curseur qui se deplace tout seul (réglé) • page 4

[flot76]

je ne trouve pas formaté

[flot76]

il me dit que le fichier a deja et analysé

il me propose afficher le dernier rapport ou réanalysé le fichier maintenant

[r@in | b0w]

Pas de soucis pour l'analyse précédente.

Tu affiches le dernier rapport puis tu fais la manipulation pour copier-coller le résultat.

[flot76]

voici le rapport de virustotal



Fichier Icon.exe reçu le 2009.05.24 20:46:36 (UTC)
Situation actuelle: terminé

Résultat: 0/40 (0.00%)
Formaté Impression des résultats
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.24 -
AhnLab-V3 5.0.0.2 2009.05.24 -
AntiVir 7.9.0.168 2009.05.24 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.24 -
Avast 4.8.1335.0 2009.05.24 -
AVG 8.5.0.339 2009.05.24 -
BitDefender 7.2 2009.05.24 -
CAT-QuickHeal 10.00 2009.05.23 -
ClamAV 0.94.1 2009.05.24 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.24 -
eSafe 7.0.17.0 2009.05.24 -
eTrust-Vet 31.6.6519 2009.05.23 -
F-Prot 4.4.4.56 2009.05.24 -
F-Secure 8.0.14470.0 2009.05.24 -
Fortinet 3.117.0.0 2009.05.24 -
GData 19 2009.05.24 -
Ikarus T3.1.1.49.0 2009.05.24 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.24 -
McAfee 5625 2009.05.24 -
McAfee+Artemis 5625 2009.05.24 -
McAfee-GW-Edition 6.7.6 2009.05.24 -
Microsoft 1.4701 2009.05.24 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.24 -
Panda 10.0.0.14 2009.05.24 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.24 -
Rising 21.30.62.00 2009.05.24 -
Sophos 4.42.0 2009.05.24 -
Sunbelt 3.2.1858.2 2009.05.24 -
Symantec 1.4.4.12 2009.05.24 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.23 -
VBA32 3.12.10.5 2009.05.24 -
ViRobot 2009.5.23.1749 2009.05.23 -
VirusBuster 4.6.5.0 2009.05.24 -
Information additionnelle
File size: 221184 bytes
MD5 : 851ff453f9f892ff532770ddccd2b422
SHA1 : 72a4c7cdb89a265238c0b71f96deaa5f4e002a7b
SHA256: fdea8e15428a5f5730ea7106d05e54f00c02cbfb80ddec5b553c82dcb3f5e1e1
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xAE83
timedatestamp.....: 0x430AD59C (Tue Aug 23 09:51:56 2005)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2380F 0x24000 6.57 59f2d945db5f1c119cb75d90bc9991f1
.rdata 0x25000 0x8B62 0x9000 4.78 d886e04bb81f15f20b51cf47b0e8766a
.data 0x2E000 0x88E8 0x5000 2.29 c14ac942c9c011d0fc9005bb3268ca63
.rsrc 0x37000 0x2540 0x3000 4.00 0ef1fc6c2888b33dea2b1eae50b5840f

( 12 imports )

