Sujet Précédent Sujet Suivant

Virus myspacy msn

Fermé
meera - 30 déc. 2008 à 13:29
 meera - 6 janv. 2009 à 15:31
Bonjour,

J'ai fait la bêtise de cliquer sur un lien envoyé par un de mes contacts messenger. Il s'agissait d'un lien du genre "foto?myspicy..(+mon adresse de messagerie)".
Ca m'a créer un dossier nommé "IMG455.jpg-www.photo". Impossible de supprimer ce fichier "sans autorisation".
Mon antivirus AVG l'a detecté mais ne reussi pas à le supprimer. MSNFix, lui, ne le detecte pas (je suis sur Vista, j'ai peut etre pas fait les bonnes manips).
Je ne sais pas comment m'en débarrasser... Merci de votre aide !
A voir également:

56 réponses

Précédent
Réponse 21 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 00:21
/!\IMPORTANT/!\
Désactive l'UAC (User Account Control ou Contrôle de Compte Utilisateur) le temps de la désinfection,tu le réactiveras après ta désinfection:
• Va dans Panneau de Configuration puis Comptes d'Utilisateurs.
• Clique sur Activer ou désactiver le contrôle des comptes utilisateurs.
• Décoche la case Utiliser le contrôle des comptes utilisateurs pour vous aider à protéger votre ordinateur.
• Clique sur OK pour enregistrer la modification et redémarre ton PC lorsque cela t'est demandé.

aide en cas de problèmes

ensuite

Relance Toolbar-S&D en double-cliquant sur le raccourci.

Tape sur "2" puis valide en appuyant sur "Entrée".

*** Ne ferme pas la fenêtre lors de la suppression ***

Un rapport sera créé, poste son contenu ici.
0
meera
31 déc. 2008 à 00:33
-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T8300 @ 2.40GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A04
USER : Melanie ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
C:\ (Local Disk) - NTFS - Total:287 Go (Free:192 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:4 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 31/12/2008| 0:31 )

[ UAC => 0 ]

-----------\\ SUPPRESSION

Supprime! - C:\ProgramData\Kiwee Toolbar\config
Supprime! - C:\ProgramData\Kiwee Toolbar\images
Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll
Supprime! - C:\ProgramData\Kiwee Toolbar
Echec ! - C:\Program Files\Kiwee Toolbar

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll
Echec ! - C:\Program Files\Kiwee Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Kiwee Toolbar
C:\Program Files\Kiwee Toolbar\2.8.167
C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Page_URL"="https://www.google.fr"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="https://www.google.fr"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 31/12/2008| 0:16 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 31/12/2008| 0:32 - Option : [2]

-----------\\ Fin du rapport a 0:32:24,11
0
Réponse 22 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 00:49
relance Hijack(scan only)et coche cette ligne

R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll

clic sur fix checked

ensuite


Télécharge OTMoveIt3( de Old Timer )
http://oldtimer.geekstogo.com/OTMoveIt3.exe
Une fois téléchargé double-clique sur OTMoveIt3.exe pour le lancer.
Assure toi que la case "Unregister Dll's and Ocx's" est cochée
Copie les lignes (qui sont en gras) qui se trouvent en dessous :

:Processes
explorer.exe

:Files
c:\program files\kiwee toolbar\2.8.167\kiweeietoolbar.dll
c:\program files\kiwee toolbar\2.8.167\kwtbaim.exe
C:\Program Files\Kiwee Toolbar
C:\Program Files\Kiwee Toolbar\2.8.167
C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_CLASSES_ROOT\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KiweeHook"=-


:Commands
[emptytemp]
[start explorer]
[Reboot]

et colle-les dans le cadre de gauche de OTMoveIt : "Paste List Of Files/Folders to Move."
Clique sur "MoveIt!" pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
-Il te sera peut-être demander de redémarrer le pc pour achever la suppression -> Accepte ( si il ne fait pas automatiquement , fait-le toi même )

/!\ Note : Au démarrage ton bureau RISQUE de ne plus apparaître, dans ce cas fait --> CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi sur l'onglet "Processus". Clique en haut à gauche sur "Fichiers" et choisis "Exécuter"
Tape "explorer.exe"(sans les guillemèts) et valide. Cela fera réapparaître le Bureau.
0
meera
31 déc. 2008 à 01:06
impossible de supprimer cette ligne..

