hijack help Résolu

Question

Bonjour,,depuis 15 jours environ ,l'ouverture des fenetres met de +en+ de temps;A certains moments j'ai l'impression que mon pc se plante.Voici mon rapport hijackthis ,si quelqu'un peut m'aider ,je lui en serais reconnaissant.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:28, on 9/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\system32undll32.exe
D:\Program Files\Internet Download Manager\IDMan.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=14497&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirec...amp;gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaul...earch.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirec...amp;gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [sdd1034] C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Point&&Go - C:\Program Files\Fichiers communs\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Ajouter le contenu du lien à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Créer des fichiers PDF à partir des liens sélectionnés - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: Créer fichier PDF - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Créer un fichier PDF depuis le contenu du lien - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir avec Nuance PDF Converter 5.0 - res://D:\Program Files\Nuance\PDF Professional 5\cnvres_fre.dll /100
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Télécharger avec IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/MaConfig_3_5_2_1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O17 - HKLM\System\CCS\Services\Tcpip\..\{E65FE300-A717-4F55-AA0C-4108E67584C0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - E:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PDFProFiltSrv - Nuance Communications, Inc. - D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

nico987 · Answer

déjà tu relances hijack mais en faisant seulement un scan, ru coches ces lignes :
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirec...amp;gc=1&q=


R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL =
http://toolbar.ask.com/toolbarv/askRedirec...amp;gc=1&q=

Tu cliques sur fix checked et tu réponds oui. Poste un autre rapport hijack après cette opération.

Note : ce sont les 2 même lignes elles sont 2. Les liens ne sont pas fais exprès, ne t'en occupe pas.

ou sinon tu peux faire une restauration du système qui date d'avant ton problème.

ALG16 · Answer

salut,

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:29:27, on 9/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\system32undll32.exe
D:\Program Files\Internet Download Manager\IDMan.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=14497&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10168&gct=&gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [sdd1034] C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Point&&Go - C:\Program Files\Fichiers communs\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Ajouter le contenu du lien à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Créer des fichiers PDF à partir des liens sélectionnés - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: Créer fichier PDF - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Créer un fichier PDF depuis le contenu du lien - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir avec Nuance PDF Converter 5.0 - res://D:\Program Files\Nuance\PDF Professional 5\cnvres_fre.dll /100
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Télécharger avec IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/MaConfig_3_5_2_1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O17 - HKLM\System\CCS\Services\Tcpip\..\{E65FE300-A717-4F55-AA0C-4108E67584C0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - E:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PDFProFiltSrv - Nuance Communications, Inc. - D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

nico987 · Answer

supprime cette ligne su'il reste : R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=10168&gct=&gc=1&q=

Maintenant  télécharge genproc ici : http://www.genproc.com/GenProc.exe 

Tu le lances et tu réponds oui à la question poste moi le rapport.

ALG16 · Answer

Rapport GenProc 2.623 [1] - sam. 09/05/2009 à 12:38:21 
@ Windows XP Service Pack 2 - Mode normal
@ Mozilla Firefox (3.5.2) [Navigateur par défaut]

 Il est impératif de désactiver le résident TeaTimer de Spybot pendant l'ensemble des manipulations qui vont suivre. Aide Tea-Timer : http://ww11.genproc.com/spybot/spybot.html

Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures" ; par la suite, laisse-le avec ses réglages par défaut. C'est tout. 

# Etape 1/ Télécharge :
 
- Toolbar-S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 (Team IDN) sur ton Bureau.


 Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/  ; Choisis ta session courante *** Administrateur *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[1]" sur ton bureau).


# Etape 2/ 

 Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

# Etape 3/ 

 Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 4/ 

 Redémarre normalement et poste, dans la même réponse : 

- Le contenu du rapport TB.txt situé dans C:\ ; 
- Un nouveau rapport HijackThis http://ww1.genproc.com/GenProc-HijackThis ;
- Un nouveau rapport GenProc ;

 Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

~~ Arguments de la procédure ~~


# Détections [1] GenProc 2.623 sam. 09/05/2009 à 12:38:53 
Toolbar:le sam. 09/05/2009 à 12:48:46 "C:\Documents and Settings\Administrateur\Application Data\Smart-Shopper" 

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 12:49:52 ~~

nico987 · Answer

désactive le résident TeaTimer de Spybot tuto ici : http://ww11.genproc.com/spybot/spybot.html

Tu télécharges toolbar s&d : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

Tu le lances et tu fais l'option 1 puis enter. Poste moi le rapport dans ton prochain message.