> advapi32.dll: RegCloseKey, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExA
> comctl32.dll: -
> comdlg32.dll: GetFileTitleA
> gdi32.dll: DeleteObject, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreateSolidBrush, PtVisible, RectVisible, TextOutA, ExtTextOutA, Escape, GetTextColor, GetBkColor, DPtoLP, LPtoDP, GetMapMode, PatBlt, CreateDIBitmap, CreateCompatibleDC, BitBlt, GetTextExtentPointA, IntersectClipRect, ScaleWindowExtEx, SetWindowExtEx, SetViewportExtEx, OffsetViewportOrgEx, ScaleViewportExtEx, SetMapMode, SetViewportOrgEx, SetBkMode, GetStockObject, SelectObject, SaveDC, RestoreDC, CreateBitmap, GetObjectA, DeleteDC, SetTextColor, GetClipBox, SetBkColor
> kernel32.dll: GetStartupInfoA, TerminateProcess, RaiseException, ExitProcess, GetCommandLineA, HeapFree, HeapAlloc, RtlUnwind, HeapReAlloc, SetStdHandle, GetTimeZoneInformation, UnhandledExceptionFilter, FreeEnvironmentStringsA, HeapSize, GetEnvironmentStrings, GetTickCount, GetFileType, GetACP, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, GetOEMCP, FreeEnvironmentStringsW, GetCPInfo, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, IsBadReadPtr, IsBadCodePtr, FormatMessageA, CompareStringA, CompareStringW, SetEnvironmentVariableA, FileTimeToSystemTime, FileTimeToLocalFileTime, SetErrorMode, GetFileTime, GetFileSize, GetFileAttributesA, GetFullPathNameA, GetThreadLocale, GetVolumeInformationA, FindClose, LockFile, SetEndOfFile, UnlockFile, WriteFile, FlushFileBuffers, SetFilePointer, GetCurrentProcess, ReadFile, CreateFileA, DuplicateHandle, SizeofResource, GetEnvironmentStringsW, SetHandleCount, WritePrivateProfileStringA, GlobalGetAtomNameA, lstrcmpiA, GlobalAddAtomA, GlobalFindAtomA, GlobalDeleteAtom, lstrcpyA, GetModuleHandleA, GetSystemDirectoryA, GetPrivateProfileStringA, LoadLibraryA, GetProcAddress, FreeLibrary, GetWindowsDirectoryA, FindFirstFileA, SetUnhandledExceptionFilter, GetProcessVersion, GetProfileStringA, GlobalFlags, TlsGetValue, LocalReAlloc, TlsSetValue, EnterCriticalSection, GlobalReAlloc, LeaveCriticalSection, TlsFree, GlobalHandle, DeleteCriticalSection, TlsAlloc, InitializeCriticalSection, LocalFree, LocalAlloc, lstrcpynA, GetLastError, MulDiv, SetLastError, MultiByteToWideChar, WideCharToMultiByte, InterlockedDecrement, InterlockedIncrement, lstrlenA, GlobalUnlock, GlobalFree, CloseHandle, GetModuleFileNameA, GlobalLock, GlobalAlloc, lstrcmpA, GetCurrentThread, FindResourceA, LoadResource, LockResource, GetVersion, lstrcatA, GetCurrentThreadId, VirtualAlloc, IsBadWritePtr, GetStdHandle, GetEnvironmentVariableA, DeleteFileA
> ole32.dll: CoFreeUnusedLibraries, OleUninitialize, OleInitialize, CoTaskMemFree, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, CoGetClassObject, CLSIDFromString, CLSIDFromProgID, StgOpenStorageOnILockBytes, CoRegisterMessageFilter, CoRevokeClassObject, OleFlushClipboard, OleIsCurrentClipboard, CoTaskMemAlloc
> oleaut32.dll: -, -, -, -, -, -, -, -, -
> oledlg.dll: -
> olepro32.dll: -
> shell32.dll: Shell_NotifyIconA
> user32.dll: CopyAcceleratorTableA, SetRect, GetNextDlgGroupItem, MessageBeep, CharNextA, InvalidateRect, InflateRect, RegisterClipboardFormatA, PostThreadMessageA, GetSysColorBrush, LoadCursorA, GetDesktopWindow, PtInRect, GetClassNameA, GrayStringA, DrawTextA, TabbedTextOutA, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, DestroyMenu, LoadStringA, MapDialogRect, SetWindowContextHelpId, EndDialog, CreateDialogIndirectParamA, GetMessageA, TranslateMessage, GetActiveWindow, ValidateRect, GetCursorPos, SetCursor, GetMenuCheckMarkDimensions, LoadBitmapA, GetMenuState, ModifyMenuA, SetMenuItemBitmaps, CheckMenuItem, EnableMenuItem, CharUpperA, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, PostMessageA, UpdateWindow, SendDlgItemMessageA, MapWindowPoints, PeekMessageA, GetFocus, SetActiveWindow, IsWindow, SetFocus, AdjustWindowRectEx, ScreenToClient, CopyRect, IsWindowVisible, GetTopWindow, MessageBoxA, IsChild, GetParent, GetCapture, WinHelpA, GetClassInfoA, RegisterClassA, GetMenu, GetMenuItemCount, GetSubMenu, GetMenuItemID, GetDlgItem, GetWindowTextLengthA, GetWindowTextA, GetDlgCtrlID, GetKeyState, DefWindowProcA, DestroyWindow, CreateWindowExA, SetWindowsHookExA, GetNextDlgTabItem, IsWindowEnabled, DispatchMessageA, CallNextHookEx, GetClassLongA, SetPropA, UnhookWindowsHookEx, GetPropA, CallWindowProcA, RemovePropA, GetMessageTime, GetMessagePos, GetLastActivePopup, GetForegroundWindow, SetForegroundWindow, GetWindow, GetWindowLongA, SetWindowLongA, SetWindowPos, RegisterWindowMessageA, OffsetRect, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetWindowRect, wsprintfA, IsIconic, GetSystemMetrics, GetClientRect, DrawIcon, SetTimer, GetSystemMenu, AppendMenuA, SendMessageA, LoadIconA, EnableWindow, RegisterHotKey, UnregisterHotKey, GetSysColor, PostQuitMessage, DrawFocusRect, UnregisterClassA, HideCaret, ShowCaret, ExcludeUpdateRgn, DefDlgProcA, IsWindowUnicode
> winspool.drv: ClosePrinter, DocumentPropertiesA, OpenPrinterA