De plus lorsque je telecharge le logiciel mon antivirus le bloque :

"Multiple threat detection
infection list :
1 C:\Dowloads\Software\OTMovelt3.exe
Threat name : Trojan horse backdoor.Generic10.AETR Detected on open
2: (idem)

Je fais quoi?..
0
meera
31 déc. 2008 à 01:21
si j'execute le programme rien ne se passe et si je l'enregistre, ça me dit que j'ai besoin d'une autorisation pour acceder au fichier...
je sais pas si j'ai bien desactivé l'antivirus... suis perdue
0
meera
31 déc. 2008 à 02:04
rien a faire, pas moyen d'enregistrer le programme...
A la fin de l'installtion il me demande une autorisation pour continuer et annule l'enregistrement.
L'anti virus est pourtant bien desactivé.
0
Réponse 23 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 01:10
désactive ton antivirus pendant la procédure

ot moveit est dérecté comme risktool

faut pas avoir peur!
0
Réponse 24 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 01:23
pour l'enregistrer
clic droit "executer en tant qu'administrateur"
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 02:08
est ce que ton UAC est bien désactivé?
0
meera
31 déc. 2008 à 02:14
oui, il l'est...
0
Réponse 26 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 02:41
fais ceci

Ouvre le bloc-notes (clic droit sur le bureau -> dans l´arborescence choisi nouveau puis nouveau fichier texte) et fais un copier coller de ce qui est en gras dans la citation ci-dessous (copie tout d'un trait)
/!\***attention,il ne dois pas y avoir de ligne blanche au début(Regedit4 est sur la premiere ligne dans le bloc note et il y a une ligne blanche a la fin) et toujours décocher le retour automatique à ligne dans l'éditeur de texte.***/!\

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_CLASSES_ROOT\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KiweeHook"=-



clic sur "fichier"/"enregistrer sous" :
dans : sur le bureau
Nom du fichier : fix.reg
Type de fichier : "tous les fichiers"
clic sur "enregistrer"

~>ca doit ressembler à ça une fois enregistré :

https://i39.servimg.com/u/f39/12/79/94/93/fixreg10.jpg

double clic sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
Si c'est bien le cas, clique sur "oui"
0
meera
31 déc. 2008 à 02:53
c'est fait, ca a fonctionné
0
Réponse 27 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
31 déc. 2008 à 16:51
ok,

nettoyage

Télécharger ATF Cleaner par Atribune.
http://www.atribune.org/ccount/click.php?id=1
Installe-le sur le bureau. (A conserver car très utile après chaque séance de surf)

Double-clique ATF-Cleaner.exe afin de lancer le programme.
Sous l'onglet Main, choisis : Select All
Cliquer sur le bouton Empty Selected

Si tu utilises le navigateur Firefox :
Clique Firefox au haut et choisis : Select All
Cliquer le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :
Clique Opera au haut et choisis : Select All
Cliquer le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, cliquer No à l'invite.
Clique Exit, du menu principal, afin de fermer le programme.
0
meera
1 janv. 2009 à 18:47
voilà qui est fait...
0
Réponse 28 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
2 janv. 2009 à 09:48
poste un nouveau rapport Hijack stp
qu'on regarde si tout est bien parti
0
meera
2 janv. 2009 à 12:06
Bonjour, bonne nouvelle année !
Et voici le nouveau rapport :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:59:41, on 02/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Dell Video Chat\DellVideoChat.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Melanie\AppData\Local\Temp\Temp1_HiJackThis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SightSpeed] "C:\Program Files\Dell Video Chat\DellVideoChat.exe" -bootmode
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\aestsrv.exe
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
0
Réponse 29 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
2 janv. 2009 à 14:05
merci pour les voeux,également

est-ce que tu peux voir ce programme

C:\Program Files\AGI

si c'est non

fais ceci

"Démarrer" dans la Barre des tâches
Cliquer sur "Panneau de configuration"
Cliquer sur "Options des dossiers"
Cliquer sur l'onglet "Affichage"
**dans fichiers et dossiers cachés:
Cocher "Afficher les fichiers et dossiers cachés"
Décocher "Masquer les extensions des fichiers dont le type est connu"
Décocher "masquer les fichiers protégés du système d'exploitation(recommandé)"
**Note**il ne faut pas tenir compte de l'avertissement.==>Cliquer sur OUI
Cliquer sur "Appliquer à tous les dossiers"
Cliquer sur "Ok"


