comment enlever alpha anitivirus ? svp

[seb5001]

bonjour

j'ai change le nom de hijack en sniffle

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:57:19, on 26/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
C:Program FilesPACKARD BELLSetUpMyPCSmpSys.exe
C:WindowsRtHDVCpl.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Windowssystem32igfxsrvc.exe
C:Windowssystem32 askeng.exe
C:Program FilesAlphaAVAlphaAV.exe
C:Windowssystem32 askeng.exe
C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesCyberLinkPowerCinemaPCMAgent.exe
C:Program FilesCyberLinkPowerCinemaKernelCLMLCLMLSvc.exe
C:Program FilesCyberLinkPlayMoviePMVService.exe
C:Program FilesAdobeReader 9.0Reader eader_sl.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesCommon FilesRealUpdate_OB ealsched.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesJavajre6injusched.exe
C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesSamsungSamsung New PC StudioNPSAgent.exe
C:UsersSébastienDesktopSniffle.exe
C:Windowssystem32SearchFilterHost.exe
C:Program FilesMozilla Firefoxfirefox.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.yahoo.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://homepage.packardbell.com/rdr.asp ... ynote_sl35
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://homepage.packardbell.com/rdr.asp ... ynote_sl35
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:Windowssystem32ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayer pbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: (no name) - {A77D3539-581D-450C-9E44-A84C415A6172} - C:WindowsSystem32msnaoladdon.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.15642swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6injp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [Google Desktop Search] "C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe" /startup
O4 - HKLM..Run: [SmpcSys] C:Program FilesPackard BellSetupMyPCSmpSys.exe
O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [PCMAgent] "C:Program FilesCyberLinkPowerCinemaPCMAgent.exe"
O4 - HKLM..Run: [CLMLServer] "C:Program FilesCyberLinkPowerCinemaKernelCLMLCLMLSvc.exe"
O4 - HKLM..Run: [PlayMovie] "C:Program FilesCyberLinkPlayMoviePMVService.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [Skytel] Skytel.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKCU..Run: [SmpcSys] C:Program FilesPACKARD BELLSetUpMyPCSmpSys.exe
O4 - HKCU..Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 - HKCU..Run: [AutoStartNPSAgent] C:Program FilesSamsungSamsung New PC StudioNPSAgent.exe
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE RESEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - (no file)
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~1GOEC62~1.DLL
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:Program FilesAdobePhotoshop Elements 6.0PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:Program FilesPackard BellPackard Bell Recovery ManagementServiceETService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:Windowssystem32FsUsbExService.Exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesNeroLibNMIndexingService.exe
O23 - Service: O2FLASH (o2flash) - O2Micro International - C:Windowssystem32DRIVERSo2flash.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:Windowssystem32IoctlSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe

--
End of file - 10073 bytes

merci de votre aide

[DouDou9455]

Bonjour & Bienvenue,

A supprimer en cochant les lignes et appuyant sur "Fixed Checked" :

F2 - REG:system.ini: UserInit=C:Windowssystem32ezShellStart.exe
O2 - BHO: (no name) - {A77D3539-581D-450C-9E44-A84C415A6172} - C:WindowsSystem32msnaoladdon.dll
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - (no file)


Ensuite :

1_ Tu télécharges Malwarebytes' Anti-Malware, tu l'installes puis tu procèdes à sa mise à jour.

Tu lances l'application en double-cliquant sur l'icône Malwarebytes' Anti Malware.

Tu cliques ensuite sur Exécuter un examen complet puis tu lances l'analyse en cliquant sur Rechercher.

_ Si l'utilitaire ne trouve rien de néfaste, cliques sur Ok. Le Bloc-notes va s'ouvrir avec le rapport d'analyse, celui-ci n'est pas intéressant car la machine est propre.
Tu peux fermer le Bloc-notes.

_ Si l'utilitaire trouve des éléments suspects, tu cliques sur Afficher les résultats puis sur Supprimer la sélection.
Tu enregistres le rapport d'analyse que tu nous copies-colles dans ton prochain message.

Il est possible que le programme te demande de redémarrer pour effectuer des suppressions supplémentaires, tu acceptes le redémarrage volontaire en cliquant sur Ok.


2_ Télécharge ComboFix de sUBs sur ton Bureau et pas ailleurs.

*** Déconnectes toi d'internet et désactives ton antivirus pour que ComboFix puisse s'exécuter normalement ***

> Double clique (pour XP) ou clic droit > Exécuter en tant qu'administrateur (pour Vista) sur ComboFix.exe
et suis les instructions.
(Si demandé, sélectionne la langue et l'option 1 puis valide).

> Installe la console de récupération si proposé et continue.

!!! Ne touches à rien tant que le scan n'est pas terminé !!!

> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
(il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.)

NOTE : Le rapport se trouve également ici : C:ComboFix.txt

[seb5001]

pour mbam aucun fichier de nefaste donc pas besoin du rapport

ComboFix 09-09-25.01 - Sébastien 26/09/2009 23:34.1.2 - NTFSx86
Microsoft® Windows Vista™ Edition Familiale Basique 6.0.6002.2.1252.33.1036.18.2008.1073 [GMT 2:00]
Lancé depuis: c:usersSébastienDesktopComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:$recycle.binS-1-5-21-2435225641-3979886543-1385453349-500
c:$recycle.binS-1-5-21-2846373401-135836489-2259933115-500
c:windowsInstaller3cec5.msp
c:windowsInstaller640f8.msi

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-08-26 au 2009-09-26 ))))))))))))))))))))))))))))))))))))
.

