1 - Suppression de l'infection Relance Ad-Remover en sélectionnant l'option B Tape "A" (Supprimer tout), puis "S" (Supprimer les éléments cochés). Laisse faire le scan et poste le rapport # 2 - Recherche d'autre infection Télécharge Random's System Information Tool (RSIT) par random/random et sauvegarde-le sur ton Bureau. Double-clique sur RSIT.exe afin de lancer RSIT. Clique sur Continue à l'écran Disclaimer en laissant les valeurs par défaut Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence. Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. --> Poste le contenu de log.txt (<<qui sera affiché) ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches). NB : Les deux rapports sont également sauvegardés dans le dossier: C:\rsit\ Rapport attendu: Ad-Remover (option B) RSIT @++ --
Mariev5833	Le 18/02/2009 à 23:30
	------- LOGFILE OF AD-REMOVER 1.1.1.3 \| ONLY XP/VISTA ------- Updated by C_XX on 15/02/2009 at 10:20 Start at: 23:27:36 \| Mer 18/02/2009 \| Boot mode: Normal Boot Option: SCAN \| Executed from: C:\Program Files\Ad-remover\Ad-remover.bat Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600) Computer Name: M-F02C307CBFB24 Current User: marie - Administrator Drive(s): - C:\ (File System: NTFS) - D:\ (File System: CDFS) - E:\ (File System: CDFS) System Drive: C:\ Windows Directory: C:\WINDOWS\ System Directory: C:\WINDOWS\System32\ --- Running Processes: 34 +-----------------\| Boonty/Boonty Games Elements Found: . . +-----------------\| Eorezo Elements Found: . +-----------------\| Infected Poker Softwares Elements Found: . +-----------------\| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Found: . . +-----------------\| It's TV Elements Found: . +-----------------\| Sweetim Elements Found: . +-----------------\| Added Scan: ---- Mozilla FireFox Version [Unable to get version] ---- ProfilePath: mztqjn5j.default . Prefs.js: Browser.Search.DefaultEngineName: "MyStart Rechercher" Prefs.js: Browser.Search.SelectedEngine: "MyStart Rechercher" . . . . . ---- Internet Explorer Version 7.0.5730.13 ---- +-[HKEY_CURRENT_USER\..\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Search Page: hxxp://www.google.com Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome +-[HKEY_USERS\S-1-5-21-1659004503-436374069-725345543-1003\..\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Search Page: hxxp://www.google.com Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchAssistant: hxxp://www.crawler.com/search/ie.aspx?tb_id=60076 Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start page: hxxp://fr.msn.com/ +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS] Tabs: hxxp://ieframe.dll/tabswelcome.htm +---------------------------------------------------------------------------+ [~3373 Bytes] - "C:\Ad-Report-Clean-18.02.2009.log" [~2823 Bytes] - "C:\Ad-Report-Scan-18.02.2009.log" - C:\Program Files\Ad-remover\TOOLS\BACKUP\18.02.2009 - Prefs.js C:\Program Files\Ad-remover\TOOLS\BACKUP\18.02.2009 - User.js End at: 23:29:25 \| 18/02/2009 . +-----------------\| E.O.F - 63 Lines .________________________________________________Logfile of random's system information tool 1.05 (written by random/random) Run by marie at 2009-02-18 23:30:53 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 215 GB (92%) free of 235 GB Total RAM: 1279 MB (68% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:31:10, on 18/02/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\marie\Local Settings\Temporary Internet Files\Content.IE5\J9AZXK4M\RSIT[1].exe C:\Program Files\Trend Micro\HijackThis\marie.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} (IsHere Class) - http://barremagique.aliceadsl.fr/download/BarreMagique.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209393760464 O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-b8f6c0f0f74bcdad.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_0_3_0.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O24 - Desktop Component 0: (no name) - http://www.rencontresauvergne.com/personals/member_photos/beta/20080421-033308-2048382486_s.jpg O24 - Desktop Component 1: (no name) - http://www.google.it/intl/en_com/images/logo_plain.png -- End of file - 7586 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-30 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-30 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-30 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-12-01 1204224] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497] "AliceSAV"=C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe [2005-12-16 81408] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-30 136600] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] "ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2008-08-22 1234160] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "authentication packages"=msv1_0 nwprovau [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "C:\Program Files\Magentic\bin\Magentic.exe"="C:\Program Files\Magentic\bin\Magentic.exe::Enabled:Magentic" "C:\Program Files\Magentic\bin\MgApp.exe"="C:\Program Files\Magentic\bin\MgApp.exe::Enabled:Magentic" "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe::Enabled:Logitech Desktop Messenger" "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe::Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe::Enabled:BitTorrent" "C:\Program Files\Kanopea Antispam\kaapp.exe"="C:\Program Files\Kanopea Antispam\kaapp.exe::Enabled:Kanopea Antispam Application" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe::Enabled:Windows Live Messenger (Phone)" "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"="C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe::Enabled:Veoh Web Player " "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe::Enabled:Orb" "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe::Enabled:OrbTray" "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe::Enabled:Orb Stream Client" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe::Disabled:eMule" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{48a5b7ad-1537-11dd-b556-806d6172696f}] shell\AutoRun\command - D:\ASUSACPI.exe ======List of files/folders created in the last 1 months====== 2009-02-18 23:10:27 ----D---- C:\rsit 2009-02-18 18:05:34 ----D---- C:\Program Files\Ad-remover 2009-02-17 10:26:37 ----D---- C:\WINDOWS\system32\Adobe 2009-01-30 23:20:38 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage 2009-01-30 16:46:11 ----D---- C:\Program Files\Lavalys 2009-01-30 14:46:53 ----A---- C:\WINDOWS\system32\javaws.exe 2009-01-30 14:46:53 ----A---- C:\WINDOWS\system32\javaw.exe 2009-01-30 14:46:53 ----A---- C:\WINDOWS\system32\java.exe 2009-01-30 14:46:40 ----D---- C:\Program Files\Java ======List of files/folders modified in the last 1 months====== 2009-02-18 23:27:26 ----D---- C:\WINDOWS\Temp 2009-02-18 23:24:47 ----D---- C:\WINDOWS 2009-02-18 23:10:39 ----D---- C:\WINDOWS\Prefetch 2009-02-18 22:58:21 ----D---- C:\Program Files\eMule 2009-02-18 22:37:50 ----SHD---- C:\WINDOWS\Installer 2009-02-18 22:37:49 ----D---- C:\Program Files 2009-02-18 14:58:59 ----D---- C:\WINDOWS\Minidump 2009-02-18 08:28:39 ----N---- C:\WINDOWS\SchedLgU.Txt 2009-02-17 23:27:44 ----D---- C:\WINDOWS\system32\LogFiles 2009-02-17 20:52:59 ----D---- C:\Program Files\Fichiers communs\Symantec Shared 2009-02-17 16:13:40 ----D---- C:\WINDOWS\system32\Macromed 2009-02-17 16:13:39 ----D---- C:\WINDOWS\system32 2009-02-17 15:40:33 ----HD---- C:\Config.Msi 2009-02-17 15:40:29 ----SD---- C:\WINDOWS\Tasks 2009-02-17 12:34:42 ----D---- C:\Documents and Settings\marie\Application Data\Adobe 2009-02-17 10:41:08 ----D---- C:\Documents and Settings 2009-02-17 10:37:27 ----D---- C:\Documents and Settings\marie\Application Data\Vso 2009-02-17 10:26:46 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-02-17 10:26:45 ----D---- C:\WINDOWS\system32\CatRoot2 2009-02-12 21:30:59 ----D---- C:\WINDOWS\system32\drivers 2009-02-12 09:17:02 ----D---- C:\WINDOWS\Debug 2009-02-12 06:09:56 ----D---- C:\Program Files\Internet Explorer 2009-02-12 06:01:28 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2009-02-12 06:00:55 ----HD---- C:\WINDOWS\inf 2009-02-12 06:00:52 ----HD---- C:\WINDOWS\$hf_mig$ 2009-02-12 06:00:39 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-02-09 14:55:33 ----D---- C:\Program Files\Messenger Plus! Live 2009-02-07 07:03:24 ----D---- C:\Program Files\Navilog1 2009-02-04 00:21:12 ----A---- C:\WINDOWS\system32\MRT.exe 2009-01-30 23:20:20 ----D---- C:\WINDOWS\system32\CatRoot 2009-01-30 14:46:42 ----A---- C:\WINDOWS\system32\deploytk.dll 2009-01-30 14:40:26 ----D---- C:\Program Files\Fichiers communs 2009-01-30 01:21:58 ----D---- C:\Program Files\Google 2009-01-26 03:45:33 ----A---- C:\WINDOWS\MyNetIE.ini 2009-01-26 03:45:33 ----A---- C:\WINDOWS\iensx.ini 2009-01-19 16:59:27 ----D---- C:\Program Files\Webtarot ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-11-25 75072] R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-02-28 15440] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352] R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632] R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320] R2 NwlnkNb;NetBIOS NWLink; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2002-09-07 63232] R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2002-09-07 55936] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-08-06 4122112] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2003-06-25 587264] R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [] R3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295] R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2004-08-31 26240] R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2007-02-16 11984] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 Lvckap;Logitech Kernel Audio Processing Filter Driver; \??\C:\WINDOWS\system32\drivers\Lvckap.sys [] R3 LVPrcMon;Logitech LVPrcMon Driver; \??\C:\WINDOWS\system32\drivers\LVPrcMon.sys [] R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-12-06 39424] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-07-28 12928] R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584] R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-04-28 47360] R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2005-12-06 7136] R3 PID_08A0;QuickCam IM(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-12-06 916096] R3 USB_RNDIS;ADI Remote NDIS Network Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152] R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 catchme;catchme; \??\C:\DOCUME~1\marie\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 F-Secure Standalone Minifilter;F-Secure Standalone Minifilter; \??\C:\DOCUME~1\marie\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys [] S3 lvmvdrv;Logitech Machine Vision Engine Loader; \??\C:\WINDOWS\system32\drivers\lvmvdrv.sys [] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-07-28 33024] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20050901.036\symidsco.sys [] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 dwshd;dwshd; C:\WINDOWS\System32\drivers\dwshd.sys [] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] S4 sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73600] S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-07 12032] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-11-12 68865] R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-11-12 151297] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2003-06-25 294912] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-30 152984] R2 LVPrcSrv;Logitech Process Monitor; c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe [2005-12-09 81920] R2 NWCWorkstation;Service client pour NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2003-06-25 114688] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] -----------------EOF-----------------
Mister_masque	Le 18/02/2009 à 23:39
	Bonsoir, Le Pc est propre. A mon avis, tu devrais faire désinstaller Emule, c'est un poubelle à virus. Le pc a surement été formaté, il y a peu, il est vraiment nickel. @+ --
Mariev5833	Le 19/02/2009 à 09:02
	Merci Mister ,mais j"ai toujours ce probléme de deconnection en plein écran,est -ce une sécurité activée ou une option qui génére ce redémarrage dés que je souhaite activer le mode pleinr écran,Merci à toi.Marie.

Vous avez résolu votre problème avec VIC ? Faites-le savoir sur les réseaux sociaux !