ensuite

essaye de le supprimer manuellement
0
meera
2 janv. 2009 à 14:33
il apparait bien mais impossible de le supprimer. Il me demande une autorisation...
0
Réponse 30 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
2 janv. 2009 à 15:06
m'en doutais...c'est ta dernière crasse

fais ceci stp

==> Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau

Double clique sur OAD pour le lancer

- nom de fichier à rechercher tape ou fais un copier/coller de : AGI
- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il ai terminé.
Le rapport de recherche s'affichera automatiquement dès qu'il aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain poste.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient

0
meera
2 janv. 2009 à 19:44
Ca va faire une sacrée lecture !

02/01/2009 ---- 19:38:41,84

----------------------------------
§§§§§§ [AGI] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************


[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging.resources_b03f5f7f11d50a3a_6.0.6000.16386_fr-fr_2b163e703ee15778]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging.resources_b03f5f7f11d50a3a_6.0.6000.16386_fr-fr_2b163e703ee15778]
"f!system.messaging.resource_d41596bbdea5d45c"=hex:53,00,79,00,73,00,74,00,65,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging.resources_b03f5f7f11d50a3a_6.0.6001.18000_fr-fr_2aeac02c3f390044]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging.resources_b03f5f7f11d50a3a_6.0.6001.18000_fr-fr_2aeac02c3f390044]
"f!system.messaging.resource_d41596bbdea5d45c"=hex:53,00,79,00,73,00,74,00,65,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16386_none_2dddc57b234a5e36]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging_b03f5f7f11d50a3a_6.0.6000.16386_none_2dddc57b234a5e36]
"f!system.messaging.dll"=hex:53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,4d,00,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18000_none_2db2473723a20702]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18000_none_2db2473723a20702]
"f!system.messaging.dll"=hex:53,00,79,00,73,00,74,00,65,00,6d,00,2e,00,4d,00,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-i..devicescontrolpanel_31bf3856ad364e35_6.0.6000.16386_none_226909d84c369cba]
"f!imagingdevices.exe"=hex:49,00,6d,00,61,00,67,00,69,00,6e,00,67,00,44,00,65,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_77811314c832ec90]
"f!imagingdevices.exe.mui"=hex:49,00,6d,00,61,00,67,00,69,00,6e,00,67,00,44,00,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-imagingengine_31bf3856ad364e35_6.0.6000.16386_none_29b239e1312ff310]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-imagingengine_31bf3856ad364e35_6.0.6001.18000_none_2be8fbdd2e1b03e4]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-imagingengine_31bf3856ad364e35_6.0.6001.18000_none_2be8fbdd2e1b03e4]
"f!imagingengine.dll"=hex:49,00,6d,00,61,00,67,00,69,00,6e,00,67,00,45,00,6e,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb]
"f!msmq-messagingcoreservice_3ad7d0c5892f9fe6"=hex:6d,00,73,00,6d,00,71,00,2d,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_6.0.6000.16386_none_e0d305bfeb4328fd]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_6.0.6001.18000_none_e309c7bbe82e39d1]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_a3cec736885e66af]
"f!system.messaging.resource_d41596bbdea5d45c"=hex:53,00,79,00,73,00,74,00,65,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_a605893285497783]
"f!system.messaging.resource_d41596bbdea5d45c"=hex:53,00,79,00,73,00,74,00,65,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging.resources_b03f5f7f11d50a3a_fr-fr_7995cb40d63ac95a]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging.resources_b03f5f7f11d50a3a_fr-fr_7995cb40d63ac95a\v!6.0.6000.16386]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging.resources_b03f5f7f11d50a3a_fr-fr_7995cb40d63ac95a\v!6.0.6001.18000]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging_b03f5f7f11d50a3a_none_feb2c2672ea0e50c]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging_b03f5f7f11d50a3a_none_feb2c2672ea0e50c\v!6.0.6000.16386]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\msil_system.messaging_b03f5f7f11d50a3a_none_feb2c2672ea0e50c\v!6.0.6001.18000]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-imagingengine_31bf3856ad364e35_none_073c72abf5482b66]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-imagingengine_31bf3856ad364e35_none_073c72abf5482b66\v!6.0.6000.16386]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-imagingengine_31bf3856ad364e35_none_073c72abf5482b66\v!6.0.6001.18000]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_none_3a255dd935f0b3a1]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_none_3a255dd935f0b3a1\v!6.0.6000.16386]