( 0 exports )

TrID : File type identification
InstallShield setup (42.6%)
Win32 Executable MS Visual C++ (generic) (37.3%)
Win32 Executable Generic (8.4%)
Win32 Dynamic Link Library (generic) (7.5%)
Generic Win/DOS Executable (1.9%)
ThreatExpert: http://www.threatexpert.com/report.aspx ... ddccd2b422
ssdeep: 6144:Q+3q9vqiNd5v++fGMNH+/ezZ/pOKmG9F+Gfla:Q+3q9R3v+Kj
PEiD : Armadillo v1.71
RDS : NSRL Reference Data Set
-

[flot76]

desolé mon pc a planté deux fois de suite je refais le scan avec diaghelp et je copie le rapport dans mon prochain message

[Skynet]

:lol::lol::lol:

Je donne, je donne!

Bah tiens

Bizarre quand même ce faux-positif.

@flot76 : T'inquiète je vois tous les messages, pas besoin de MP .

En attendant R@in | b0w, on pourrait tenter une mise à jour du touchpad, voici
ton pilote : ICI<==

[flot76]

je termine de mettre le rapport de diaghelp (encore 2 min a peut prés) et je fais la mise a jour du pilote aussitot

[flot76]

petit souci, j'ai bien fais envoyé le rappot via upload malekal mais je n'ai pas le fichier resutat dans cdocument and setting....

comment je fais pour le recuperer

[Skynet]

Il devrait se trouver sur ton bureau . A moins que tu as spécifié un autre
chemin d'enregistrement ?

[flot76]

le seul rapport que j'ai est le suivant

en utilisant l'option 1 de diaghelp



catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-25 00:18:11
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden services: 0
hidden files: 0



est ce que s'est ça??? parce qu'il s'appelle cathme et non pas resultat

[flot76]

le second rapport et le suivant qui lui s'appelle bien resultat en utilisant l'option 2 de diaghelp



FPort v2.0 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
http://www.foundstone.com

Pid Process Port Proto Path
1036 -> 1027 TCP
996 -> 135 TCP
1408 -> 2869 TCP
504 CLMLService -> 12346 TCP C:Program FilesCyberLinkShared FilesCLML_NTServiceCLMLService.exe
504 CLMLService -> 61273 TCP C:Program FilesCyberLinkShared FilesCLML_NTServiceCLMLService.exe
4 System -> 139 TCP
4 System -> 445 TCP
3096 iexplore -> 1591 TCP C:Program FilesInternet Exploreriexplore.exe
3096 iexplore -> 1592 TCP C:Program FilesInternet Exploreriexplore.exe

