Bug besoin de vous

salut
Télécharge l2mfix ici:

http://www.downloads.subratam.org/l2mfix.exe

Double clic sur l2mfix.exe pour lancer l'extraction
Dans le dossier l2mfix, double clic sur l2mfix.bat, appuie sur n'importe quelle touche puis choisis l'option #1 (et pas autre chose) et valide avec la touche entrée.
Le bloc note va s'ouvrir avec le résultat du scan.
Fais un copier coller du résultat ici.
*****
Maintenant relances l2mfix.bat
et choisis l'option 2
Il va te demander d'appuyer sur une touche pour redémarrer
appuie sur n'importe quelle touche et laisse le pc redémarrer
le bloc note va s'ouvrir, copie et colle le contenu ici

salut Régis,

juste une pensée (de plus ) pour toi car je pars demain matin dans le 59. Sniff mes montahgnes me manquent déjà...lol

Ho lille pas un drame.

A+

Jean

Salut jean
je penserais a toi !!
C est gentil en tout cas...

Tu vas a Lille? Attention a toi, des emeutes ont eclaté ...

oui m'en parle pas je viens de voir çà à la tv...

en plus je suis à coté de la gare et c'est déjà pas top en general...

ma fois on verra bien.

en tout cas merci de l'attention.

re,
oui fais gaffe a toi, surtout dans la banlieue Lilloise ;-)
Tourne pas non plus trop le soir dans les autres villes du coin comme Tourcoing ou Roubaix

;-)

Prends soin de toi mon ami

le voila

L2MFIX find log 1.04a
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Reinstall]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\ktrql7951.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above
Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de)
This program is Freeware, use it on your own risk!

Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify:
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-NI) ALLOW Read BUILTIN\Utilisateurs
(ID-IO) ALLOW Read BUILTIN\Utilisateurs
(ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-NI) ALLOW Full access BUILTIN\Administrateurs
(ID-IO) ALLOW Full access BUILTIN\Administrateurs
(ID-NI) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{2CC8C42B-9460-5EDA-4ACE-E47C17B356C6}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{1EBC3533-B289-409F-9924-B84B3F0717D2}"="AceFTP Context Menu Shell Extension"
"{60CE0473-50F7-417B-A10F-6921827B9CA8}"="Acronis PrivacyExpert Shell Extension Class"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{2AA59FC0-31E8-42DA-9D3C-E9A52953853B}"="CopyToCD shell extension"
"{B446400D-0030-457b-8F64-422A19605186}"="Logitech Gallery"
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{330417E8-EF62-4047-82BE-D8305CEFF572}"="AMEncShlExt extension"
@="MicroBest Cracklock"
"{EB59D46C-6787-4423-BC85-E04B733E73B7}"=""
"{4DB63743-2B82-44BA-AB4E-6A21C0B97966}"=""
"{50FC833F-E248-459E-B92F-76ACE5AA3C87}"=""
"{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache"
"{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}"=""
"{0BE1F345-1DFF-4A84-B781-42740DFE66F4}"=""
"{845B1978-8AC9-447D-8ABD-419686EEC757}"=""
"{0B112BC7-950C-41AC-9979-A4C487DF05C7}"=""
"{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}"=""
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
"{E0D79304-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79305-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79306-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79307-84BE-11CE-9641-444553540000}"="WinZip"
"{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}"=""
"{CB3F986C-3595-4935-AEB4-AAB915D02A3F}"=""
"{AB77609F-2178-4E6F-9C4B-44AC179D937A}"="aý Context Menu Shell Extension"

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}]
@=""
"IDEx"="AD"