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6001.18000_001c50b5\ComponentFamilies\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_none_3a255dd935f0b3a1\v!6.0.6001.18000]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\msil_system.messaging.resources_b03f5f7f11d50a3a_fr-fr_7995cb40d63ac95a]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\msil_system.messaging.resources_b03f5f7f11d50a3a_fr-fr_7995cb40d63ac95a\6.0]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\msil_system.messaging_b03f5f7f11d50a3a_none_feb2c2672ea0e50c]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\msil_system.messaging_b03f5f7f11d50a3a_none_feb2c2672ea0e50c\6.0]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-imagingengine_31bf3856ad364e35_none_073c72abf5482b66]

[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-imagingengine_31bf3856ad364e35_none_073c72abf5482b66\6.0]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-Desktop_Technologies-Text_Input_Services-IME-Japanese-Core?version=6.0.6001.18000&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\L_KAGI]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-Desktop_Technologies-Text_Input_Services-IME-Japanese-Core?version=6.0.6001.18000&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\R_KAGI]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-Kernel-PnP?version=6.0.6001.18000&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\GroupOrderList\BL\[@keyValue="FSFilter Imaging"]]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-NTFS?version=6.0.6001.18000&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\NtfsEncryptPagingFile]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-OS-Kernel?version=6.0.6001.18145&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\DisablePagingExecutive]

[HKEY_LOCAL_MACHINE\Schema\wcm://Microsoft-Windows-Smss?version=6.0.6001.18000&language=neutral&processorArchitecture=x86&publicKeyToken=31bf3856ad364e35&versionScope=nonSxS&scope=allUsers\metadata\elements\PagingFiles]

[HKEY_LOCAL_MACHINE\SOFTWARE\AGI]

[HKEY_LOCAL_MACHINE\SOFTWARE\AGI\search]

[HKEY_LOCAL_MACHINE\SOFTWARE\AGI\search\brand]

[HKEY_LOCAL_MACHINE\SOFTWARE\AGI\search\defaulttext]