ALG16 · Answer

bonjour,voici mon rapport:


   -----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.80GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : Kaspersky Internet Security 7.0.1.325 (Activated)
   Firewall  : Kaspersky Internet Security 7.0.1.325 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:36 Go (Free:9 Go)
   D:\ (Local Disk) - FAT32 - Total:20 Go (Free:6 Go)
   E:\ (Local Disk) - FAT32 - Total:20 Go (Free:3 Go)
   F:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [1] ( dim. 09/06/2009|10:03 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\Config.xml
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\db
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\dwld
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cseport
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cses1
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\db\Aliases.dbs
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\db\Sites.dbs
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\dwld\Phishinglist.xip
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs\dwld\WhiteList.xip
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cseport\aggr_storage.xml
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cseport\send_storage.xml
   C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cses1\WhiteList.dbs
   C:\Program Files\Smart-Shopper
   C:\Program Files\Smart-Shopper\Bin
   C:\Program Files\Smart-Shopper\Uninst.exe
   C:\Program Files\Smart-Shopper\Bin\2.5.1
   C:\WINDOWS\iun6002.exe
   \...\{bc4be15d-6a34-4356-9e97-79e43da32b1d} - (p2p_torrent)

   -----------\  Extensions

   (Administrateur) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
   (Administrateur) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
   (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Administrateur) - {44d0a1b4-9c90-4f86-ac92-8680b5d6549e} => gm-notifier
   (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Administrateur) - {A5475360-A7EA-437b-9A79-29208F476940} => srr
   (Administrateur) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} => mybabylon_english
   (Administrateur) - {bc4be15d-6a34-4356-9e97-79e43da32b1d} => p2p_torrent
   (Administrateur) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey
   (Administrateur) - {f759ca51-3a91-4dd1-ae78-9db5eee9ebf0} => unmht
   (Administrateur) - {f759ca51-3a91-4dd1-ae78-9db5eee9ebf0} => unmhticon


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.ask.com/?o=14497&l=dis"
   "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://fr.yahoo.com/"
   "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"
   "Start Page"="https://fr.yahoo.com/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ADMINI~1\Application Data\uTorrent\Radiotracker Platinum Edition.v3.0.1.37 [francais] + crack.zip.torrent
   C:\DOCUME~1\ADMINI~1\Bureau\Raccourcis Bureau non utilis‚s\Raccourci vers YU_pro_2008.v6.1.1252.Incl.KeyGen-FFF-D.V.T.lnk
   C:\DOCUME~1\ADMINI~1\Menu D‚marrer\Programmes\AntiGA 2.0 Addon Tools\WinXP Keygen v2.5.lnk
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Compressed\Rapid_share_illimit\Cma\keygen.exe
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\COMMENT TELECHARGER BEAUCOUP PLUS VITE SES DIVX ET MP3 sur EDONKEY EMULE (crack serial sex fr truc astuce key no cd keygen).txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack1.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack2.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack3.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack4.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack5.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack6.txt
   C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy\Recovery\DAEMONToolsProCrack.zip



   1 - "C:\ToolBar SD\TB_1.txt" - dim. 09/06/2009|10:06 - Option : [1]

   -----------\  Fin du rapport a 10:06:55.96

nico987 · Answer

refais la même mais avec l'option 2

ALG16 · Answer

-----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.80GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : Kaspersky Internet Security 7.0.1.325 (Activated)
   Firewall  : Kaspersky Internet Security 7.0.1.325 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:36 Go (Free:9 Go)
   D:\ (Local Disk) - FAT32 - Total:20 Go (Free:6 Go)
   E:\ (Local Disk) - FAT32 - Total:20 Go (Free:3 Go)
   F:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( dim. 09/06/2009|11:01 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper\cs
   Supprime! - C:\Program Files\Smart-Shopper\Bin
   Supprime! - C:\Program Files\Smart-Shopper\Uninst.exe
   Supprime! - C:\WINDOWS\iun6002.exe
   Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Smart-Shopper
   Supprime! - C:\Program Files\Smart-Shopper
   Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla\Firefox\Profiles\YJ34WE~1.DEF\EXTENS~1\{bc4be15d-6a34-4356-9e97-79e43da32b1d}

