quelqu'un peut-il m'aider à me débarrasser de ce keylogger?

  • DARKNOOB10
  • Born
  • Born
  • No Avatar
  • Inscription: Mar 28, 2008
  • Messages: 2
  • Status: Offline

Message Mars 28th, 2008, 12:34 pm

Running processes:
C: \ Windows \ system32 \ Dwm.exe
C: \ Windows \ system32 \ taskeng.exe
C: \ PROGRA ~ 1 \ McAfee.com \ Agent \ mcagent.exe
C: \ Windows \ RtHDVCpl.exe
C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe
C: \ Program Files \ Spare Backup \ SpareBackup.exe
C: \ Program Files \ BigFix \ Bigfix.exe
C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktopIndex.exe
C: \ Windows \ System32 \ rundll32.exe
C: \ Windows \ System32 \ rundll32. exe
C: \ Program Files \ SiteAdvisor \ 6253 \ siteadv.exe
C: \ Program Files \ Adobe \ Photoshop Album Starter Edition \ 3.2 \ Apps \ apdproxy.exe
C: \ Program Files \ Grisoft \ AVG7 \ avgcc.exe
C: \ Windows \ ehome \ ehtray.exe
C: \ Windows \ System32 \ spool \ drivers \ w32x86 \ 3 \ E_FATICEA.EXE
C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
C: \ Windows \ ehome \ ehmsas.exe
C: \ Users \ Juanita \ AppData \ Local \ Google \ Update \ 1.1.25.0 \ GoogleUpdate.exe
C: \ Program Files \ Windows Media Player \ wmpnscfg. exe
C: \ Program Files \ WinZip \ WZQKPICK.EXE
C: \ Users \ Juanita \ AppData \ Local \ YouTube \ Uploader \ youtubeuploader.exe
C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktopCrawl.exe
C: \ Windows \ system32 \ taskeng.exe
C: \ Program Files \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Program Files \ LimeWire \ LimeWire.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ Steam \ Steam.exe
C: \ Windows \ explorer.exe
C: \ Windows \ System32 \ mobsync.exe
C: \ Program Files \ Yahoo! \ Messenger \ ymsgr_tray.exe
C: \ Program Files \ Ventrilo \ Ventrilo.exe
C: \ Windows \ system32 \ searchfilterhost.exe
C: \ Program Files \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://www.gateway.com/g/sidepanel.html ... P&M=GT5620
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar , LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O1 - Hosts::: 1 localhost
O2 - BHO: & Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper. dll
O2 - BHO: (no name) - (089FD14D-132B-48FC-8861-0048AE113215) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - (377C180E-6F0E-4D4C-980F-F45BD3D40CF4) - C: \ Program Files \ McAfee \ MSK \ mcapbho.dll
O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O2 - BHO: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll
O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv.dll
O2 - BHO: scriptproxy - (7DB2D5A0-7241-4E79-B68D-6309F01C5231) - C: \ Program Files \ McAfee \ VirusScan \ scriptsn. dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1. dll
O2 - BHO: Windows Live Toolbar Helper - (BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb.dll
O2 - BHO: Browser Address Error Redirector - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - c: \ windows \ system32 \ BAE.dll
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - (BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb. dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O3 - Toolbar: McAfee SiteAdvisor - (0BF43445-2F28-4351-9252-17FE6E806AA0) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O3 - Toolbar: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll
O4 - HKLM \ .. \ Run: [Windows Defender]% ProgramFiles% \ Windows Defender \ MSASCui.exe-hide
O4 - HKLM \ .. \ Run: [IgfxTray] C: \ Windows \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ Windows \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [Persistence] C: \ Windows \ system32 \ igfxpers.exe
O4 - HKLM \ .. \ Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe" / startup
O4 - HKLM \ .. \ Run: [Spare Backup] "C: \ Program Files \ Spare Backup \ SpareBackup.exe" / silent
O4 - HKLM \ .. \ Run: [NapsterShell] C: \ Program Files \ Napster \ napster.exe / systray
O4 - HKLM \ .. \ Run: [BigFix] c: \ program files \ BigFix \ Bigfix.exe / atstartup
O4 - HKLM \ .. \ Run: [NvSvc] RUNDLL32.EXE C: \ Windows \ system32 \ nvsvc.dll, nvsvcStart
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ Windows \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ Windows \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [mcagent_exe] C: \ Program Files \ McAfee.com \ Agent \ mcagent. exe / runkey
O4 - HKLM \ .. \ Run: [SiteAdvisor] C: \ Program Files \ SiteAdvisor \ 6253 \ siteadv.exe
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8.0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Photoshop Album Starter Edition \ 3.2 \ Apps \ apdproxy.exe"