[HKEY_LOCAL_MACHINE\SOFTWARE\AGI\search\searchurl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00da2f99-f2a6-40c2-b770-a920f8e44abc}]
@="Staging ShellFolder for CD Burning"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00E1DB59-6EFD-4CE7-8C0A-2DA3BCAAD9C6}]
@="Microsoft Works Imaging Server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00E1DB59-6EFD-4CE7-8C0A-2DA3BCAAD9C6}\ProgID]
@="MicrosoftWorks.WkImgSrv.WksImagingServer.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00E1DB59-6EFD-4CE7-8C0A-2DA3BCAAD9C6}\VersionIndependentProgID]
@="IWksImagingServer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B8732A6-AF74-498C-A251-9DC86B0538B0}]
@="MS.Internal.IO.Packaging.XpsFilter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B8732A6-AF74-498C-A251-9DC86B0538B0}\InprocServer32]
"Class"="MS.Internal.IO.Packaging.XpsFilter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B8732A6-AF74-498C-A251-9DC86B0538B0}\ProgId]
@="MS.Internal.IO.Packaging.XpsFilter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}\InprocServer32]
@="C:\\Program Files\\AGI\\common\\agcutils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C776A5A-FC42-4870-8D65-D62ADD9184FF}]
@="Magic USB Cable Class ID"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C776A5A-FC42-4870-8D65-D62ADD9184FF}\ProgID]
@="MagicUSBCableProgID.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C776A5A-FC42-4870-8D65-D62ADD9184FF}\VersionIndependentProgID]
@="MagicUSBCableProgID"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\InprocServer32]
@="C:\\Program Files\\AGI\\Python25\\DLLs\\_ctypes.pyd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\InprocServer32]
"PythonPath"="C:\\Program Files\\AGI\\common\\pyagcore\\lilw"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\LocalServer32]
@="\"C:\\Program Files\\AGI\\Python25\\pythonw.exe\" \"C:\\Program Files\\AGI\\common\\pyagcore\\lilw\\lilwconfig.pyc\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}]
@="System.Runtime.Remoting.Messaging.RemotingSurrogateSelector"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}\InprocServer32]
"Class"="System.Runtime.Remoting.Messaging.RemotingSurrogateSelector"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}\InprocServer32\2.0.0.0]
"Class"="System.Runtime.Remoting.Messaging.RemotingSurrogateSelector"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}\ProgId]
@="System.Runtime.Remoting.Messaging.RemotingSurrogateSelector"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}]
@="System.Runtime.Remoting.Messaging.OneWayAttribute"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}\InprocServer32]
"Class"="System.Runtime.Remoting.Messaging.OneWayAttribute"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}\InprocServer32\2.0.0.0]
"Class"="System.Runtime.Remoting.Messaging.OneWayAttribute"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}\ProgId]
@="System.Runtime.Remoting.Messaging.OneWayAttribute"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\InprocServer32]
@="C:\\Program Files\\AGI\\Python25\\DLLs\\_ctypes.pyd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\InprocServer32]
"PythonPath"="C:\\Program Files\\AGI\\common\\pyagcore\\lilw"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\LocalServer32]
@="\"C:\\Program Files\\AGI\\Python25\\pythonw.exe\" \"C:\\Program Files\\AGI\\common\\pyagcore\\lilw\\lilwsearchdetection.pyc\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002109A100C0400000000000F01FEC]
"OutlookMAPI2Intl_1036"="OutlookMessagingIntl_1036"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002109A100C0400000000000F01FEC]
"OutlookMessagingIntl_1036"="OUTLOOKFilesIntl_1036"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002109E600C0400000000000F01FEC]
"MSOfficeDocumentImagingIntl_1036"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002109E600C0400000000000F01FEC]
"MSPHELPIntl_1036"="MSOfficeDocumentImagingIntl_1036"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002119AC0000000000000000F01FEC]
"OutlookMAPI2"="OutlookMessaging"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002119AC0000000000000000F01FEC]
"OutlookMessaging"="OUTLOOKFiles"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002119AC0000000000000000F01FEC]
"MSOfficeDocumentImaging"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\00002119AC0000000000000000F01FEC]
"DocumentImagingUtils"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7EB1CEB5-BD1C-4C26-9E56-494DA7233A17}]
@="IImagingInformation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EC5EC8A9-C395-4314-9C77-54D7A935FF70}]
@="IWICImagingFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID]
@="MagicUSBCable Prog ID"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID\CurVer]
@="MagicUSBCableProgID.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID.1]
@="MagicUSBCable Prog ID Ver 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MagicUSBCableProgID.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MediaPackageFile\DefaultIcon]
@="C:\\Windows\\Installer\\{91120000-00CA-0000-0000-0000000FF1CE}\\cagicon.exe,0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer]
@="Microsoft Works Imaging Server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer\CurVer]
@="MicrosoftWorks.WkImgSrv.WksImagingServer.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer.6]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer.6]
@="Microsoft Works ImagingServer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MicrosoftWorks.WkImgSrv.WksImagingServer.6\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MS.Internal.IO.Packaging.XpsFilter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MS.Internal.IO.Packaging.XpsFilter]
@="MS.Internal.IO.Packaging.XpsFilter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MS.Internal.IO.Packaging.XpsFilter\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.OneWayAttribute]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.OneWayAttribute]
@="System.Runtime.Remoting.Messaging.OneWayAttribute"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.OneWayAttribute\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.RemotingSurrogateSelector]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.RemotingSurrogateSelector]
@="System.Runtime.Remoting.Messaging.RemotingSurrogateSelector"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.Remoting.Messaging.RemotingSurrogateSelector\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{647B16D8-AD7B-4983-82D7-82A270FC9E6D}\1.0\0\win32]
@="C:\\Program Files\\AGI\\common\\agcutils.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{90C026EB-0B99-491A-BD5B-0EB86B533608}\1.0\0\win32]
@="C:\\Program Files\\AGI\\common\\pyagcore\\lilw\\lilw.tlb"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{90C026EB-0B99-491A-BD5B-0EB86B533608}\1.0\HELPDIR]
@="C:\\Program Files\\AGI\\common\\pyagcore\\lilw"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default]
"System.Messaging,2.0.0.0,,b03f5f7f11d50a3a,msil"=hex:74,58,dc,aa,d4,5b,c8,01