2009-09-26 21:41 . 2009-09-26 21:41 -------- d-----w- c:usersDefaultAppDataLocal emp
2009-09-26 17:42 . 2009-09-10 12:54 38224 ----a-w- c:windowssystem32driversmbamswissarmy.sys
2009-09-26 17:42 . 2009-09-26 19:14 -------- d-----w- c:program filesMalwarebytes' Anti-Malware
2009-09-26 17:42 . 2009-09-26 17:42 -------- d-----w- c:programdataMalwarebytes
2009-09-26 17:42 . 2009-09-10 12:53 19160 ----a-w- c:windowssystem32driversmbam.sys
2009-09-26 12:05 . 2009-09-26 12:05 -------- d-----w- c:program filesCommon FilesUninstall
2009-09-23 12:21 . 2009-04-02 13:21 84480 ----a-w- c:windowssystem32ff_vfw.dll
2009-09-23 12:21 . 2008-06-08 21:58 60273 ----a-w- c:windowssystem32pthreadGC2.dll
2009-09-23 12:20 . 2009-09-23 12:20 47360 ----a-w- c:windowssystem32driverspcouffin.sys
2009-09-23 12:20 . 2007-10-09 06:06 626688 ----a-w- c:windowssystem32msvcr80.dll
2009-09-23 12:20 . 2005-09-23 04:48 1171456 ----a-w- c:windowssystem32msvcr80d.dll
2009-09-23 12:20 . 2009-09-23 20:33 -------- d-----w- c:program filesVideo Convert Master
2009-09-20 20:21 . 2009-09-20 20:21 -------- d-----w- c:windowssystem32ca-ES
2009-09-20 20:21 . 2009-09-20 20:21 -------- d-----w- c:windowssystem32eu-ES
2009-09-20 20:21 . 2009-09-20 20:21 -------- d-----w- c:windowssystem32vi-VN
2009-09-20 20:04 . 2009-09-20 20:04 -------- d-----w- c:windowssystem32EventProviders
2009-09-19 19:16 . 2009-05-18 12:17 26600 ----a-w- c:windowssystem32driversGEARAspiWDM.sys
2009-09-19 19:16 . 2008-04-17 11:12 107368 ----a-w- c:windowssystem32GEARAspi.dll
2009-09-19 19:14 . 2009-09-19 19:14 -------- d-----w- c:program filesiPod
2009-09-19 19:14 . 2009-09-19 19:15 -------- d-----w- c:programdata{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-19 19:14 . 2009-09-19 19:15 -------- d-----w- c:program filesiTunes
2009-09-19 19:14 . 2009-09-19 19:14 -------- d-----w- c:program filesBonjour
2009-09-19 19:13 . 2009-09-19 19:13 -------- d-----w- c:program filesQuickTime
2009-09-19 19:13 . 2009-09-19 19:14 -------- d-----w- c:programdataApple Computer
2009-09-19 19:09 . 2009-09-19 19:14 -------- d-----w- c:program filesCommon FilesApple
2009-09-19 13:05 . 2009-04-11 06:28 754688 ----a-w- c:windowssystem32propsys.dll
2009-09-19 13:04 . 2009-04-11 06:28 777216 ----a-w- c:windowssystem32slcc.dll
2009-09-19 13:03 . 2009-04-11 06:28 83968 ----a-w- c:windowssystem32wbemwmiutils.dll
2009-09-19 13:03 . 2009-04-11 06:28 744448 ----a-w- c:windowssystem32wbemwbemcore.dll
2009-09-19 13:03 . 2009-04-11 06:28 30208 ----a-w- c:windowssystem32wbemwbemprox.dll
2009-09-19 13:03 . 2009-04-11 06:28 265728 ----a-w- c:windowssystem32wbem epdrvfs.dll
2009-09-19 13:03 . 2009-04-11 06:28 189440 ----a-w- c:windowssystem32wbemmofd.dll
2009-09-19 13:03 . 2009-04-11 06:28 614912 ----a-w- c:windowssystem32wbemfastprox.dll
2009-09-19 13:03 . 2009-04-11 06:28 265728 ----a-w- c:windowssystem32wbemesscli.dll
2009-09-19 13:03 . 2009-04-11 06:28 705536 ----a-w- c:windowssystem32SmiEngine.dll
2009-09-19 13:03 . 2009-04-11 06:28 218624 ----a-w- c:windowssystem32wdscore.dll
2009-09-19 13:03 . 2009-04-11 06:27 130560 ----a-w- c:windowssystem32PkgMgr.exe