O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1. 6.0_01 \ bin \ jusched.exe "
O4 - HKLM \ .. \ RunOnce: [Launcher]% WINDIR% \ SMINST \ launcher.exe
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet
O4 - HKCU \ .. \ Run: [EPSON Stylus CX8400 Series] C: \ Windows \ system32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATICEA.EXE / FU "C: \ Windows \ TEMP \ E_S36E7.tmp" / EF " HKCU "
O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Users \ Juanita \ AppData \ Local \ Google \ Update \ 1.1.25.0 \ GoogleUpdate.exe" / lang en
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files \ Windows Media Player \ wmpnscfg.exe
O4 - HKCU \ .. \ Run: [AdobeUpdater] C: \ Program Files \ Fichiers communs \ Adobe \ Updater5 \ AdobeUpdater.exe
O4 - HKCU \ .. \ Run: [Steam] "c: \ program files \ Steam \ vapeur. exe "-silent
O4 - Startup: LimeWire On Startup.lnk = C: \ Program Files \ LimeWire \ LimeWire.exe
O4 - Startup: OneNote 2007 Screen Clipper et Launcher.lnk = C: \ Program Files \ Microsoft Office \ Office12 \ ONENOTEM.EXE
O4 - Startup: YouTube Uploader.lnk = C: \ Users \ Juanita \ AppData \ Local \ YouTube \ Uploader \ youtubeuploader.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C: \ Program Files \ WinZip \ WZQKPICK. EXE
O8 - Extra du menu contextuel: & Windows Live Search -- res://C : \ Program Files \ Windows Live Toolbar \ msntb.dll / search.htm
O8 - Extra du menu contextuel: Add to Windows & Live Favorites -- http://favorites.live.com/quickadd.aspx
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ npjpi160_01. dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ npjpi160_01.dll
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra button: Yahoo! Services - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL
O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O9 - Extra "Outils" menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper. dll
O10 - Unknown file dans Winsock LSP: c: \ windows \ system32 \ nlaapi.dll
O10 - Unknown file dans Winsock LSP: c: \ windows \ system32 \ napinsp.dll
O11 - Options group: [INTERNATIONAL] International *
O13 - Gopher Prefix:
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper. dll
O16 - DPF: (69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A) (GameLauncher Control) -- http://www.acclaim.com/cabs/acclaim_v4.cab
O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ WI1F86 ~ 1 \ MESSEN ~ 1 \ MSGRAP ~ 1.DLL
O18 - Protocol: ms-help - (314111C7-A502-11D2-BBCA-00C04F8EC294) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Help \ hxds.dll
O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ WI1F86 ~ 1 \ MESSEN ~ 1 \ MSGRAP ~ 1. DLL
O18 - Protocol: SiteAdvisor - (3A5DC592-7723-4EAA-9EE6-AF4222BCF879) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL
O20 - Winlogon Notify: igfxcui - C: \ Windows \ SYSTEM32 \ igfxdev.dll
O23 - Service: McAfee Application Installer Cleanup (0117381206203986) (0117381206203986mcinstcleanup) - McAfee, Inc - C: \ Windows \ TEMP \ 011738 ~ 1. EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C: \ Windows \ system32 \ agrsmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgemc.exe
O23 - Service: @% SystemRoot% \ ehome \ ehstart. dll, -101 (ehstart) - Unknown owner -% windir% \ system32 \ svchost.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ MSC \ mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc - C: \ Program Files \ Common Files \ McAfee \ MNA \ McNASvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc - c: \ PROGRA ~ 1 \ Common ~ 1 \ mcafee \ mcproxy \ mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcsysmon. exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc - C: \ Program Files \ McAfee \ MPF \ MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc - C: \ Program Files \ McAfee \ MSK \ MskSrver.exe
O23 - Service: PnkBstrA - Unknown owner - C: \ Windows \ system32 \ PnkBstrA.exe
O23 - Service: @% SystemRoot% \ system32 \ qwave.dll, -1 (QWAVE) - Unknown owner -% windir% \ system32 \ svchost. exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd - C: \ Program Files \ Spybot - Search & Destroy \ SDWinSec.exe
O23 - Service: @% SystemRoot% \ system32 \ seclogon.dll, -7001 (seclogon) - Unknown owner -% windir% \ system32 \ svchost.exe (file missing)
O23 - Service: SiteAdvisor Service - Unknown owner - C: \ Program Files \ SiteAdvisor \ 6253 \ SAService. exe
O23 - Service: Steam Client Service - Valve Corporation - C: \ Program Files \ Common Files \ Steam \ SteamService.exe
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Unknown owner -% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe (file missing)