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Administrateur) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
   (Administrateur) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
   (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Administrateur) - {44d0a1b4-9c90-4f86-ac92-8680b5d6549e} => gm-notifier
   (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Administrateur) - {A5475360-A7EA-437b-9A79-29208F476940} => srr
   (Administrateur) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} => mybabylon_english
   (Administrateur) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey
   (Administrateur) - {f759ca51-3a91-4dd1-ae78-9db5eee9ebf0} => unmht
   (Administrateur) - {f759ca51-3a91-4dd1-ae78-9db5eee9ebf0} => unmhticon


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.ask.com/?o=14497&l=dis"
   "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://fr.yahoo.com/"
   "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ADMINI~1\Application Data\uTorrent\Radiotracker Platinum Edition.v3.0.1.37 [francais] + crack.zip.torrent
   C:\DOCUME~1\ADMINI~1\Bureau\Raccourcis Bureau non utilis‚s\Raccourci vers YU_pro_2008.v6.1.1252.Incl.KeyGen-FFF-D.V.T.lnk
   C:\DOCUME~1\ADMINI~1\Menu D‚marrer\Programmes\AntiGA 2.0 Addon Tools\WinXP Keygen v2.5.lnk
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Compressed\Rapid_share_illimit\Cma\keygen.exe
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\COMMENT TELECHARGER BEAUCOUP PLUS VITE SES DIVX ET MP3 sur EDONKEY EMULE (crack serial sex fr truc astuce key no cd keygen).txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack1.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack2.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack3.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack4.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack5.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack6.txt
   C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy\Recovery\DAEMONToolsProCrack.zip



   1 - "C:\ToolBar SD\TB_1.txt" - dim. 09/06/2009|10:06 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - dim. 09/06/2009|11:05 - Option : [2]

   -----------\  Fin du rapport a 11:05:56.50

nico987 · Answer

ok c'est bon maintenant télécharge ça : http://www.commentcamarche.net/remote/download_get.php?ID=34055379

Tu l'installes le lances (clic droit puis exécuter en tant qu'administrateur) et tu fais examen complet puis rechercher.

Vire ce qui est trouvé de la quarentaine et poste moi le rapport.

ALG16 · Answer

salut!

Malwarebytes' Anti-Malware 1.40
Version de la base de données: 2747
Windows 5.1.2600 Service Pack 2

9/6/2009 16:53:34
mbam-log-2009-09-06 (16-53-34).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 311058
Temps écoulé: 5 hour(s), 29 minute(s), 18 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 10

Processus mémoire infecté(s):
C:\Documents and Settings\Administrateur\Local Settings\TempImages\sdd1035.exe (Trojan.Agent) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\ByteLinker (PUP.BitSpirit) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\RelevantKnowledge (Spyware.MarketScore) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\Administrateur\Local Settings\TempImages\sdd1035.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Downloads\Directlinks\CryptLoad_1.1.6\CryptLoad_1.1.6outer\FRITZ!Box
c.exe (PUP.KeyLogger) -> Quarantined and deleted successfully.
C:\Program Files\DAEMON Tools Pro\daemon.tools.pro.patch.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Fichiers communs\AntiGA 2.0 Addon Tools\KC.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Daemon.Tools.Pro.v4.10.218.0.Advanced.Incl.Patch\Daemon.Tools.Pro.v4.10.218.0.Advanced.Incl.Patch.(OSiOLEK.com)\daemon.tools.pro.patch.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Debrider_free_megauplaod_rapidshare\Debrider_free+megauplaod+rapidshare\petit plus\CryptLoad_1.1.6outer\FRITZ!Box
c.exe (PUP.KeyLogger) -> Quarantined and deleted successfully.
E:\utilitaires\CryptLoad_1.1.4outer\FRITZ!Box
c.exe (PUP.KeyLogger) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledgells.dll (Spyware.MarketScore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledgelservice.exe (Spyware.MarketScore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledgelvknlg.exe (Spyware.MarketScore) -> Quarantined and deleted successfully.

nico987 · Answer

un petit rapport hijack s'il te plaît.