2009-09-19 13:03 . 2009-04-11 06:28 247808 ----a-w- c:windowssystem32drvstore.dll
2009-09-09 21:20 . 2009-09-09 21:20 -------- d-----w- c:program filesAxBx
2009-09-09 12:52 . 2009-09-09 12:52 -------- d-----w- c:program filesMicrosoft
2009-09-09 12:52 . 2009-09-09 12:52 -------- d-----w- c:program filesWindows Live
2009-09-08 18:39 . 2009-08-14 16:27 904776 ----a-w- c:windowssystem32drivers cpip.sys
2009-09-08 18:39 . 2009-08-14 13:49 9728 ----a-w- c:windowssystem32TCPSVCS.EXE
2009-09-08 18:39 . 2009-08-14 13:49 27136 ----a-w- c:windowssystem32NETSTAT.EXE
2009-09-08 18:39 . 2009-08-14 13:49 19968 ----a-w- c:windowssystem32ARP.EXE
2009-09-08 18:39 . 2009-08-14 13:48 30720 ----a-w- c:windowssystem32drivers cpipreg.sys
2009-09-08 18:39 . 2009-08-14 13:48 105984 ----a-w- c:windowssystem32
etiohlp.dll
2009-09-08 18:39 . 2009-08-14 15:53 17920 ----a-w- c:windowssystem32
etevent.dll
2009-09-08 18:39 . 2009-08-14 13:49 17920 ----a-w- c:windowssystem32ROUTE.EXE
2009-09-08 18:39 . 2009-08-14 13:49 11264 ----a-w- c:windowssystem32MRINFO.EXE
2009-09-08 18:39 . 2009-08-14 13:49 8704 ----a-w- c:windowssystem32HOSTNAME.EXE
2009-09-08 18:39 . 2009-08-14 13:49 10240 ----a-w- c:windowssystem32finger.exe
2009-09-08 18:36 . 2009-07-11 19:01 513536 ----a-w- c:windowssystem32wlansvc.dll
2009-09-08 18:36 . 2009-07-11 19:01 302592 ----a-w- c:windowssystem32wlansec.dll
2009-09-08 18:36 . 2009-07-11 19:01 293376 ----a-w- c:windowssystem32wlanmsm.dll
2009-09-08 18:36 . 2009-07-11 19:01 65024 ----a-w- c:windowssystem32wlanapi.dll
2009-09-08 18:36 . 2009-07-11 17:03 127488 ----a-w- c:windowssystem32L2SecHC.dll
2009-09-08 18:36 . 2009-04-11 06:28 68096 ----a-w- c:windowssystem32wlanhlp.dll
2009-09-08 18:36 . 2009-06-10 11:41 2868224 ----a-w- c:windowssystem32mf.dll
2009-09-08 18:36 . 2009-04-11 06:28 98816 ----a-w- c:windowssystem32mfps.dll
2009-09-08 18:36 . 2009-04-11 06:27 53248 ----a-w- c:windowssystem32 rinstaller.exe
2009-09-08 18:36 . 2009-04-11 06:27 24576 ----a-w- c:windowssystem32mfpmp.exe
2009-09-08 18:36 . 2009-04-11 04:54 2048 ----a-w- c:windowssystem32mferror.dll
2009-09-03 09:35 . 2009-09-03 09:35 -------- d-----w- c:program filesMarkAny
2009-09-02 19:49 . 2009-09-02 19:49 -------- d-----w- c:program filesAudacity 1.3 Beta (Unicode)
2009-09-02 19:11 . 2008-07-03 00:48 319456 ----a-w- c:windowssystem32DIFxAPI.dll
2009-09-02 19:10 . 2008-02-22 13:33 14976 ----a-w- c:windowssystem32driverssscdmdfl.sys
2009-09-02 19:10 . 2008-02-22 13:33 12160 ----a-w- c:windowssystem32driverssscdwhnt.sys
2009-09-02 19:10 . 2008-02-22 13:33 12160 ----a-w- c:windowssystem32driverssscdwh.sys
2009-09-02 19:10 . 2008-02-22 13:33 114304 ----a-w- c:windowssystem32driverssscdmdm.sys
2009-09-02 19:10 . 2008-02-22 13:33 87936 ----a-w- c:windowssystem32driverssscdbus.sys
2009-09-02 19:10 . 2008-02-22 13:33 12160 ----a-w- c:windowssystem32driverssscdcmnt.sys
2009-09-02 19:10 . 2008-02-22 13:33 12160 ----a-w- c:windowssystem32driverssscdcm.sys
2009-09-02 19:08 . 2009-09-03 09:34 -------- d-----w- c:program filesSamsung
2009-08-30 13:37 . 2009-08-30 13:37 -------- d-----w- c:program filesGanymede
2009-08-30 09:26 . 2009-09-26 11:54 -------- d-----w- C:My Music