J'ai couru et le détournement de ce qui est de mon rapport quelqu'un peut me dire si j'ai un logger sur mon ordinateur?
  • Anonymous
  • Bot
  • No Avatar
  • Inscription: 25 Feb 2008
  • Messages: ?
  • Loc: Ozzuland
  • Status: Online

Message Mars 28th, 2008, 12:34 pm

  • grinch2171
  • Moderator
  • Genius
  • Avatar de l’utilisateur
  • Inscription: Fév 11, 2004
  • Messages: 6741
  • Loc: Martinsburg, WV
  • Status: Offline

Message Mars 28th, 2008, 12:48 pm

Redémarrez en mode sans échec en redémarrant et en appuyant sur la touche F8. Run Cette Hijack et sélectionnez le texte suivant et fixe:
Quote:
O2 - BHO: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll

O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)

O3 - Toolbar: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll

O4 - HKLM \ .. \ RunOnce: [Launcher]% WINDIR% \ SMINST \ lanceur. exe

O23 - Service: McAfee Application Installer Cleanup (0117381206203986) (0117381206203986mcinstcleanup) - McAfee, Inc - C: \ Windows \ TEMP \ 011738 ~ 1.EXE
‎"Be polite, be professional, but have a plan to kill everybody you meet." Maj. Gen. James Mattis
  • DARKNOOB10
  • Born
  • Born
  • No Avatar
  • Inscription: Mar 28, 2008
  • Messages: 2
  • Status: Offline