ALG16 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:04:40, on 9/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\system32undll32.exe
D:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=14497&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [sdd1034] C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Point&&Go - C:\Program Files\Fichiers communs\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Ajouter le contenu du lien à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Créer des fichiers PDF à partir des liens sélectionnés - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: Créer fichier PDF - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Créer un fichier PDF depuis le contenu du lien - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir avec Nuance PDF Converter 5.0 - res://D:\Program Files\Nuance\PDF Professional 5\cnvres_fre.dll /100
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Télécharger avec IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/MaConfig_3_5_2_1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O17 - HKLM\System\CCS\Services\Tcpip\..\{E65FE300-A717-4F55-AA0C-4108E67584C0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - E:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PDFProFiltSrv - Nuance Communications, Inc. - D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

nico987 · Answer

ça va mieux l'ordi ou pas ?

Télécharge ceci : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

Tu le lances et fais l'option 1. poste le rapport.

ALG16 · Answer

l'ordinateur  fonctionne nettement mieux ,il n ya  pratiquement  plus de ralentissement;voici mon rapport:


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.80GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : Kaspersky Internet Security 7.0.1.325 (Activated)
   Firewall  : Kaspersky Internet Security 7.0.1.325 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:36 Go (Free:9 Go)
   D:\ (Local Disk) - FAT32 - Total:20 Go (Free:6 Go)
   E:\ (Local Disk) - FAT32 - Total:20 Go (Free:3 Go)
   F:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( dim. 09/06/2009|17:13 )
 
   --------------------\  Listing des dossiers dans APPLIC~1


   [11/18/2008|09:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\.Tribler
   [08/20/2008|11:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\ABBYY
   [08/18/2008|19:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [05/07/2009|16:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\AeroSnapApp
   [11/26/2008|16:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ankh
   [08/27/2009|17:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Anthropics
   [02/25/2009|08:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
   [03/26/2009|16:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\AquaSoft
   [07/14/2009|20:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\ArcticLine
   [01/11/2009|16:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Babylon(2)
   [07/23/2009|19:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\BitSpirit
   [04/11/2009|06:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\BSplayer Pro
   [03/04/2009|19:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Carnival Software
   [11/19/2008|18:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Crystal Office
   [08/19/2008|06:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\DAEMON Tools
   [07/19/2009|21:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\DAEMON Tools Pro
   [05/02/2009|20:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\DeskSoft
   [06/10/2009|07:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\Dexpot
   [12/06/2008|07:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
   [04/09/2009|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Djamel
   [09/06/2009|16:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\DMCache
   [08/19/2008|06:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Drag'n Drop CD+DVD
   [08/22/2008|10:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Druide
   [07/25/2009|20:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
   [12/21/2008|18:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\ESTSoft
   [11/18/2008|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\FastStone
   [09/23/2007|17:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Gearbox Software
   [07/07/2009|07:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\GlarySoft
   [07/23/2009|20:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Gold Casual Games
   [08/23/2009|20:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
   [07/16/2009|07:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Groobax
   [06/04/2009|08:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtk-2.0
   [08/18/2008|09:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
   [08/18/2008|08:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [04/23/2009|17:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\IDM
   [01/11/2009|16:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\IDM(2)
   [01/12/2009|23:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\InAlbumTemp
   [09/10/2008|13:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\iPodder
   [09/06/2008|07:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\KALiNKOsoft
   [12/10/2008|23:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\KoffeeWare
   [06/28/2009|18:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lingoes
   [08/18/2008|10:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Locate32
   [02/19/2009|23:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\LogoMaker
   [12/13/2008|13:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [11/13/2008|14:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\MailWasherFree
   [11/29/2008|18:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\MailWasherPro
   [09/26/2008|09:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
   [08/12/2009|19:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [10/21/2008|17:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\mIRC
   [03/27/2009|08:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
   [06/04/2009|16:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
   [08/30/2008|19:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\My Games
   [09/14/2008|09:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\NCH Swift Sound
   [01/11/2009|16:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
   [03/27/2009|08:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Netscape
   [03/20/2009|09:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nitro PDF
   [08/07/2009|10:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\Opera
   [03/27/2009|09:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Photodex
   [09/30/2008|16:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
   [09/14/2008|08:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Recordpad
   [09/26/2008|11:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Samsung
   [01/24/2009|22:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\ScanSoft
   [08/30/2009|21:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Skype
   [08/30/2009|21:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\skypePM
   [06/08/2009|19:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Softplicity
   [08/27/2009|22:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolSuite
   [03/31/2009|06:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\Spamihilator
   [07/14/2009|20:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sphinx
   [11/19/2008|22:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\stickies
   [01/30/2009|14:13] C:\DOCUME~1\ADMINI~1\APPLIC~1\SumatraPDF
   [12/10/2008|21:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [09/23/2008|17:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Syntrillium
   [04/12/2009|07:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\TeraCopy
   [02/14/2009|16:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Thinstall
   [04/03/2009|10:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\TuneUp Software
   [08/18/2008|09:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\URSoft
   [07/25/2009|21:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
   [07/23/2009|07:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\ValuSoft
   [06/02/2009|15:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\VitySoft
   [05/22/2009|20:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
   [04/25/2009|20:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\VSO
   [05/15/2009|20:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Windows Search
   [01/16/2009|11:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR
   [03/15/2009|21:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\XnView
   [08/19/2008|21:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Yahoo!
   [01/22/2009|13:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Zeon