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default]
"System.Messaging.resources,2.0.0.0,fr,b03f5f7f11d50a3a,msil"=hex:f5,d1,a9,58,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\5d8551e7\32d51d9d\28]
"DisplayName"="System.Messaging,2.0.0.0,,b03f5f7f11d50a3a"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\5d8551e7\32d51d9d\a9]
"DisplayName"="System.Messaging,2.0.0.0,,b03f5f7f11d50a3a"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\311f1bc6\78f9c1cb\28]
"DisplayName"="System.Messaging,2.0.0.0,,b03f5f7f11d50a3a"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\311f1bc6\78f9c1cb\ef]
"DisplayName"="System.Messaging,2.0.0.0,,b03f5f7f11d50a3a"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\References\System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\References\System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\{2EC93463-B0C3-45E1-8364-327E96AEA856}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\References\System.Messaging.resources, Version=2.0.0.0, Culture=fr, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\References\System.Messaging.resources, Version=2.0.0.0, Culture=fr, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\{2EC93463-B0C3-45E1-8364-327E96AEA856}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Account Manager\Import\{39981129-C287-11D0-8D8C-00C04FD6202B}]
@="Microsoft Windows Messaging or Exchange or Outlook"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9C9C9C7-B9B2-4203-BB34-AADB48E94647}]
"AppPath"="C:\\Program Files\\AGI\\Python25"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IMAGING_USE_ART]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MigWiz]
"AutoPlayCmdLine"="C:\\Windows\\System32\\migwiz\\migwiz.exe /magicusb"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\Registration\{91120000-00CA-0000-0000-0000000FF1CE}]
"Current"="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
0
Réponse 31 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
2 janv. 2009 à 23:39
re,

- fais ceci:
• Cliquez sur Démarrer / Exécuter
• Dans le champ « Ouvrir » tape : « regedit » et cliquez sur « OK ».
• Ne sélectionnez ( = mettre en surbrillance ) rien d'autre que le « Poste de travail » de la page qui s'affiche.
( Explication: Ici, dans la suite logique, le "Poste de travail" , est celui en tête de la liste des clés du registre ; puisqu’à cette étape, on est dans l’éditeur de registres )
• Dans le menu « Fichier » clique sur « Exporter.... »
• Dans le menu de gauche, choisis de sauvegarder dans le BUREAU.
• Dans le champ "Nom de fichier" : tape le nom de ton fichier de sauvegarde. (ex : registre1)
• Dans le champ déroulant "Type" , choisis "Fichiers d’enregistrement (*.reg)".
< http://img252.imageshack.us/img252/8522/screenshot258es5.gif >
• Coche la case (= le bouton ratio ) « Tout ».
• Clique sur [Enregistrer]. Puis Quitte le registre.
L'icône du fichier de sauvegarde du Registre est maintenant sur le bureau

Si tu n’as pas compris suis le tuto en image :
https://www.generation-nt.com/sauvegardez-restaurez-la-base-de-registre-astuce-24586-1.html

ensuite


Ouvre le bloc-notes (clic droit sur le bureau -> dans l´arborescence choisi nouveau puis nouveau fichier texte) et fais un copier coller de ce qui est en gras dans la citation ci-dessous (copie tout d'un trait)
/!\***attention,il ne dois pas y avoir de ligne blanche au début(Regedit4 est sur la premiere ligne dans le bloc note et il y a une ligne blanche a la fin) et toujours décocher le retour automatique à ligne dans l'éditeur de texte.***/!\

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\AGI]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\InprocServer32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\InprocServer32]
"PythonPath"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C1D5B3-B5DA-461B-A4C2-71A310B0B69A}\LocalServer32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\InprocServer32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\InprocServer32]
"PythonPath"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F1911C41-D26B-4046-A91A-97AC89E8B3C6}\LocalServer32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{647B16D8-AD7B-4983-82D7-82A270FC9E6D}\1.0\0\win32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{90C026EB-0B99-491A-BD5B-0EB86B533608}\1.0\0\win32]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{90C026EB-0B99-491A-BD5B-0EB86B533608}\1.0\HELPDIR]
@=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9C9C9C7-B9B2-4203-BB34-AADB48E94647}]
"AppPath"=-



clic sur "fichier"/"enregistrer sous" :
dans : sur le bureau
Nom du fichier : fix.reg
Type de fichier : "tous les fichiers"
clic sur "enregistrer"

~>ca doit ressembler à ça une fois enregistré :

https://i39.servimg.com/u/f39/12/79/94/93/fixreg10.jpg

double clic sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
Si c'est bien le cas, clique sur "oui"
0
meera
5 janv. 2009 à 01:33
Bonsoir !