Message Mars 28th, 2008, 12:58 pm

Running processes:
C: \ Windows \ Explorer.EXE
C: \ Program Files \ HijackThis \ HijackThis.exe
C: \ Windows \ system32 \ igfxsrvc. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://www.gateway.com/g/sidepanel.html ... P&M=GT5620
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar , LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O1 - Hosts::: 1 localhost
O2 - BHO: & Yahoo! Toolbar Helper - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper. dll
O2 - BHO: (no name) - (089FD14D-132B-48FC-8861-0048AE113215) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - (377C180E-6F0E-4D4C-980F-F45BD3D40CF4) - C: \ Program Files \ McAfee \ MSK \ mcapbho.dll
O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O2 - BHO: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll
O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv.dll
O2 - BHO: scriptproxy - (7DB2D5A0-7241-4E79-B68D-6309F01C5231) - C: \ Program Files \ McAfee \ VirusScan \ scriptsn. dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1. dll
O2 - BHO: Windows Live Toolbar Helper - (BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb.dll
O2 - BHO: Browser Address Error Redirector - (CA6319C0-31B7-401E-A518-A07C3DB8F777) - c: \ windows \ system32 \ BAE.dll
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - (BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0) - C: \ Program Files \ Windows Live Toolbar \ msntb. dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ PROGRA ~ 1 \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O3 - Toolbar: McAfee SiteAdvisor - (0BF43445-2F28-4351-9252-17FE6E806AA0) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O3 - Toolbar: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll
O4 - HKLM \ .. \ Run: [Windows Defender]% ProgramFiles% \ Windows Defender \ MSASCui.exe-hide
O4 - HKLM \ .. \ Run: [IgfxTray] C: \ Windows \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [HotKeysCmds] C: \ Windows \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [Persistence] C: \ Windows \ system32 \ igfxpers.exe
O4 - HKLM \ .. \ Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM \ .. \ Run: [Google Desktop Search] "C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktop.exe" / startup
O4 - HKLM \ .. \ Run: [Spare Backup] "C: \ Program Files \ Spare Backup \ SpareBackup.exe" / silent
O4 - HKLM \ .. \ Run: [NapsterShell] C: \ Program Files \ Napster \ napster.exe / systray
O4 - HKLM \ .. \ Run: [BigFix] c: \ program files \ BigFix \ Bigfix.exe / atstartup
O4 - HKLM \ .. \ Run: [NvSvc] RUNDLL32.EXE C: \ Windows \ system32 \ nvsvc.dll, nvsvcStart
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ Windows \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ Windows \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [mcagent_exe] C: \ Program Files \ McAfee.com \ Agent \ mcagent. exe / runkey
O4 - HKLM \ .. \ Run: [SiteAdvisor] C: \ Program Files \ SiteAdvisor \ 6253 \ siteadv.exe
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8.0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Photoshop Album Starter Edition \ 3.2 \ Apps \ apdproxy.exe"
O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1. 6.0_01 \ bin \ jusched.exe "
O4 - HKLM \ .. \ RunOnce: [Launcher]% WINDIR% \ SMINST \ launcher.exe
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ PROGRA ~ 1 \ Yahoo! \ MESSEN ~ 1 \ YAHOOM ~ 1.EXE"-quiet
O4 - HKCU \ .. \ Run: [EPSON Stylus CX8400 Series] C: \ Windows \ system32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATICEA.EXE / FU "C: \ Windows \ TEMP \ E_S36E7.tmp" / EF " HKCU "
O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Users \ Juanita \ AppData \ Local \ Google \ Update \ 1.1.25.0 \ GoogleUpdate.exe" / lang en
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files \ Windows Media Player \ wmpnscfg.exe
O4 - HKCU \ .. \ Run: [AdobeUpdater] C: \ Program Files \ Fichiers communs \ Adobe \ Updater5 \ AdobeUpdater.exe
O4 - HKCU \ .. \ Run: [Steam] "c: \ program files \ Steam \ vapeur. exe "-silent
O4 - Startup: LimeWire On Startup.lnk = C: \ Program Files \ LimeWire \ LimeWire.exe
O4 - Startup: OneNote 2007 Screen Clipper et Launcher.lnk = C: \ Program Files \ Microsoft Office \ Office12 \ ONENOTEM.EXE
O4 - Startup: YouTube Uploader.lnk = C: \ Users \ Juanita \ AppData \ Local \ YouTube \ Uploader \ youtubeuploader.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C: \ Program Files \ WinZip \ WZQKPICK. EXE
O8 - Extra du menu contextuel: & Windows Live Search -- res://C : \ Program Files \ Windows Live Toolbar \ msntb.dll / search.htm