   [03/14/2009|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
   [03/26/2009|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{09F24272-83DD-4090-B32C-09B6EC962B22}
   [04/03/2009|09:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
   [04/14/2009|07:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [08/13/2009|08:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\4D
   [08/22/2008|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ABBYY
   [05/27/2009|18:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apowersoft
   [08/18/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [08/18/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [12/06/2008|07:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ashampoo
   [01/08/2009|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Babylon(2)
   [08/30/2009|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Pro
   [12/10/2008|08:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DFX
   [08/27/2009|21:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [03/15/2009|08:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
   [03/15/2009|08:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
   [10/25/2008|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [09/06/2009|17:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
   [08/18/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
   [09/05/2009|10:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [12/12/2008|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
   [07/15/2009|08:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
   [09/26/2008|09:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [08/12/2009|20:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [07/26/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [11/19/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MinigolfAdventures
   [11/16/2008|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
   [06/27/2009|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
   [09/14/2008|08:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound
   [03/20/2009|09:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nitro PDF
   [02/01/2009|09:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nuance
   [10/24/2007|02:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
   [01/12/2009|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [06/16/2009|01:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pdf995
   [02/06/2009|07:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Power Soft
   [09/14/2008|08:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
   [02/01/2009|12:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
   [01/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simple Star
   [01/11/2009|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simple Star Shared
   [06/14/2009|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [08/30/2009|08:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [08/29/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [02/14/2009|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TreeCardGames
   [04/03/2009|09:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [09/28/2008|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [01/12/2009|14:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [11/06/2008|08:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [09/09/2008|06:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\wmp
   [06/17/2009|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
   [06/22/2009|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
   [07/21/2009|08:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YellowFrog
   [01/22/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zeon