1408 -> 1032 UDP
1036 -> 1129 UDP
2031706 -> 123 UDP
167880896 -> 1900 UDP
996 -> 445 UDP
7864320 -> 64864 UDP
504 CLMLService -> 1051 UDP C:Program FilesCyberLinkShared FilesCLML_NTServiceCLMLService.exe
504 CLMLService -> 4500 UDP C:Program FilesCyberLinkShared FilesCLML_NTServiceCLMLService.exe
0 System -> 1025 UDP
0 System -> 1033 UDP
0 System -> 1045 UDP
0 System -> 1048 UDP
0 System -> 1056 UDP
0 System -> 123 UDP
0 System -> 1309 UDP
0 System -> 137 UDP
0 System -> 138 UDP
0 System -> 1900 UDP
4 System -> 500 UDP
4 System -> 50011 UDP
0 System -> 51983 UDP
0 System -> 52164 UDP
0 System -> 54834 UDP
0 System -> 55141 UDP
0 System -> 57113 UDP
0 System -> 57294 UDP
0 System -> 58200 UDP
0 System -> 59267 UDP
0 System -> 59574 UDP
0 System -> 64529 UDP
0 System -> 64704 UDP
3096 iexplore -> 50408 UDP C:Program FilesInternet Exploreriexplore.exe
3096 iexplore -> 51676 UDP C:Program FilesInternet Exploreriexplore.exe



PsList 1.26 - Process Information Lister
Copyright (C) 1999-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

Process information for **:

Name Pid Pri Thd Hnd VM WS Priv
Idle 0 0 1 0 0 16 0
System 4 8 59 811 1904 44 0
smss 608 11 3 21 3828 56 164
csrss 672 13 13 673 29148 2436 2040
winlogon 696 13 16 426 53444 672 6384
services 740 9 16 295 22720 928 1796
spoolsv 156 8 10 108 43000 840 3068
sched 204 8 8 161 45836 620 3584
HidService 340 8 2 45 18076 200 1588
avguard 448 8 27 98 99204 8556 57016
CLCapSvc 460 8 4 137 40120 292 4628
CLMLServer 480 8 2 26 15080 32 460
CLMLService 504 8 4 266 44880 1192 12348
FTRTSVC 524 8 2 71 20696 68 984
slmdmsr 644 8 3 20 9208 200 228
sp_rsser 664 8 12 124 91440 4120 55504
svchost 916 8 16 213 62892 916 3140
AlertModule 2812 8 2 114 28376 1276 1032
FTCOMModule 3852 8 3 76 26452 416 972
wmiprvse 4020 8 6 152 38836 1712 1940
svchost 996 8 11 378 36984 1152 1916
alg 1036 8 6 104 33568 112 1204
svchost 1156 8 84 1667 152008 7868 16776
wuauclt 2596 8 3 133 49668 60 5636
CLSched 1188 8 3 97 37076 332 1128
svchost 1260 8 6 87 33692 1196 3828
svchost 1408 8 16 228 43984 1832 5432
vsmon 1488 8 23 399 94824 11264 24504
svchost 2712 8 8 93 38280 208 1608
lsass 752 9 19 379 42800 1076 3800
explorer 1656 8 17 486 94444 4268 16144
cmd 2140 8 1 21 14536 1692 1592
pslist 3884 13 2 80 18432 1828 884
SynTPLpr 2384 8 4 71 24632 284 880
SynTPEnh 2424 8 4 109 40156 284 2428
VTTimer 2432 8 1 32 17484 204 592
VTTrayp 2464 8 1 35 32236 384 1208
STDSB 2480 8 1 18 17064 188 512
SOUNDMAN 2492 8 2 66 32420 204 1940
jusched 2500 8 1 24 19140 48 576
PCMService 2520 8 2 115 49304 752 4316
SystrayApp 2604 8 2 112 42744 508 1924
Launcher 3416 8 6 271 82360 6384 15436
ConnectivityManager 3624 8 7 197 51016 2384 2848
CoreCom 3668 8 19 315 71520 2780 5724
OraConfigRecover 3844 8 1 15 17392 304 576
Deskboard 3640 8 7 238 101748 4824 17560
qttask 2744 8 2 41 28692 192 744
avgnt 2808 8 5 71 39904 1420 2392
SpywareTerminatorShield 2912 8 5 75 41704 3968 7220
zlclient 2940 8 6 119 57188 3140 8704
msnmsgr 2992 8 21 496 118592 1276 12472
GoogleToolbarNotifier 3012 8 4 177 44064 272 2928
IEXPLORE 3096 8 25 773 267904 42952 57108
IEXPLORE 2132 8 12 467 117704 2828 15232

