Oui j'aime avoir du plaisir.
Bon je crois que l'on s'égare...
Je testerais en rentrant.
![]() ![]() ![]() ![]() ![]() ![]() ![]() |
/!\ Désactives ton antivirus afin de ne pas ralentir l'analyse et d'afficher des messages d'alerte ! /!\
[HKLM\Software\CrazyLoader] => Infection BT (Adware.SPointer)
O43 - CFD: 01/01/2011 - 19:23:29 - [0,418] ----D C:\Users\maison\AppData\Local\crazyloader Air => Infection BT (Adware.SPointer)
[HKLM\Software\CrazyLoader] => Infection BT (Adware.SPointer)
C:\Users\maison\AppData\Local\Crazyloader Air => Infection BT (Adware.SPointer)
O43 - CFD: 16/09/2011 - 09:07:37 - [45,266] ----D C:\ProgramData\{D3B41B92-9BC2-43EB-916A-4FA9E8191837}
O43 - CFD: 18/10/2012 - 18:16:58 - [0,002] --H-D C:\Users\maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
O68 - StartMenuInternet: <FIREFOX.EXE> <Aurora>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Aurora\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Aurora>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Aurora\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Aurora>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Aurora\uninstall\helper.exe (.not file.)
G:\recup\download\winzip\Keygen WinZip 11.1 International.exe => Crack, KeyGen, Keymaker - Possible Malware
G:\recup\download\winzip\Keygen WinZip 11.1 International.exe => Crack, KeyGen, Keymaker - Possible Malware
O87 - FAEL: "TCP Query User{6C3260D5-CE61-4430-8584-F3C7729C2190}G:\dowload\ogamebot105\ogamebot.exe" |In - Private - P6 - TRUE | .(...) -- G:\dowload\ogamebot105\ogamebot.exe (.not file.)
O87 - FAEL: "UDP Query User{B5D2AD83-CC84-4CEB-8E00-77C1D031B9BB}G:\dowload\ogamebot105\ogamebot.exe" |In - Private - P17 - TRUE | .(...) -- G:\dowload\ogamebot105\ogamebot.exe (.not file.)
O87 - FAEL: "{21A06E27-E7E1-4674-BD8C-4DF497046083}" |In - Private - P6 - TRUE | .(...) -- C:\Users\maison\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EQ10MXUU\SweetImSetup.exe (.not file.)
O87 - FAEL: "{BB984574-B83C-4E31-88E5-0294FC7EBD26}" |In - Private - P17 - TRUE | .(...) -- C:\Users\maison\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EQ10MXUU\SweetImSetup.exe (.not file.)
O87 - FAEL: "{6219C150-2086-495D-A3AC-5082DCB2CED6}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
O87 - FAEL: "{208238AA-2B62-45B5-AADF-8229F63C1045}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
O87 - FAEL: "{F1D667A6-2E23-4D0E-857A-23BC9B38167F}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
O87 - FAEL: "{0A2B7590-E797-4714-989F-E16E27A40A6B}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
O87 - FAEL: "{C8CD2142-F8D7-43FA-87F9-9C63BA27D744}" | In - Private - P6 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
O87 - FAEL: "{C3FD38C8-A5E0-4AD2-B1C1-0BED55999DE4}" | In - Private - P17 - FALSE | .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
O87 - FAEL: "{6153054F-3E32-4362-A8FF-7650DA7A93AE}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe (.not file.)
O87 - FAEL: "{B645C7C1-2A26-417F-82B1-6C1C8E9666AE}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe (.not file.)
[MD5.F4762082DDCFD241BE8BA5DD35133F4A] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe [264136] [PID.4452]
[MD5.FC4AAFA6B89B351D20D0D94154FD4A22] - (.IncrediMail, Ltd. - IncrediMail Notifier.) -- C:\Program Files (x86)\IncrediMail\Bin\ImNotfy.exe [260040] [PID.5136]
O4 - HKCU\..\Run: [lan] C:\Users\maison\chat-land\Chat-Landmessenger.jar (.not file.)
O4 - HKUS\S-1-5-21-3985398542-2676165914-662881908-1001\..\Run: [lan] C:\Users\maison\chat-land\Chat-Landmessenger.jar (.not file.)
O4 - Global Startup: C:\Users\maison\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe => Safer Net Working%Spybot S&D
[MD5.00000000000000000000000000000000] [APT] [{36D94732-9E8B-47D9-9EC1-D60861946EAC}] (...) -- C:\Program Files (x86)\Hide IP Platinum\unins000.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{CEF93C25-3FFA-4B7C-9E70-0F5FBD6248E4}] (...) -- E:\LaCie.exe (.not file.)
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 => Safer Networking Limited Spybot - S&D
O43 - CFD: 07/03/2011 - 18:12:54 - [66,666] ----D C:\Program Files (x86)\Spybot - Search & Destroy => Spybot - Search & Destroy
O43 - CFD: 15/10/2012 - 23:25:03 - [59,468] ----D C:\ProgramData\Spybot - Search & Destroy => Spybot - Search & Destroy
O43 - CFD: 18/10/2012 - 18:48:24 - [0] ----D C:\Users\maison\AppData\Local\Programs
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] => Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}] => Toolbar.Conduit
EmptyCLSID
EmptyTemp
EmptyFlash
FirewallRaz
ProxyFix
Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 12 invités
![]() .: Nous contacter :: Flux RSS :: Données personnelles :. ![]() |