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-26 19:15 . 2008-01-21 07:23 669566 ----a-w- c:windowssystem32perfh00C.dat
2009-09-26 19:15 . 2008-01-21 07:23 123556 ----a-w- c:windowssystem32perfc00C.dat
2009-09-26 19:04 . 2009-04-18 19:01 -------- d-----w- c:programdataPartner
2009-09-23 11:58 . 2009-06-30 18:59 -------- d-----w- c:program filesCommon FilesAVSMedia
2009-09-23 11:58 . 2009-06-30 18:59 -------- d-----w- c:program filesAVS4YOU
2009-09-21 18:54 . 2009-05-13 14:24 -------- d-----w- c:program filesJava
2009-09-20 20:22 . 2006-11-02 12:35 -------- d-----w- c:program filesWindows Calendar
2009-09-20 20:22 . 2006-11-02 11:18 -------- d-----w- c:program filesWindows Mail
2009-09-20 20:22 . 2006-11-02 12:35 -------- d-----w- c:program filesWindows Sidebar
2009-09-20 20:22 . 2006-11-02 12:35 -------- d-----w- c:program filesWindows Photo Gallery
2009-09-20 20:22 . 2006-11-02 12:35 -------- d-----w- c:program filesWindows Collaboration
2009-09-20 20:21 . 2006-11-02 12:35 -------- d-----w- c:program filesWindows Defender
2009-09-09 11:43 . 2009-07-31 09:13 -------- d-----w- c:programdataTrackMania
2009-09-08 20:39 . 2009-04-20 20:29 -------- d-----w- c:program filesMicrosoft Silverlight
2009-09-08 20:39 . 2008-12-23 04:16 -------- d-----w- c:programdataMicrosoft Help
2009-09-03 09:35 . 2008-12-23 04:08 -------- d--h--w- c:program filesInstallShield Installation Information
2009-09-03 09:35 . 2009-07-24 14:24 -------- d-----w- c:program filesPC Connectivity Solution
2009-09-02 20:29 . 2009-09-02 20:29 0 ---ha-w- c:windowssystem32driversMsft_User_WpdMtpDr_01_00_00.Wdf
2009-09-02 19:10 . 2009-07-24 14:26 -------- d-----w- c:program filesDIFX
2009-08-24 16:58 . 2009-04-19 17:30 -------- d-----w- c:program filesCommon FilesReal
2009-08-24 16:58 . 2009-08-24 16:58 -------- d-----w- c:program filesCommon Filesxing shared
2009-08-17 16:10 . 2009-07-19 11:53 1279456 ----a-w- c:windowssystem32aswBoot.exe
2009-08-17 16:05 . 2009-07-19 11:53 114768 ----a-w- c:windowssystem32driversaswSP.sys
2009-08-17 16:05 . 2009-07-19 11:53 20560 ----a-w- c:windowssystem32driversaswFsBlk.sys
2009-08-17 16:05 . 2009-07-19 11:53 53328 ----a-w- c:windowssystem32driversaswMonFlt.sys
2009-08-17 16:04 . 2009-07-19 11:53 51376 ----a-w- c:windowssystem32driversaswTdi.sys
2009-08-17 16:04 . 2009-07-19 11:53 23152 ----a-w- c:windowssystem32driversaswRdr.sys
2009-08-17 16:02 . 2009-07-19 11:53 97480 ----a-w- c:windowssystem32AvastSS.scr
2009-08-11 19:59 . 2009-08-11 19:59 -------- d--h--w- c:programdataCanonBJ
2009-08-11 19:58 . 2009-08-11 19:58 -------- d--h--w- c:program filesCanonBJ
2009-07-31 09:11 . 2009-07-31 09:10 -------- d-----w- c:program filesTmNationsForever
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:windowssystem32sirenacm.dll
2009-07-25 03:23 . 2009-05-13 14:25 411368 ----a-w- c:windowssystem32deploytk.dll
2009-07-21 21:52 . 2009-07-28 18:26 915456 ----a-w- c:windowssystem32wininet.dll
2009-07-21 21:47 . 2009-07-28 18:26 109056 ----a-w- c:windowssystem32iesysprep.dll
2009-07-21 21:47 . 2009-07-28 18:26 71680 ----a-w- c:windowssystem32iesetup.dll
2009-07-21 20:13 . 2009-07-28 18:26 133632 ----a-w- c:windowssystem32ieUnatt.exe
2009-07-17 13:54 . 2009-08-13 10:51 71680 ----a-w- c:windowssystem32atl.dll
2009-07-15 12:40 . 2009-08-13 10:51 8147456 ----a-w- c:windowssystem32wmploc.DLL
2009-07-15 12:39 . 2009-08-13 10:51 313344 ----a-w- c:windowssystem32wmpdxm.dll
2009-07-15 12:39 . 2009-08-13 10:51 4096 ----a-w- c:windowssystem32dxmasf.dll
2009-07-15 12:39 . 2009-08-13 10:51 7680 ----a-w- c:windowssystem32spwmp.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:program filesmozilla firefoxpluginslibdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:program filesmozilla firefoxpluginsssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"SmpcSys"="c:program filesPACKARD BELLSetUpMyPCSmpSys.exe" [2008-07-07 1038136]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:program filesCommon FilesNeroLibNMIndexStoreSvr.exe" [2008-04-28 1828136]
"swg"="c:program filesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe" [2009-04-18 68856]
"WMPNSCFG"="c:program filesWindows Media PlayerWMPNSCFG.exe" [2008-01-21 202240]
"AutoStartNPSAgent"="c:program filesSamsungSamsung New PC StudioNPSAgent.exe" [2009-04-16 102400]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Windows Defender"="c:program filesWindows DefenderMSASCui.exe" [2008-01-21 1008184]
"IAAnotif"="c:program filesIntelIntel Matrix Storage Manageriaanotif.exe" [2008-04-15 178712]
"Google Desktop Search"="c:program filesGoogleGoogle Desktop SearchGoogleDesktop.exe" [2008-12-23 24064]
"SmpcSys"="c:program filesPackard BellSetupMyPCSmpSys.exe" [2008-07-07 1038136]
"IgfxTray"="c:windowssystem32igfxtray.exe" [2008-07-11 150040]
"HotKeysCmds"="c:windowssystem32hkcmd.exe" [2008-07-11 170520]
"Persistence"="c:windowssystem32igfxpers.exe" [2008-07-11 145944]
"SynTPEnh"="c:program filesSynapticsSynTPSynTPEnh.exe" [2007-06-08 894512]
"PCMAgent"="c:program filesCyberLinkPowerCinemaPCMAgent.exe" [2008-03-21 143360]
"CLMLServer"="c:program filesCyberLinkPowerCinemaKernelCLMLCLMLSvc.exe" [2008-04-11 196608]
"PlayMovie"="c:program filesCyberLinkPlayMoviePMVService.exe" [2008-03-31 172032]
"Adobe Reader Speed Launcher"="c:program filesAdobeReader 9.0ReaderReader_sl.exe" [2009-02-27 35696]
"avast!"="c:progra~1ALWILS~1Avast4ashDisp.exe" [2009-08-17 81000]
"TkBellExe"="c:program filesCommon FilesRealUpdate_OB ealsched.exe" [2009-09-23 198160]
"QuickTime Task"="c:program filesQuickTimeQTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:program filesiTunesiTunesHelper.exe" [2009-09-08 305440]
"SunJavaUpdateSched"="c:program filesJavajre6injusched.exe" [2009-07-25 149280]
"Malwarebytes Anti-Malware (reboot)"="c:program filesMalwarebytes' Anti-Malwarembam.exe" [2009-09-10 1312080]
"RtHDVCpl"="RtHDVCpl.exe" - c:windowsRtHDVCpl.exe [2008-09-18 6294048]
"Skytel"="Skytel.exe" - c:windowsSkyTel.exe [2008-09-18 1833504]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)