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
explorer.exe pid: 1656
Command line: C:WINDOWSExplorer.EXE

Base Size Version Path
0x76f80000 0x7f000 2001.12.4414.0308 C:WINDOWSsystem32CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:WINDOWSsystem32COMRes.dll
0x76ac0000 0x11000 3.05.2284.0000 C:WINDOWSsystem32ATL.DLL
0x164a0000 0x23000 5.02.5721.5145 C:WINDOWSsystem32WPDShServiceObj.dll
0x109c0000 0x2c000 5.02.5721.5145 C:WINDOWSsystem32PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:WINDOWSsystem32PortableDeviceApi.dll
0x00b60000 0x6000 C:WINDOWSsystem32driversmxkeybd.dll
0x10000000 0xe000 7.00.0000.1333 C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
0x7c340000 0x56000 7.10.3052.0004 C:WINDOWSsystem32MSVCR71.dll
0x00be0000 0x7000 1.00.0004.0730 C:Program FilesOrange HSSLauncherInactivity.Dll
0x02990000 0x1c000 7.00.0000.0000 C:Program FilesAdobeAcrobat 7.0ActiveXPDFShell.dll
0x00f20000 0x14000 4.65.0000.0000 C:Program Files7-Zip7-zip.dll
0x00f40000 0xb000 7.00.0483.0000 C:Program Filesone LabsoneAlarmzlavscan.dll
0x00f50000 0x4000 5.03.0017.0000 C:Program Filesone LabsoneAlarmzlavscan_Loc040c.dll
0x00f60000 0x2e000 1.01.0000.0015 C:Program FilesSpyware Terminatorsptcontmenu.dll
0x01120000 0x18000 9.00.0000.0003 C:Program FilesAviraAntiVir Desktopshlext.dll
0x789e0000 0x3a1000 9.00.30729.0001 C:WINDOWSWinSxSx86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943mfc90u.dll
0x78520000 0xa3000 9.00.30729.0001 C:WINDOWSWinSxSx86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963eMSVCR90.dll
0x5d360000 0xf000 9.00.30729.0001 C:WINDOWSWinSxSx86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03MFC90FRA.DLL
0x01360000 0x12000 1.01.0000.0000 C:Program FilesMalwarebytes' Anti-Malwarembamext.dll
0x74730000 0x3d000 3.525.1117.0000 C:WINDOWSsystem32ODBC32.dll
0x03140000 0x18000 3.525.1117.0000 C:WINDOWSsystem32odbcint.dll
0x60980000 0x7000 3.01.4000.1823 C:WINDOWSsystem32MSISIP.DLL
0x74e10000 0x10000 5.06.0000.8820 C:WINDOWSsystem32wshext.dll
0x73d20000 0xfe000 6.02.4131.0000 C:WINDOWSsystem32MFC42.DLL
0x61d70000 0xe000 6.00.8665.0000 C:WINDOWSsystem32MFC42LOC.DLL
0x59000000 0xe000 5.06.0000.6626 C:WINDOWSsystem32wshFR.DLL

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
winlogon.exe pid: 696
Command line: winlogon.exe

Base Size Version Path
0x01000000 0x81000 ??C:WINDOWSsystem32winlogon.exe
0x74730000 0x3d000 3.525.1117.0000 C:WINDOWSsystem32ODBC32.dll
0x20000000 0x18000 3.525.1117.0000 C:WINDOWSsystem32odbcint.dll
0x77000000 0xd4000 2001.12.4414.0258 C:WINDOWSsystem32COMRes.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:WINDOWSsystem32CLBCATQ.DLL