   [08/18/2008|08:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [05/15/2009|13:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [08/18/2008|08:14] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [09/06/2009 13:46][--a------] C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1390067357-746137067-725345543-500.job
   [08/25/2009 17:19][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [09/06/2009 16:58][--ah-----] C:\WINDOWS	asks\SA.DAT
   [10/02/2001 19:18][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [05/10/2009|22:12] C:\Program Files\7-Zip
   [11/01/2008|19:50] C:\Program Files\ABBYY FineReader 9.0
   [05/18/2009|14:25] C:\Program Files\AD Sound Recorder
   [09/23/2007|14:15] C:\Program Files\Adobe
   [08/05/2009|21:09] C:\Program Files\AGEIA Technologies
   [09/10/2008|22:46] C:\Program Files\Apple Software Update
   [07/07/2009|07:37] C:\Program Files\AskSearch
   [02/06/2009|07:51] C:\Program Files\AviSynth 2.5
   [06/22/2009|18:14] C:\Program Files\Babylon
   [01/11/2009|16:36] C:\Program Files\Babylon(2)
   [08/19/2008|06:32] C:\Program Files\Badongo
   [07/23/2009|19:07] C:\Program Files\BitSpirit
   [02/25/2009|08:06] C:\Program Files\Bonjour
   [04/12/2009|15:52] C:\Program Files\BS.Player ControlBar
   [09/20/2008|19:00] C:\Program Files\CA Yahoo! Anti-Spy
   [05/18/2009|20:06] C:\Program Files\CCleaner
   [08/20/2008|10:08] C:\Program Files\CDisplay
   [07/21/2009|15:38] C:\Program Files\Conduit
   [02/01/2009|08:25] C:\Program Files\Cordial
   [02/23/2009|09:49] C:\Program Files\CV Expert 3
   [07/19/2009|21:42] C:\Program Files\DAEMON Tools Pro
   [01/24/2009|08:27] C:\Program Files\DFX
   [09/22/2008|15:50] C:\Program Files\directx
   [07/25/2009|20:41] C:\Program Files\DivX
   [08/19/2008|06:52] C:\Program Files\Drag'n Drop CD+DVD
   [08/22/2008|12:17] C:\Program Files\Druide
   [08/31/2008|19:41] C:\Program Files\Encore
   [04/22/2009|11:29] C:\Program Files\EPSON
   [03/24/2009|08:46] C:\Program Files\ESET
   [08/28/2009|08:43] C:\Program Files\Everything
   [08/05/2009|21:07] C:\Program Files\Fichiers communs
   [08/19/2008|06:34] C:\Program Files\FLV Player
   [05/24/2009|18:18] C:\Program Files\Foxit Software
   [08/11/2009|08:58] C:\Program Files\Free PDF to Word Doc Converter
   [08/02/2009|07:33] C:\Program Files\freevideomaster
   [11/06/2008|14:59] C:\Program Files\FreshDevices
   [08/27/2009|21:21] C:\Program Files\Google
   [12/18/2008|19:11] C:\Program Files\Innovative Solutions
   [08/28/2009|16:42] C:\Program Files\InstallShield Installation Information
   [01/12/2009|10:04] C:\Program Files\Internet Explorer
   [07/18/2009|07:32] C:\Program Files\iPod
   [07/18/2009|07:33] C:\Program Files\iTunes
   [07/15/2009|08:34] C:\Program Files\Java
   [04/10/2009|20:47] C:\Program Files\KaraFun
   [01/11/2009|18:16] C:\Program Files\Kaspersky Lab
   [09/05/2009|10:18] C:\Program Files\ma-config.com
   [09/06/2009|11:19] C:\Program Files\Malwarebytes' Anti-Malware
   [09/14/2008|08:31] C:\Program Files\Media Player Classic
   [10/14/2008|21:39] C:\Program Files\Messenger
   [02/21/2009|22:15] C:\Program Files\Microsoft
   [08/18/2008|08:10] C:\Program Files\microsoft frontpage
   [07/26/2009|16:01] C:\Program Files\Microsoft Office
   [08/29/2009|09:16] C:\Program Files\Microsoft Silverlight
   [02/21/2009|22:20] C:\Program Files\Microsoft SQL Server Compact Edition
   [02/21/2009|22:23] C:\Program Files\Microsoft Sync Framework
   [07/26/2009|16:00] C:\Program Files\Microsoft Visual Studio
   [07/26/2009|16:01] C:\Program Files\Microsoft Works
   [07/26/2009|15:59] C:\Program Files\Microsoft.NET
   [08/18/2008|08:49] C:\Program Files\Movie Maker
   [09/06/2009|17:02] C:\Program Files\Mozilla Firefox
   [09/23/2008|17:36] C:\Program Files\mp3DirectCut
   [06/16/2009|06:49] C:\Program Files\MP3Gain
   [02/09/2009|18:14] C:\Program Files\MSN
   [08/18/2008|08:07] C:\Program Files\MSN Gaming Zone
   [11/18/2008|18:05] C:\Program Files\MyHeritage
   [09/14/2008|08:57] C:\Program Files\NCH Software
   [04/11/2009|06:53] C:\Program Files\NCH Swift Sound
   [08/18/2008|08:49] C:\Program Files\NetMeeting
   [08/01/2009|20:24] C:\Program Files\Nexus Radio
   [01/11/2009|16:33] C:\Program Files\OFFICE ONE6.5
   [06/16/2009|01:08] C:\Program Files\omniformat
   [11/29/2008|19:20] C:\Program Files\Online TV Player 4
   [09/08/2008|15:02] C:\Program Files\OpenAL
   [08/18/2008|08:49] C:\Program Files\Outlook Express
   [12/04/2008|13:38] C:\Program Files\Pando Networks
   [08/19/2008|06:45] C:\Program Files\PandoBar
   [06/16/2009|01:04] C:\Program Files\pdf995
   [08/17/2009|16:39] C:\Program Files\Prg Chris
   [08/05/2009|21:19] C:\Program Files\Prison Tycoon 4
   [06/16/2009|00:58] C:\Program Files\QuickTime
   [09/14/2008|08:48] C:\Program Files\Real
   [01/11/2009|16:30] C:\Program Files\Realtek
   [08/18/2008|20:38] C:\Program Files\Realtek AC97
   [09/26/2008|10:24] C:\Program Files\Samsung
   [08/18/2008|08:09] C:\Program Files\Services en ligne
   [06/14/2009|20:42] C:\Program Files\Skype
   [12/18/2008|20:23] C:\Program Files\Softland
   [08/30/2009|08:31] C:\Program Files\Spybot - Search & Destroy
   [06/02/2009|15:06] C:\Program Files\SuperCopier2
   [01/27/2009|20:49] C:\Program Files\Synapse D‚veloppement
   [04/10/2009|20:51] C:\Program Files\TabGard
   [09/20/2008|20:21] C:\Program Files\Tank Universal Demo
   [05/16/2009|19:44] C:\Program Files\Trend Micro
   [08/13/2009|08:40] C:\Program Files\TuneUp Utilities 2009
   [06/10/2009|23:11] C:\Program Files\Unlocker
   [06/15/2009|19:27] C:\Program Files\USB Disk Security
   [08/18/2008|11:35] C:\Program Files\uTorrent
   [07/09/2009|22:23] C:\Program Files\Vidal
   [08/18/2008|11:29] C:\Program Files\VideoLAN
   [01/24/2009|08:26] C:\Program Files\Winamp
   [05/16/2009|19:21] C:\Program Files\Windows Desktop Search
   [08/09/2009|10:50] C:\Program Files\Windows Live
   [02/21/2009|22:12] C:\Program Files\Windows Live SkyDrive
   [08/22/2008|09:04] C:\Program Files\Windows Media Player
   [08/18/2008|08:48] C:\Program Files\Windows NT
   [08/18/2008|08:10] C:\Program Files\xerox
   [08/31/2008|17:08] C:\Program Files\X'nStop
   [08/28/2009|16:47] C:\Program Files\Yahoo!
   [02/06/2009|07:51] C:\Program Files\zabkat