[hkey_local_machinesoftwaremicrosoftwindowscurrentversionexplorerShellExecuteHooks]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwindows]
"AppInit_DLLs"=c:progra~1GoogleGOOGLE~1GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalSymEFA.sys]
@="FSFilter Activity Monitor"

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinDefend]
@="Service"

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerSvc]
"VistaSp2"=hex(b):f2,96,9c,ed,30,3a,ca,01

[HKLM~servicessharedaccessparametersfirewallpolicyFirewallRules]
"{8F5CA79B-0708-4E43-8C5E-39609878C24C}"= UDP:c:program filesMicrosoft OfficeOffice12ONENOTE.EXE:Microsoft Office OneNote
"{4E4F7B70-2142-4469-A480-4A0D49BF50AE}"= TCP:c:program filesMicrosoft OfficeOffice12ONENOTE.EXE:Microsoft Office OneNote
"{15C785B7-450D-4E56-BE56-0C11AA225197}"= c:program filesCyberLinkPowerCinemaPowerCinema.exe:CyberLink PowerCinema
"{358A569C-EA37-4322-8E9E-A33A10D5E6FA}"= c:program filesCyberLinkPowerCinemaPCMService.exe:CyberLink PowerCinema Resident Program
"{3728B1F5-6241-4DD2-B709-0045176A3F38}"= c:program filesCyberLinkPowerCinemaKernelDMPCLBrowserEngine.exe:Cyberlink Media Server Browser Engine
"{6BC5574D-1D6C-4B2D-89B9-E43828CBC23D}"= c:program filesCyberLinkPowerCinemaKernelDMSCLMSService.exe:CyberLink Media Server
"{E892C56F-B3F0-4EA8-9BB8-60D1A199B375}"= c:program filesCyberLinkPlayMoviePlayMovie.exe:CyberLink PlayMovie
"{01752972-EAB6-469F-9F50-881A40CC9B01}"= c:program filesCyberLinkPlayMoviePMVService.exe:CyberLink PlayMovie Resident Program
"{1F505424-9A62-434A-A256-6799527D2973}"= UDP:c:program filesSonyMedia Manager for PSPMediaManager.exe:Media Manager for PSP 3.0
"{43F0339F-0C8A-4376-83E1-328D5086A9AD}"= TCP:c:program filesSonyMedia Manager for PSPMediaManager.exe:Media Manager for PSP 3.0
"{81AFF5A0-E016-4551-8B39-77D8EBDF34BD}"= TCP:6004|c:program filesMicrosoft OfficeOffice12outlook.exe:Microsoft Office Outlook
"{DFCCE956-7B5D-40A0-97CA-A48F10AB940D}"= UDP:c:usersSébastienAppDataLocalTemp7zS2F4E.tmpSymNRT.exe:Norton Removal Tool
"{350C0708-E00D-47F9-BCA3-7FC4695B7F13}"= TCP:c:usersSébastienAppDataLocalTemp7zS2F4E.tmpSymNRT.exe:Norton Removal Tool
"{B4B25DD9-874E-4C02-95BF-10A4887A02D7}"= UDP:c:program filesSamsungSamsung New PC Studio
psasvr.exe:KTF MUSIC AoD Server
"{93322A75-7629-4003-9FA5-B52F78E4F446}"= TCP:c:program filesSamsungSamsung New PC Studio
psasvr.exe:KTF MUSIC AoD Server
"{70F5D41F-31AA-452E-9EAB-C93E0D3436CE}"= UDP:c:program filesSamsungSamsung New PC Studio
psvsvr.exe:KTF MUSIC VoD Server
"{01064121-A111-418F-9706-4F6811EB4ACB}"= TCP:c:program filesSamsungSamsung New PC Studio
psvsvr.exe:KTF MUSIC VoD Server
"TCP Query User{CF42AAE7-8B39-449A-814E-8E51CF3B8232}c:\program files\tmnationsforever\tmforever.exe"= UDP:c:program files mnationsforever mforever.exe:TmForever
"UDP Query User{B7231BBB-6A61-4C0E-87F4-8CD4FAA320C7}c:\program files\tmnationsforever\tmforever.exe"= TCP:c:program files mnationsforever mforever.exe:TmForever
"TCP Query User{22D5D6C1-28D1-4C09-9713-258214B4E177}c:\program files\tmnationsforever\tmforever.exe"= UDP:c:program files mnationsforever mforever.exe:TmForever
"UDP Query User{6E33AA18-8FF4-425E-8535-9A8ACA057B8C}c:\program files\tmnationsforever\tmforever.exe"= TCP:c:program files mnationsforever mforever.exe:TmForever
"{CB7BA08C-D7B9-41BD-8305-209699D31BFF}"= UDP:c:program filesSamsungSamsung New PC Studio
psasvr.exe:KTF MUSIC AoD Server
"{A3944D06-F9A8-4FCC-AE16-A2782DC747E7}"= TCP:c:program filesSamsungSamsung New PC Studio
psasvr.exe:KTF MUSIC AoD Server
"{5348442F-8DBD-4C99-90AD-FA066EDC47F7}"= UDP:c:program filesSamsungSamsung New PC Studio
psvsvr.exe:KTF MUSIC VoD Server
"{ADE62239-7B1C-48FA-9DCB-C72EF4A08592}"= TCP:c:program filesSamsungSamsung New PC Studio
psvsvr.exe:KTF MUSIC VoD Server
"{E530D0F0-AE8F-464B-83F5-CEB550C9D39E}"= UDP:c:program filesBonjourmDNSResponder.exe:Bonjour
"{3F5F20E6-1C0A-49BD-8F3B-6301C2A9ADE1}"= TCP:c:program filesBonjourmDNSResponder.exe:Bonjour
"{BDB30FAA-EC2C-47F9-9C12-F4BC32473E02}"= UDP:c:program filesiTunesiTunes.exe:iTunes
"{EC9A5281-24F9-4EE9-95A4-780BCBC034D6}"= TCP:c:program filesiTunesiTunes.exe:iTunes