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
IEXPLORE.EXE pid: 3096
Command line: "C:Program FilesInternet Exploreriexplore.exe"

Base Size Version Path
0x76f80000 0x7f000 2001.12.4414.0308 C:WINDOWSsystem32CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:WINDOWSsystem32COMRes.dll
0x10000000 0xe000 7.00.0000.1333 C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
0x7c340000 0x56000 7.10.3052.0004 C:WINDOWSsystem32MSVCR71.dll
0x29500000 0x67000 5.00.0818.0005 C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
0x017f0000 0x48000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
0x745e0000 0x2c6000 3.01.4000.2435 C:WINDOWSsystem32msi.dll
0x27500000 0x11a000 5.00.0818.0005 C:Program FilesFichiers communsMicrosoft SharedWindows Livemsidcrl40.dll
0x74bf0000 0x2c000 4.02.5406.0000 C:WINDOWSsystem32OLEACC.dll
0x76010000 0x65000 6.02.3104.0000 C:WINDOWSsystem32MSVCP60.dll
0x01870000 0x3fb000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_6D0D6FD66D664927.dll
0x01dc0000 0x60000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_fr_FA1CC82C3C7D752E.dll
0x01e20000 0xa8000 5.01.1309.3572 C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
0x02010000 0x277000 1.00.0610.27482 C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
0x748f0000 0x130000 8.50.2162.0000 C:WINDOWSsystem32msxml3.dll
0x02fb0000 0x7000 1.00.0004.0730 C:Program FilesOrange HSSLauncherInactivity.Dll
0x039f0000 0x27000 3.10.0349.0000 C:WINDOWSsystem32msls31.dll
0x75be0000 0x6e000 5.06.0000.8820 C:WINDOWSsystem32jscript.dll
0x01f10000 0x6000 C:WINDOWSsystem32driversmxkeybd.dll
0x05000000 0x488000 10.00.0022.0087 C:WINDOWSsystem32MacromedFlashFlash10b.ocx
0x73250000 0x67000 5.06.0000.8820 C:WINDOWSsystem32vbscript.dll
0x73d20000 0xfe000 6.02.4131.0000 C:WINDOWSsystem32MFC42.DLL
0x61d70000 0xe000 6.00.8665.0000 C:WINDOWSsystem32MFC42LOC.DLL
0x6c270000 0x36000 6.03.2900.2781 C:WINDOWSsystem32dxtrans.dll
0x76ac0000 0x11000 3.05.2284.0000 C:WINDOWSsystem32ATL.DLL
------------------------------------------------------------------------------
IEXPLORE.EXE pid: 2132
Command line: "C:Program FilesInternet Exploreriexplore.exe" http://upload.malekal.com