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [09/26/2008|10:43] C:\Program Files\Fichiers communs\Adobe
   [09/06/2009|16:53] C:\Program Files\Fichiers communs\AntiGA 2.0 Addon Tools
   [07/18/2009|07:31] C:\Program Files\Fichiers communs\Apple
   [07/23/2009|19:07] C:\Program Files\Fichiers communs\BitSpirit
   [02/23/2009|09:48] C:\Program Files\Fichiers communs\Borland Shared
   [07/26/2009|16:01] C:\Program Files\Fichiers communs\DESIGNER
   [12/10/2008|08:09] C:\Program Files\Fichiers communs\DFX
   [09/23/2007|21:13] C:\Program Files\Fichiers communs\DirectX
   [07/25/2009|20:40] C:\Program Files\Fichiers communs\DivX Shared
   [01/27/2009|20:49] C:\Program Files\Fichiers communs\Expert System
   [10/25/2008|11:32] C:\Program Files\Fichiers communs\InstallShield
   [08/20/2009|07:46] C:\Program Files\Fichiers communs\Microsoft Shared
   [08/18/2008|08:08] C:\Program Files\Fichiers communs\MSSoap
   [08/18/2008|10:00] C:\Program Files\Fichiers communs\ODBC
   [09/14/2008|08:48] C:\Program Files\Fichiers communs\Real
   [08/26/2008|09:39] C:\Program Files\Fichiers communs\Scanner
   [01/22/2009|13:07] C:\Program Files\Fichiers communs\ScanSoft Shared
   [08/18/2008|08:08] C:\Program Files\Fichiers communs\Services
   [12/31/2008|15:37] C:\Program Files\Fichiers communs\Simple Star Shared
   [06/14/2009|20:42] C:\Program Files\Fichiers communs\Skype
   [08/18/2008|10:00] C:\Program Files\Fichiers communs\SpeechEngines
   [12/01/2008|18:36] C:\Program Files\Fichiers communs\SWF Studio
   [07/26/2009|16:00] C:\Program Files\Fichiers communs\System
   [02/21/2009|22:06] C:\Program Files\Fichiers communs\Windows Live
   [11/06/2008|08:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [08/05/2009|21:07] C:\Program Files\Fichiers communs\Wise Installation Wizard
   [09/14/2008|08:48] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 43 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-09-06 17:17:41
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ADMINI~1\Application Data\uTorrent\Radiotracker Platinum Edition.v3.0.1.37 [francais] + crack.zip.torrent
   C:\DOCUME~1\ADMINI~1\Bureau\Raccourcis Bureau non utilis‚s\Raccourci vers YU_pro_2008.v6.1.1252.Incl.KeyGen-FFF-D.V.T.lnk
   C:\DOCUME~1\ADMINI~1\Menu D‚marrer\Programmes\AntiGA 2.0 Addon Tools\WinXP Keygen v2.5.lnk
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Compressed\Rapid_share_illimit\Cma\keygen.exe
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\COMMENT TELECHARGER BEAUCOUP PLUS VITE SES DIVX ET MP3 sur EDONKEY EMULE (crack serial sex fr truc astuce key no cd keygen).txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack1.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack2.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack3.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack4.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack5.txt
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Le saint Graal de l informatique\- Informatique\Astuces PC\cours de crack\Crack6.txt
   C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy\Recovery\DAEMONToolsProCrack.zip