[HKLM~servicessharedaccessparametersfirewallpolicyStandardProfile]
"EnableFirewall"= 0 (0x0)

R1 aswSP;avast! Self Protection;c:windowsSystem32driversaswSP.sys [19/07/2009 13:53 114768]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:program filesCyberLinkPlayMovie00.fcl [07/01/2009 09:46 41456]
R2 aswFsBlk;aswFsBlk;c:windowsSystem32driversaswFsBlk.sys [19/07/2009 13:53 20560]
R2 aswMonFlt;aswMonFlt;c:windowsSystem32driversaswMonFlt.sys [19/07/2009 13:53 53328]
R2 ETService;Empowering Technology Service;c:program filesPACKARD BELLPackard Bell Recovery ManagementServiceETService.exe [07/01/2009 09:41 24576]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:windowssystem32svchost.exe -k netsvcs [21/01/2008 04:33 21504]
R2 FsUsbExService;FsUsbExService;c:windowsSystem32FsUsbExService.Exe [24/07/2009 16:25 233472]
R3 FsUsbExDisk;FsUsbExDisk;c:windowsSystem32FsUsbExDisk.Sys [24/07/2009 16:25 36608]
R3 O2MDRDR;O2MDRDR;c:windowsSystem32driverso2media.sys [22/08/2008 09:03 51288]
R3 O2SDRDR;O2SDRDR;c:windowsSystem32driverso2sd.sys [12/06/2008 03:28 43608]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:windowsSystem32driversRTL8187B.sys [23/12/2008 14:07 288768]
S2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6;c:program filesAdobePhotoshop Elements 6.0PhotoshopElementsFileAgent.exe [11/09/2007 01:45 124832]
S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:program filesGoogleGoogle Desktop SearchGoogleDesktop.exe [23/12/2008 06:22 24064]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost - NetSvcs
ezSharedSvc
.
Contenu du dossier 'Tâches planifiées'

2009-09-26 c:windowsTasksUser_Feed_Synchronization-{B9C89ACD-8B37-44C3-813B-73EFBF0EBE63}.job
- c:windowssystem32msfeedssync.exe [2009-07-28 20:13]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://fr.yahoo.com/
mStart Page = hxxp://homepage.packardbell.com/rdr.asp ... ynote_sl35
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:progra~1MICROS~2Office12EXCEL.EXE/3000
FF - ProfilePath - c:usersSébastienAppDataRoamingMozillaFirefoxProfileskbmzopti.default
FF - prefs.js: browser.startup.homepage - hxxp://fr.yahoo.com/
FF - component: c:program filesRealRealPlayerrowserrecordfirefoxextcomponents
prpffbrowserrecordext.dll
FF - plugin: c:program filesMozilla Firefoxplugins
p-mswmp.dll
FF - plugin: c:program filesVideo Convert Mastercodec ealrowserplugins
ppl3260.dll
FF - plugin: c:program filesVideo Convert Mastercodec ealrowserplugins
prpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:windowsMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-DLD.EXE - (no file)
HKLM-Run-eRecoveryService - (no file)
HKLM-Run-NPSStartup - (no file)
AddRemove-HijackThis - c:usersSébastienDesktopHijackThis.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-26 23:41
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINESYSTEMControlSet001Services{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="??c:program filesCyberLinkPlayMovie00.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERSS-1-5-21-2435225641-3979886543-1385453349-1000SoftwareSony Creative SoftwareM*e*d*i*a* *M*a*n*a*g*e*r* *f*o*r* *P*S*P*"!3.0]
"Percents"="0.0059 0.1499 0.3864 0.4607 0.7584 0.8574 0.8763 "
"Increment"=".005882"
"FRT"="7NS6Gh7gJWibmNHg36HRrQEDq4JIM27AmhjinPvL9LaVhENpRtuwlA=="
"PLCK"="v166GPStE5aDqEM9Or407/9yrAyxnFDN"
"PHSH"=""