Base Size Version Path
0x76f80000 0x7f000 2001.12.4414.0308 C:WINDOWSsystem32CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:WINDOWSsystem32COMRes.dll
0x10000000 0xe000 7.00.0000.1333 C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
0x7c340000 0x56000 7.10.3052.0004 C:WINDOWSsystem32MSVCR71.dll
0x29500000 0x67000 5.00.0818.0005 C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
0x017f0000 0x48000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
0x745e0000 0x2c6000 3.01.4000.2435 C:WINDOWSsystem32msi.dll
0x27500000 0x11a000 5.00.0818.0005 C:Program FilesFichiers communsMicrosoft SharedWindows Livemsidcrl40.dll
0x74bf0000 0x2c000 4.02.5406.0000 C:WINDOWSsystem32OLEACC.dll
0x76010000 0x65000 6.02.3104.0000 C:WINDOWSsystem32MSVCP60.dll
0x01870000 0x3fb000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_6D0D6FD66D664927.dll
0x01dc0000 0x60000 6.01.1518.0856 C:Program FilesGoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_fr_FA1CC82C3C7D752E.dll
0x01e20000 0xa8000 5.01.1309.3572 C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
0x01ff0000 0x277000 1.00.0610.27482 C:Program FilesGoogleGoogle ToolbarComponentfastsearch_A8904FB862BD9564.dll
0x02fd0000 0x7000 1.00.0004.0730 C:Program FilesOrange HSSLauncherInactivity.Dll
0x748f0000 0x130000 8.50.2162.0000 C:WINDOWSsystem32msxml3.dll
0x016f0000 0x27000 3.10.0349.0000 C:WINDOWSsystem32msls31.dll
0x04170000 0x6000 C:WINDOWSsystem32driversmxkeybd.dll
0x76ac0000 0x11000 3.05.2284.0000 C:WINDOWSsystem32ATL.DLL
0x16210000 0x27e000 5.02.5721.5145 C:WINDOWSsystem32wpdshext.dll
0x10930000 0x49000 5.02.5721.5145 C:WINDOWSsystem32PortableDeviceApi.dll
0x01ef0000 0x3d000 3.525.1117.0000 C:WINDOWSsystem32ODBC32.dll
0x04210000 0x18000 3.525.1117.0000 C:WINDOWSsystem32odbcint.dll
0x07160000 0x46000 5.02.5721.5145 C:WINDOWSsystem32Audiodev.dll
0x15110000 0x25a000 11.00.5721.5145 C:WINDOWSsystem32WMVCore.DLL
0x11c70000 0x39000 11.00.5721.5145 C:WINDOWSsystem32WMASF.DLL
0x04230000 0x1c000 7.00.0000.0000 C:Program FilesAdobeAcrobat 7.0ActiveXPDFShell.dll

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
services.exe pid: 740
Command line: C:WINDOWSsystem32services.exe

Base Size Version Path
0x76010000 0x65000 6.02.3104.0000 C:WINDOWSsystem32MSVCP60.dll
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A45F-C49B

