Page de démarrage non midifiable

Question

Bonjour,

Depuis quelques temps, une page de démarrage apparait et impossible de la changer par défaut.C:\WINNT\_hp.html

Ensuite, par ex sur ebay, lorsque je fais une recherche, je bascule sur http://search-ing.com/browse/220_1/
et enfin quand je clique sur une fenetre, je bascule sur about : blank et une fentre m indique que je suis infecté par un spyware.

Comment fait on pour copier un rapport sur HijqckThis.

Merci d avance pour votre aide

Afficher la suite

bernie61 · Answer

salutsuit la procédure dans l'ordre donné post 1 làhttp://www.commentcamarche.net/forum/affich-1158364-page-de-demarrage-sous-about-blanka+

titinuts · Answer

J ai deja essayé Spybot.... mais rien Voici le report Hijack :Logfile of HijackThis v1.98.2Scan saved at 16:15:20, on 05/12/2004Platform: Windows 2000 SP3 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\AVPersonal\AVGUARD.EXEC:\PROGRA~1\Grisoft\AVG6\avgserv.exeC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\WINNT\System32\svchost.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\WINNT\System32
vsvc32.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\WINNT\system32\ZoneLabs\vsmon.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\wuauclt.exeC:\WINNT\Mixer.exeC:\PROGRA~1\Grisoft\AVG6\avgcc32.exeC:\Program Files\Java\j2re1.4.2_01\bin\jusched.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeD:\Daemon\daemon.exeC:\WINNT\system32\MMTray.exeC:\WINNT\system32\P2P Networking\P2P Networking.exeC:\program files\altnet\points manager\points manager.exeC:\WINNT\system32\checking.exeC:\Program Files\AVPersonal\AVGNT.EXEC:\WINNT\system32\ctfmon.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exeC:\PROGRA~1\Altnet\DOWNLO~1\asm.exeC:\Program Files\Club-Internet\Lanceur\lanceur.exeC:\Program Files\UltimateZip 2.7\uzqkst.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\WINNT\system32\javaw.exeC:\Program Files\Microsoft Office\Office10\WINWORD.EXEC:\PROGRA~1\ULTIMA~1.7\uzip.exeC:\DOCUME~1\VINCE\LOCALS~1\TEMP\HIJACKTHIS.EXEC:\Program Files\Internet Explorer\IEXPLORE.EXER1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.znext.com/ie/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.motor-search.info/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINNT\_hp.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://0ml.net/searchasst.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://0ml.net/catR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://0ml.net/catR1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://www.znext.com/ie/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://0ml.net/catR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = C:\WINNT\_hp.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://0ml.net/searchasst.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://0ml.net/catR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://0ml.net/catR1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.motor-search.info/search.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://0ml.net/searchasst.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ls0.net/srchasst.html (obfuscated)R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINNT\_sp.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://0ml.net/searchasst.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = C:\WINNT\_sp.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = C:\WINNT\_hp.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = C:\WINNT\_hp.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-InternetR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)O2 - BHO: (no name) - {00110011-4B0B-44D5-9718-90C88817369B} - C:\WINNT\NavExt.dll (file missing)O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {3BFE4528-E117-01B5-D507-64550DA87047} - C:\WINNT\system32\ucptakd.dll (file missing)O2 - BHO: (no name) - {5DB59ABE-4566-49C8-A6D3-EC1C987143F2} - C:\WINNT\system32
gbd.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10020} - C:\WINNT\system32\f98er24s8u.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocxO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exeO4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startupO4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUPO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exeO4 - HKLM\..\Run: [blss] C:\Program Files\blss\blss.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osbootO4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Daemon\daemon.exe"  -lang 1033O4 - HKLM\..\Run: [MMTray] MMTray.exeO4 - HKLM\..\Run: [SystemSearch] C:/WINNT/REGEDIT.EXE -s C:/WINNT/system.regO4 - HKLM\..\Run: [sys] regedit -s sys.regO4 - HKLM\..\Run: [Microsoft Internet Explorer] C:\WINNT\system32\IEXPLORE.EXEO4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTARTO4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exeO4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -sO4 - HKLM\..\Run: [Windows Shell Library Loader] checking shell32.dll /c /setO4 - HKLM\..\Run: [Microsoft Service Information] msnservices.exeO4 - HKLM\..\Run: [WindowsRegKey update] Windowsup.exeO4 - HKLM\..\Run: [ControlPanel] C:\WINNT\system32	wink64.exe internat.dll,LoadKeyboardProfileO4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /minO4 - HKLM\..\RunServices: [Microsoft Service Information] msnservices.exeO4 - HKLM\..\RunServices: [WindowsRegKey update] Windowsup.exeO4 - HKCU\..\Run: [Arna] C:\Documents and Settings\Vince\Application Data\eesp.exeO4 - HKCU\..\Run: [Xlvfqv] C:\WINNT\system32\kgkqocj.exeO4 - HKCU\..\Run: [WindowsRegKey update] Windowsup.exeO4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exeO4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -trayO4 - Startup: Club-Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exeO4 - Startup: UltimateZip Quick Start.lnk = C:\Program Files\UltimateZip 2.7\uzqkst.exeO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exeO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Web Search - C:\WINNT\ex.htmO9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\webelated.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\webelated.htmO12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dllO13 - www. Prefix: http://%65%68%74%74%70%2E%63%63/?O15 - Trusted Zone: *.05p.comO15 - Trusted Zone: *.blazefind.comO15 - Trusted Zone: *.clickspring.netO15 - Trusted Zone: *.flingstone.comO15 - Trusted Zone: *.mt-download.comO15 - Trusted Zone: *.my-internet.infoO15 - Trusted Zone: *.scoobidoo.comO15 - Trusted Zone: *.searchbarcash.comO15 - Trusted Zone: *.searchmiracle.comO15 - Trusted Zone: *.slotch.comO15 - Trusted Zone: *.xxxtoolbar.comO16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version3/Applet/vchatsign.cabO16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://195.225.177.13/20647/online.chm::/on-line.exeO16 - DPF: {11120607-1001-1111-1000-110199901123} - ms-its:mhtml:file://c:\foo.mht!http://66.98.208.89/x3x/fr.chm::/adult.exeO16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) - O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cabO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-12.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/22438a9816fbb8018d20/netzip/RdxIE601_fr.cabO16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://metaboli.club-internet.fr/components/Metaboli.ocxO16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{0F14ECE6-CAA1-4D47-976B-E32E4C0CEA3D}: NameServer = 192.168.0.10O17 - HKLM\System\CCS\Services\Tcpip\..\{A40311CA-1535-4CB5-8322-DB9C4026762E}: NameServer = 194.117.200.10 194.117.200.15O17 - HKLM\System\CS1\Services\Tcpip\..\{0F14ECE6-CAA1-4D47-976B-E32E4C0CEA3D}: NameServer = 192.168.0.10O17 - HKLM\System\CS2\Services\Tcpip\..\{0F14ECE6-CAA1-4D47-976B-E32E4C0CEA3D}: NameServer = 192.168.0.10O18 - Filter: text/html - {C83BFD8E-DA4D-4023-B959-808C7165DBF6} - C:\WINNT\system32
gbd.dllO18 - Filter: text/plain - {C83BFD8E-DA4D-4023-B959-808C7165DBF6} - C:\WINNT\system32
gbd.dllO19 - User stylesheet:  (file missing)

Page de démarrage non midifiable

2 réponses

Votre réponse

Discussions similaires

Newsletters