[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}000AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}001AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}002AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2009-09-26 23:42
ComboFix-quarantined-files.txt 2009-09-26 21:42

Avant-CF: 95 903 387 648 octets libres
Après-CF: 95 841 521 664 octets libres

300 --- E O F --- 2009-09-20 20:17

Merci de ton aide precieuse !

[DouDou9455]

Relance HiHackThis et poste nous le rapport

[seb5001]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:23:29, on 27/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
C:Program FilesPACKARD BELLSetUpMyPCSmpSys.exe
C:WindowsRtHDVCpl.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Windowssystem32igfxsrvc.exe
C:Windowssystem32 askeng.exe
C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesCyberLinkPowerCinemaPCMAgent.exe
C:Program FilesCyberLinkPowerCinemaKernelCLMLCLMLSvc.exe
C:Program FilesCyberLinkPlayMoviePMVService.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesCommon FilesRealUpdate_OB ealsched.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesJavajre6injusched.exe
C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesSamsungSamsung New PC StudioNPSAgent.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Windowssystem32SearchFilterHost.exe
C:UsersSébastienDesktopHiJackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.yahoo.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://homepage.packardbell.com/rdr.asp ... ynote_sl35
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayer pbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.15642swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6injp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [Google Desktop Search] "C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe" /startup
O4 - HKLM..Run: [SmpcSys] C:Program FilesPackard BellSetupMyPCSmpSys.exe
O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [PCMAgent] "C:Program FilesCyberLinkPowerCinemaPCMAgent.exe"
O4 - HKLM..Run: [CLMLServer] "C:Program FilesCyberLinkPowerCinemaKernelCLMLCLMLSvc.exe"
O4 - HKLM..Run: [PlayMovie] "C:Program FilesCyberLinkPlayMoviePMVService.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [Skytel] Skytel.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKCU..Run: [SmpcSys] C:Program FilesPACKARD BELLSetUpMyPCSmpSys.exe
O4 - HKCU..Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 - HKCU..Run: [AutoStartNPSAgent] C:Program FilesSamsungSamsung New PC StudioNPSAgent.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~1GoogleDesktopNetwork3.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:Program FilesAdobePhotoshop Elements 6.0PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:Program FilesPackard BellPackard Bell Recovery ManagementServiceETService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:Windowssystem32FsUsbExService.Exe
O23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesNeroLibNMIndexingService.exe
O23 - Service: O2FLASH (o2flash) - O2Micro International - C:Windowssystem32DRIVERSo2flash.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:Windowssystem32IoctlSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe

--
End of file - 8924 bytes

Merci encore !!!!!!!!!

[DouDou9455]

Plus de trace d'Alpha, supprime juste :

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~1GoogleDesktopNetwork3.dll



Pour terminer la désinfection et optimiser Windows:


_ Désinstallation des utilitaires utilisés:

Les programmes utilisés pour la désinfection ne sont pas à utiliser quotidiennement.

Pour les désinstaller, il faut cliquer sur Démarrer puis Panneau de configuration.

Ensuite tu cliques sur Programmes et enfin sur Programmes et fonctionnalités.
Tu sélectionnes les utilitaires et tu cliques sur Désinstaller.

Pour une suppression effective, penses à supprimer leurs dossiers respectifs, la plupart à la racine de ta partition principale.


_ Utilisation d'un navigateur internet alternatif:

Internet Explorer n'étant pas sûr, il est préférable d'installer un navigateur internet alternatif pour sécuriser ton surf.

Tu as le choix entre Mozilla Firefox, Apple Safari ou encore Opéra.

Il faudra ensuite définir ce navigateur internet alternatif comme navigateur par défaut.


_ Utilisation d'un pare-feu alternatif:

Il est recommandé de ne pas utiliser le pare-feu Windows et d'en prendre un plus efficace.

Le choix est possible entre Zone Alarm & Sunbelt, tous deux compatibles avec Vista.

Après avoir sélectionné le pare-feu idéal, il faudra désactiver celui de Windows.


_ Nettoyage des points de restauration:

Dans un premier temps, il faut supprimer tous les points de restauration.

Pour cela, cliques sur Démarrer puis Panneau de configuration, cliques ensuite sur Système et maintenance puis enfin sur Système.

Tu cliques sur l'onglet de gauche Protection du système.
Si Windows te demande ton mot de passe administrateur, tu le fournis, s'il demande une confirmation, tu confirmes l'action.

Dans le cadre du bas nommé Points de restauration automatiques, tu décoches la ligne correspondant à ton disque dur (par défaut nommé Disque local (C: ) (Système).

Tu confirmes la suppression de tous les points de restauration en cliquant sur Désactiver la restauration du système.

Ensuite, il faut réactiver la restauration automatique du système.