Répertoire de C:Program Files

24/05/2009 23:03 <REP> .
24/05/2009 23:03 <REP> ..
24/05/2009 23:03 <REP> 7-Zip
14/04/2009 09:55 <REP> Adobe
14/04/2009 01:44 <REP> Alwil Software
22/05/2009 16:28 <REP> Avira
14/04/2009 09:55 <REP> ComPlus Applications
14/04/2009 09:55 <REP> CyberLink
03/05/2009 15:29 <REP> Daniusoft
14/04/2009 03:03 <REP> Fichiers communs
18/04/2009 16:00 <REP> Google
14/04/2009 09:58 <REP> Internet Explorer
14/04/2009 09:55 <REP> Java
14/04/2009 09:55 <REP> Learn2.com
23/05/2009 19:38 <REP> Malwarebytes' Anti-Malware
14/04/2009 09:59 <REP> Messenger
14/04/2009 02:20 <REP> Microsoft
06/05/2009 11:29 <REP> microsoft frontpage
14/04/2009 09:59 <REP> Movie Maker
14/04/2009 09:55 <REP> MSN
14/04/2009 09:55 <REP> MSN Gaming Zone
14/04/2009 10:02 <REP> NetMeeting
14/04/2009 10:02 <REP> Online Services
02/05/2009 20:26 <REP> Orange
14/04/2009 01:35 <REP> Orange HSS
14/04/2009 10:02 <REP> Outlook Express
14/04/2009 10:02 <REP> QuickTime
14/04/2009 09:55 <REP> Real
14/04/2009 01:19 <REP> SAGEM
14/04/2009 01:18 <REP> Securitoo
14/04/2009 10:02 <REP> Services en ligne
14/04/2009 09:55 <REP> Sonic
22/05/2009 17:38 <REP> Spybot - Search & Destroy
22/05/2009 21:24 <REP> Spyware Terminator
23/05/2009 22:32 <REP> Sunbelt Software
14/04/2009 09:55 <REP> Synaptics
14/04/2009 09:55 <REP> VIA
14/04/2009 09:55 <REP> Viewpoint
14/04/2009 02:20 <REP> Windows Live
14/04/2009 02:20 <REP> Windows Live SkyDrive
01/05/2009 12:56 <REP> Windows Media Connect 2
01/05/2009 12:56 <REP> Windows Media Player
14/04/2009 10:03 <REP> Windows NT
14/04/2009 09:55 <REP> xerox
24/05/2009 00:31 <REP> Zone Labs
0 fichier(s) 0 octets
45 Rép(s) 34 874 212 352 octets libres
C:Documents and SettingsAll UsersApplication DataSpyware Terminatorsp_rsdel.exe
C:Documents and Settings**BureauDiagHelpDiagHelpcatchme.exe
C:Documents and Settings**BureauDiagHelpDiagHelpdiff.exe
C:Documents and Settings**BureauDiagHelpDiagHelpdumphive.exe
C:Documents and Settings**BureauDiagHelpDiagHelpFilesInfoCmd.exe
C:Documents and Settings**BureauDiagHelpDiagHelpfind2.exe
C:Documents and Settings**BureauDiagHelpDiagHelpFport.exe
C:Documents and Settings**BureauDiagHelpDiagHelpgrep.exe
C:Documents and Settings**BureauDiagHelpDiagHelpgzip.exe
C:Documents and Settings**BureauDiagHelpDiagHelpKProcCheck.exe
C:Documents and Settings**BureauDiagHelpDiagHelpLFiles.exe
C:Documents and Settings**BureauDiagHelpDiagHelpLISTDLLS.exe
C:Documents and Settings**BureauDiagHelpDiagHelpmbr.exe
C:Documents and Settings**BureauDiagHelpDiagHelpmd5sums.exe
C:Documents and Settings**BureauDiagHelpDiagHelpPsinfo.exe
C:Documents and Settings**BureauDiagHelpDiagHelppslist.exe
C:Documents and Settings**BureauDiagHelpDiagHelpsigcheck.exe
C:Documents and Settings**BureauDiagHelpDiagHelpstreams.exe
C:Documents and Settings**aBureauDiagHelpDiagHelpswreg.exe
C:Documents and Settings**BureauDiagHelpDiagHelp ar.exe
C:Documents and Settings**Local SettingsApplication DataDictionnaire Freelangdict.exe
C:Documents and Settings**Local SettingsApplication DataDictionnaire Freelangunins000.exe
C:Documents and Settings**aLocal SettingsApplication DataDictionnaire Freelangunins001.exe
C:Documents and Settings**Local SettingsTemp\_is95.exe
C:Documents and Settings**Local SettingsTemp5240902808WindowsXP-KB943232-x86-ENU.exe
C:Documents and Settings**Local SettingsTemp5240905527instdriversx32 egcat.exe
C:Documents and Settings**Local SettingsTemp5240910747instdriversx32 egcat.exe
C:Documents and Settings**Local SettingsTemp5240911718z4barSpInstall.exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE5BV324TT7z465[1].exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE56BXA7I3QzlsSetup_70_483_000_fr[1].exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE5LOJS97BRzaSetup_fr[1].exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE5LOJS97BRzlsSetup_70_483_000_fr[1].exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE5RJ53YFRBzaSetup_80_298_000_en[1].exe
C:Documents and Settings**Local SettingsTemporary Internet FilesContent.IE5RJ53YFRBzlsSetup_70_483_000_fr[1].exe
C:Documents and Settings**Mes documents!!!HiJackThis.exe

[Skynet]

Yep, c'est bien ça et le premier rapport est clean.

Dans le second, une chose m'interpelle, tu as Avast en plus d'Antivir ?

P.S. : Bon choix pour Zone Alarm et j'ai encore enlevé ton nom+prénom .

[flot76]

non je l'ai desinstallé pourquoi

et en plus j'ai respecté la procedure

[Skynet]

Parce qu'il y avait encore une trace, mais si tu l'as désinstallé aucun problème.

[flot76]

ok j'ai cru que c'etait comme norton qu'il fallait aller le desinstaller dans un fichier puis un autre puis un autre...ect


je termine d'envoyé le message avec le dernier rapport