O8 - Extra du menu contextuel: Add to Windows & Live Favorites -- http://favorites.live.com/quickadd.aspx
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ npjpi160_01. dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ npjpi160_01.dll
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra button: Yahoo! Services - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C: \ Program Files \ Yahoo! \ Common \ yiesrvc.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL
O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O9 - Extra "Outils" menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper. dll
O10 - Unknown file dans Winsock LSP: c: \ windows \ system32 \ nlaapi.dll
O10 - Unknown file dans Winsock LSP: c: \ windows \ system32 \ napinsp.dll
O11 - Options group: [INTERNATIONAL] International *
O13 - Gopher Prefix:
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C: \ Program Files \ Yahoo! \ Common \ Yinsthelper. dll
O16 - DPF: (69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A) (GameLauncher Control) -- http://www.acclaim.com/cabs/acclaim_v4.cab
O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ WI1F86 ~ 1 \ MESSEN ~ 1 \ MSGRAP ~ 1.DLL
O18 - Protocol: ms-help - (314111C7-A502-11D2-BBCA-00C04F8EC294) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Help \ hxds.dll
O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ WI1F86 ~ 1 \ MESSEN ~ 1 \ MSGRAP ~ 1. DLL
O18 - Protocol: SiteAdvisor - (3A5DC592-7723-4EAA-9EE6-AF4222BCF879) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O20 - AppInit_DLLs: C: \ PROGRA ~ 1 \ Google \ GOOGLE ~ 1 \ GOEC62 ~ 1.DLL
O20 - Winlogon Notify: igfxcui - C: \ Windows \ SYSTEM32 \ igfxdev.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C: \ Windows \ system32 \ agrsmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr. exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgemc.exe
O23 - Service: @% SystemRoot% \ ehome \ ehstart.dll, -101 (ehstart) - Unknown owner -% windir% \ system32 \ svchost.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C: \ Program Files \ Google \ Google Desktop Search \ GoogleDesktopManager. exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ MSC \ mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc - c: \ Program Files \ Common Files \ McAfee \ MNA \ McNASvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcods. exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc - c: \ PROGRA ~ 1 \ Common ~ 1 \ mcafee \ mcproxy \ mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc - C: \ PROGRA ~ 1 \ McAfee \ VIRUSS ~ 1 \ mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc - C: \ Program Files \ McAfee \ MPF \ MPFSrv. exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc - C: \ Program Files \ McAfee \ MSK \ MskSrver.exe
O23 - Service: PnkBstrA - Unknown owner - C: \ Windows \ system32 \ PnkBstrA.exe
O23 - Service: @% SystemRoot% \ system32 \ qwave.dll, -1 (QWAVE) - Unknown owner -% windir% \ system32 \ svchost.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd - C: \ Program Files \ Spybot - Search & Destroy \ SDWinSec. exe
O23 - Service: @% SystemRoot% \ system32 \ seclogon.dll, -7001 (seclogon) - Unknown owner -% windir% \ system32 \ svchost.exe (file missing)
O23 - Service: SiteAdvisor Service - Unknown owner - C: \ Program Files \ SiteAdvisor \ 6253 \ SAService.exe
O23 - Service: Steam Client Service - Valve Corporation - C: \ Program Files \ Common Files \ Steam \ SteamService.exe
O23 - Service: @% ProgramFiles% \ Windows Media Player \ wmpnetwk. exe, -101 (WMPNetworkSvc) - Unknown owner -% ProgramFiles% \ Windows Media Player \ wmpnetwk.exe (file missing)

est-ce mieux?
  • deathblade
  • Proficient
  • Proficient
  • Avatar de l’utilisateur
  • Inscription: Mar 08, 2007
  • Messages: 419
  • Loc: u.k
  • Status: Offline

Message Avril 1st, 2008, 10:52 am

O2 - BHO: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll

O3 - Toolbar: ALOT Toolbar - (5AA2BA46-9913-4dc7-9620-69AB0FA17AE7) - C: \ Program Files \ beaucoup \ bin \ alot.dll

O4 - HKLM \ .. \ RunOnce: [Launcher]% WINDIR% \ SMINST \ launcher.exe
This is a block of text that can be added to posts you make. There is a 500 character limit.

Afficher de l'information

  • Total des messages de ce sujet: 4 messages
  • Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 160 invités
  • Vous ne pouvez pas poster de nouveaux sujets
  • Vous ne pouvez pas répondre aux sujets
  • Vous ne pouvez pas éditer vos messages
  • Vous ne pouvez pas supprimer vos messages
  • Vous ne pouvez pas joindre des fichiers
 
 

© 2011 Unmelted, LLC. Ozzu® est une marque déposée de Unmelted, LLC