Tu refais la manipulation précédente pour relancer les Propriétés système.
Tu coches alors la ligne correspondant à ton disque dur (par défaut nommé Disque local (C: ) (Système), tu cliques enfin sur Appliquer & Ok.

Tu auras créer un point de restauration propre.


_ Nettoyage des fichiers temporaires & de la base de registre:

Pour cela, Ccleaner reste le moyen le plus sûr et pratique de tout nettoyer sans risques.

En suivant ce tutorial, cet utilitaire sera configuré correctement.

Il est aussi utile de purger régulièrement le dossier Prefetch en profitant de Ccleaner pour automatiser ce nettoyage.
Pour cela, il faut aller dans Options puis Personnaliser pour ajouter le dossier C:WindowsPREFETCH.


_ Un petit coup d'oeil à notre dossier Nettoyage peut être utile en supplément.

[ebadu]

Bonjour à tous,

Doudou tu as l'air d'être le sauveur contre l'envahisseur Alpha dont je suis aussi victime ! je ne suis pas trés douée en informatique, et j'ai trop besoin de votre aide !

J'ai suivi le tutoriel et voici le rapport (j'ai nommé "Sniff") :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:51:35, on 28/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:WINDOWSExplorer.EXE
C:Program FilesIntelWirelessBinS24EvMon.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesLavasoftAd-Aware 2007aawservice.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32LEXPPS.EXE
C:WINDOWSsystem32svchost.exe
C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
C:WINDOWSsystem32DVDRAMSV.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:PROGRA~1FICHIE~1France TelecomShared ModulesFTRTSVCFTRTSVC.exe
C:WINDOWSsystem32
vsvc32.exe
C:Program FilesIntelWirelessBinRegSrvc.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesToshibaTOSHIBA AppletTAPPSRV.exe
C:PROGRA~1COMMON~1X10Commonx10nets.exe
C:WINDOWSehomemcrdsvc.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSSystem32svchost.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesAlphaAVAlpha Antivirus.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesTOSHIBATOSCDSPD oscdspd.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIBZE.EXE
C:WINDOWSsystem32RAMASST.exe
C:Program FilesMicrosoft OfficeOFFICE11ONENOTEM.EXE
C:WINDOWSsystem32wuauclt.exe
C:Program FilesMicrosoft OfficeOffice10WINWORD.EXE
C:Program FilesMicrosoftOffice LiveOfficeLiveSignIn.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesWindows LiveToolbarwltuser.exe
C:Documents and SettingsDianeBureauSniff.exe
C:WINDOWSsystem32wbemwmiprvse.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:Program FilesOrangeSearchURLHookSearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:Program FilesWindows Desktop SearchdsWebAllow.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:WINDOWSSystem32DLADLASHX_W.DLL
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:Program FilesEoRezoEoAdvEoRezoBHO.dll (file missing)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.0_06inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: &Helper - {A77D3539-581D-450C-9E44-A84C415A6172} - C:WINDOWSsystem32msnaoladdon.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [ISTray] "C:Program FilesSpyware DoctorpctsTray.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [AlphaAV] C:Program FilesAlphaAVAlpha Antivirus.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [TOSCDSPD] C:Program FilesTOSHIBATOSCDSPD oscdspd.exe
O4 - HKCU..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [swg] "C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
O4 - HKCU..Run: [EPSON Stylus D92 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIBZE.EXE /FU "C:WINDOWSTEMPE_S82.tmp" /EF "HKCU"
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:Program FilesMicrosoft OfficeOFFICE11ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:WINDOWSsystem32RAMASST.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:Program FilesWindows Desktop SearchWindowsSearch.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:WINDOWSsystem32GPhotos.scr/200
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O15 - Trusted Zone: http://www.orange.fr
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~3GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Aware 2007aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:WINDOWSsystem32DVDRAMSV.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:Program FilesIntelWirelessBinEvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:PROGRA~1FICHIE~1France TelecomShared ModulesFTRTSVCFTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver1150Intel 32IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:WINDOWSsystem32LEXBCES.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:Program FilesFichiers communsSony SharedAVLibMSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:Program FilesFichiers communsSony SharedAVLibPACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:Program FilesIntelWirelessBinRegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:Program FilesIntelWirelessBinS24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware DoctorpctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:Program FilesSpyware DoctorpctsSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:Program FilesFichiers communsSony SharedAVLibSPTISRV.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:Program FilesToshibaTOSHIBA AppletTAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:PROGRA~1COMMON~1X10Commonx10nets.exe

--
End of file - 12139 bytes

MERCIIIIII !!!!

[danakil]

Salut ebadu !

Ton PC est effectivement infecté par AlphaAV mais en plus par :
EoRezo et SD

Afin de ne pas se mélanger dans les procédures qui sont toutes adaptées aux PC infectés, tu vas créer ton propre sujet en cliquant sur le lien ci-dessous :
http://www.pc-infopratique.com/forum-in ... -vf19.html
> Clique ensuite sur
> Dans le titre de ton sujet mets : Infection AlphaAV
> En texte dis simplement : "suis infectée par ..."
> Poste ton sujet sans le rapport HijackThis qui est mal placé actuellement.
> Je te donnerai rapidement les procédures de nettoyage.

[seb5001]

Merci encore et encore a toi !!!!!!!!!!
BON COURAGE et bonne continuation ! :)

[DouDou9455]

Aucun soucis au plaisir.
Bonne continuation et bon surf sur la toile !