Manip faite....
0
Réponse 32 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 01:54
ok,

Télécharger ATF Cleaner par Atribune.
http://www.atribune.org/ccount/click.php?id=1
Installe-le sur le bureau. (A conserver car très utile après chaque séance de surf)

Double-clique ATF-Cleaner.exe afin de lancer le programme.
Sous l'onglet Main, choisis : Select All
Cliquer sur le bouton Empty Selected

Si tu utilises le navigateur Firefox :
Clique Firefox au haut et choisis : Select All
Cliquer le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :
Clique Opera au haut et choisis : Select All
Cliquer le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, cliquer No à l'invite.
Clique Exit, du menu principal, afin de fermer le programme.


ensuite

reposte un rapport Hijack stp
0
meera
5 janv. 2009 à 14:10
voilà le nouveau rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:08:00, on 05/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Dell Video Chat\DellVideoChat.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\Melanie\AppData\Local\Temp\Temp1_HiJackThis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SightSpeed] "C:\Program Files\Dell Video Chat\DellVideoChat.exe" -bootmode
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\aestsrv.exe
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
0
Réponse 33 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 14:20
bon,

relance Hijack(scan only) et coche ces lignes

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - Global Startup: Bluetooth.lnk = ?
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe

clic sur fix checked

ferme Hijack

redémarre ton pc puis poste un nouveau rapport Hijack stp
0
meera
5 janv. 2009 à 14:54
il y en a une qui ne veut pas disparaitre...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:49:43, on 05/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\system32\conime.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Dell Video Chat\DellVideoChat.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Dell Support Center\gs_agent\dsc.exe
C:\Users\Melanie\AppData\Local\Temp\Temp5_HiJackThis.zip\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [SightSpeed] "C:\Program Files\Dell Video Chat\DellVideoChat.exe" -bootmode
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Melanie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\aestsrv.exe
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_2ba5baa4\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
0
Réponse 34 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 15:04
mwouais,le service
je m'en doutais

Clique sur le bouton "Démarrer" puis sur "Exécuter".
Dans le champ "Ouvrir", saisis la commande:
services.msc
puis clique sur le bouton OK.

recherche AG Windows Service (AGWinService) mets le en surbrillance et arrête le(en haut à gauche)

Ouvre Hijackthis puis:
-> Open the Misc Tools Section
-> Delete a NT Service
tape AG Windows Service

clic sur ok

relance ton pc er reposte un nouveau rapport stp
0
meera
5 janv. 2009 à 15:12
Hijackthis me dit qu'il ne le trouve pas en le nommant AG Windows Service ... J'essaie avec AGWinService ?...
0
Réponse 35 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 15:46
oui,
sorry pour l'erreur
0
meera
5 janv. 2009 à 15:59
voilà ce que ca me marque à la fin :

"The service 'AGWinService' is enabled and/or running. Disable it first, using Hijack This itself (from the scan results) or the Services.msc window"
0
Réponse 36 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 16:01
tu as fait ceci avant,

Clique sur le bouton "Démarrer" puis sur "Exécuter".
Dans le champ "Ouvrir", saisis la commande:
services.msc
puis clique sur le bouton OK.

recherche AG Windows Service (AGWinService) mets le en surbrillance et arrête le(en haut à gauche)
0
Réponse 37 / 56
meera
5 janv. 2009 à 16:05
oui... une fenetre s'ouvre avec une barre de defilement qd je lui demande d'arreter. Par contre une fois cette fenetre fermée l'icone de AG windows service ne change pas... je sais pas si elle doit etre differente ni comment je peux savoir si le programme a bien stoppé...
0
Réponse 38 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 16:07
==> Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau

Double clique sur OAD pour le lancer

- nom de fichier à rechercher tape ou fais un copier/coller de : AGWinService
- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il ai terminé.
Le rapport de recherche s'affichera automatiquement dès qu'il aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain poste.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient
0
Réponse 39 / 56
meera
5 janv. 2009 à 16:31
voilà ce que ca donne :

05/01/2009 ---- 16:23:50,13

----------------------------------
§§§§§§ [AGWinService] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************


[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AGWinService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AGWinService\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AGWinService\PythonClass]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AGWinService\PythonClass]
@="pyagcore.agservice.AGWinService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AGWinService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AGWinService\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AGWinService\PythonClass]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AGWinService\PythonClass]
@="pyagcore.agservice.AGWinService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AGWinService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AGWinService\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AGWinService\PythonClass]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AGWinService\PythonClass]
@="pyagcore.agservice.AGWinService"

*******************
[Fichier]
*******************



*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
0
Réponse 40 / 56
chimay8 Messages postés 7720 Date d'inscription jeudi 1 mai 2008 Statut Contributeur sécurité Dernière intervention 3 janvier 2014 60
5 janv. 2009 à 16:40
- fais ceci:
• Cliquez sur Démarrer / Exécuter
• Dans le champ « Ouvrir » tape : « regedit » et cliquez sur « OK ».
• Ne sélectionnez ( = mettre en surbrillance ) rien d'autre que le « Poste de travail » de la page qui s'affiche.
( Explication: Ici, dans la suite logique, le "Poste de travail" , est celui en tête de la liste des clés du registre ; puisqu’à cette étape, on est dans l’éditeur de registres )
• Dans le menu « Fichier » clique sur « Exporter.... »
• Dans le menu de gauche, choisis de sauvegarder dans le BUREAU.
• Dans le champ "Nom de fichier" : tape le nom de ton fichier de sauvegarde. (ex : registre1)
• Dans le champ déroulant "Type" , choisis "Fichiers d’enregistrement (*.reg)".
< http://img252.imageshack.us/img252/8522/screenshot258es5.gif >
• Coche la case (= le bouton ratio ) « Tout ».
• Clique sur [Enregistrer]. Puis Quitte le registre.
L'icône du fichier de sauvegarde du Registre est maintenant sur le bureau

Si tu n’as pas compris suis le tuto en image :
https://www.generation-nt.com/sauvegardez-restaurez-la-base-de-registre-astuce-24586-1.html

ensuite


Ouvre le bloc-notes (clic droit sur le bureau -> dans l´arborescence choisi nouveau puis nouveau fichier texte) et fais un copier coller de ce qui est en gras dans la citation ci-dessous (copie tout d'un trait)
/!\***attention,il ne dois pas y avoir de ligne blanche au début(Regedit4 est sur la premiere ligne dans le bloc note et il y a une ligne blanche a la fin) et toujours décocher le retour automatique à ligne dans l'éditeur de texte.***/!\

REGEDIT4

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AGWinService]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\AGWinService]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AGWinService]




clic sur "fichier"/"enregistrer sous" :
dans : sur le bureau
Nom du fichier : fix.reg
Type de fichier : "tous les fichiers"
clic sur "enregistrer"

~>ca doit ressembler à ça une fois enregistré :

https://i39.servimg.com/u/f39/12/79/94/93/fixreg10.jpg

double clic sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
Si c'est bien le cas, clique sur "oui"

ferme puis relance le pc

Télécharges : - CCleaner (n'installe pas la barre d'outil Yahoo)
https://www.pcastuces.com/logitheque/ccleaner.htm
Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corrigé ton registre .Lors de l'installation, avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 première.
Une fois le prg instalé et lancé, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures"( Par la suite, laisse-le avec ses réglages par défaut. C'est tout ).

Un tuto ( aide ):
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

---> Utilisation:
! déconnectes toi et fermes toutes les applications en cours !
* vas dans "nettoyeur" : fait analyse puis nettoyage
* vas dans "registre" : fait chercher les erreurs et réparer ( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )
0
meera
5 janv. 2009 à 17:35
voilà qui est fait...
0
meera
5 janv. 2009 à 17:35
voilà qui est fait...
0

Discussions similaires

Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
symboles et écritures pour nick msn
Pando -
roro -

20 réponses
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses
problême Opéra est ce un virus??
sand2504 -
sand2504 -

85 réponses