   [F:41][D:28]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
   [F:23][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
   [F:753][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - dim. 09/06/2009|17:22 - Option : [1]

   --------------------\  Fin du rapport a 17:22:50

nico987 · Answer

à priori plus d'infection mais connais-tu cette adresses ip : '41.221.20.4 66.28.0.61' .
Peut-être celle d'un appareil en wifi ?

ALG16 · Answer

oh non ,pas du tout!
Enfin je tiens à te remercier vivement pour l'effort et la patience déployée.

nico987 · Answer

refais un rapport hijack, tu supprimes cette ligne : O17 - HKLM\System\CCS\Services\Tcpip\..\{19784130-635A-4A4D-88AB-EED5824D9BF5}: NameServer = 41.221.20.4 66.28.0.61

P.S : elle y est 2 fois une ligne entre les deux les séparent.

Maintenant c'est bon, je te laisse tranquille. Après que tu aies fais ceci =)

ALG16 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:50:38, on 9/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\system32undll32.exe
D:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\BitSpirit\BitSpirit.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ask.com/?o=14497&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: freevideomaster Toolbar - {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:\Program Files\freevideomaster	bfre1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [sdd1034] C:\DOCUME~1\ADMINI~1\LOCALS~1\TempImages\sdd1035.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Point&&Go - C:\Program Files\Fichiers communs\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Ajouter le contenu du lien à un fichier PDF existant - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Créer des fichiers PDF à partir des liens sélectionnés - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: Créer fichier PDF - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Créer un fichier PDF depuis le contenu du lien - res://D:\Program Files\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir avec Nuance PDF Converter 5.0 - res://D:\Program Files\Nuance\PDF Professional 5\cnvres_fre.dll /100
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Télécharger avec IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/MaConfig_3_5_2_1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E65FE300-A717-4F55-AA0C-4108E67584C0}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - E:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PDFProFiltSrv - Nuance Communications, Inc. - D:\Program Files\Nuance\PDF Professional 5\PDFProFiltSrv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

nico987 · Answer

Voilà je pense que c'est bon...
Un problème sur l'ordi ? 

Si non, coche résolu.

ALG16 · Answer

merci beaucoup ,dieu te garde.

ALG16 · Answer

merci

Hijack help - Page 2

Discussions similaires

Newsletters