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{EB59D46C-6787-4423-BC85-E04B733E73B7}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DB63743-2B82-44BA-AB4E-6A21C0B97966}\InprocServer32]
@="C:\\WINDOWS\\system32\\lxhsvc.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{50FC833F-E248-459E-B92F-76ACE5AA3C87}\InprocServer32]
@="C:\\WINDOWS\\system32\\dukquota.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{7A22E687-75DF-461C-BBD4-B3E4D2B59FDC}\InprocServer32]
@="C:\\WINDOWS\\system32\\jcbexec.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BE1F345-1DFF-4A84-B781-42740DFE66F4}\InprocServer32]
@="C:\\WINDOWS\\system32\\ddconfig.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{845B1978-8AC9-447D-8ABD-419686EEC757}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0B112BC7-950C-41AC-9979-A4C487DF05C7}\InprocServer32]
@="C:\\WINDOWS\\system32\\sOfrcdlg.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C90EDF28-F0B9-438D-84A3-391DF0BA6FD8}\InprocServer32]
@="C:\\WINDOWS\\system32\\kmdaze.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BD0D62A2-23C2-4CF4-858A-0F7023D790B7}\InprocServer32]
@="C:\\WINDOWS\\system32\\mlj8l91u1.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{CB3F986C-3595-4935-AEB4-AAB915D02A3F}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
axstream.dll Sun 18 Sep 2005 20:53:38 ..S.R 235 452 229,93 K
azas0i~1.dll Tue 30 Aug 2005 17:29:20 ..S.R 234 739 229,23 K
cdyptui.dll Wed 5 Oct 2005 16:50:56 ..S.R 234 513 229,02 K
dlprov.dll Thu 6 Oct 2005 11:39:10 ..S.R 234 189 228,70 K
dn6801~1.dll Sun 18 Sep 2005 10:02:34 ..S.R 236 313 230,77 K
dnlo01~1.dll Sun 14 Aug 2005 18:47:36 ..S.R 233 749 228,27 K
dp8vb.dll Tue 20 Sep 2005 16:27:34 ..S.R 233 559 228,08 K
ducompos.dll Thu 3 Nov 2005 0:14:42 ..S.R 234 612 229,11 K
dwconfig.dll Mon 19 Sep 2005 6:47:26 ..S.R 235 452 229,93 K
dxskadp.dll Wed 21 Sep 2005 18:35:42 ..S.R 236 052 230,52 K
en88l1~1.dll Fri 2 Sep 2005 20:56:44 ..S.R 235 596 230,07 K
en8ql1~1.dll Mon 10 Oct 2005 22:21:18 ..S.R 233 526 228,05 K
enpml1~1.dll Wed 12 Oct 2005 17:58:44 ..S.R 233 321 227,85 K
f82m0i~1.dll Thu 3 Nov 2005 0:14:42 ..S.R 234 740 229,24 K
fn0021~1.dll Thu 27 Oct 2005 12:00:46 ..S.R 235 758 230,23 K
fpp403~1.dll Wed 7 Sep 2005 0:20:46 ..S.R 234 188 228,70 K
fprq03~1.dll Fri 2 Sep 2005 19:56:10 ..S.R 234 308 228,82 K
g240lc~1.dll Sun 14 Aug 2005 18:42:06 ..S.R 234 791 229,29 K
g6220g~1.dll Tue 6 Sep 2005 19:31:28 ..S.R 233 941 228,46 K
g6jolg~1.dll Sun 6 Nov 2005 4:56:40 ..S.R 234 272 228,78 K
gp22l3~1.dll Sun 16 Oct 2005 19:35:12 ..S.R 234 357 228,86 K
gpn6l3~1.dll Sat 24 Sep 2005 9:16:48 ..S.R 236 309 230,77 K
gpr0l3~1.dll Thu 1 Sep 2005 1:22:38 ..S.R 234 808 229,30 K
h42o0e~1.dll Sun 2 Oct 2005 20:58:40 ..... 234 513 229,02 K
hr0005~1.dll Fri 2 Sep 2005 23:34:02 ..S.R 233 720 228,24 K
hr0q05~1.dll Sun 11 Sep 2005 15:21:38 ..... 233 494 228,02 K
hrl205~1.dll Tue 6 Sep 2005 20:24:04 ..S.R 233 950 228,46 K
hrn805~1.dll Mon 31 Oct 2005 18:33:38 ..S.R 234 612 229,11 K
i0240a~1.dll Thu 25 Aug 2005 15:14:10 ..S.R 234 469 228,97 K
iiput.dll Sat 1 Oct 2005 9:37:08 ..S.R 236 807 231,25 K
irl2l5~1.dll Fri 21 Oct 2005 23:27:40 ..S.R 234 999 229,49 K
j8l40i~1.dll Mon 5 Sep 2005 9:37:56 ..S.R 234 153 228,66 K
jkl40i~1.dll Sun 2 Oct 2005 20:58:40 ..S.R 234 189 228,70 K
jr0025~1.dll Sun 18 Sep 2005 9:34:38 ..S.R 235 499 229,98 K
jt2m07~1.dll Fri 19 Aug 2005 23:44:14 ..S.R 235 179 229,66 K
jt8607~1.dll Mon 19 Sep 2005 6:55:26 ..S.R 235 452 229,93 K
k0lqla~1.dll Tue 6 Sep 2005 14:02:00 ..S.R 235 245 229,73 K
k244lc~1.dll Fri 9 Sep 2005 20:19:38 ..S.R 234 936 229,43 K
k6lqlg~1.dll Wed 10 Aug 2005 4:29:52 A.... 233 504 228,03 K
kjdca.dll Wed 28 Sep 2005 20:39:28 ..S.R 235 481 229,96 K
kmdaze.dll Sun 6 Nov 2005 12:08:04 ..S.R 235 869 230,34 K
ktn6l7~1.dll Thu 8 Sep 2005 10:59:02 ..S.R 236 747 231,20 K
ktrql7~1.dll Sun 6 Nov 2005 0:01:42 ..S.R 235 869 230,34 K
l8j8li~1.dll Wed 31 Aug 2005 20:02:20 ..S.R 233 715 228,23 K
lfwvc12n.dll Sun 25 Sep 2005 9:45:10 ..S.R 234 656 229,16 K
mecories.dll Wed 21 Sep 2005 17:22:52 ..S.R 235 265 229,75 K
mipi.dll Fri 30 Sep 2005 21:21:38 ..S.R 235 075 229,56 K
mlj8l9~1.dll Sun 14 Aug 2005 18:42:06 ..S.R 233 749 228,27 K
msdemui.dll Tue 4 Oct 2005 7:34:02 ..S.R 234 189 228,70 K
mvc71fra.dll Mon 26 Sep 2005 14:45:52 ..S.R 235 075 229,56 K
mvlol9~1.dll Wed 7 Sep 2005 22:01:44 ..S.R 236 429 230,89 K
mvrul9~1.dll Thu 13 Oct 2005 12:46:34 ..S.R 233 735 228,25 K
n2l8lc~1.dll Sun 28 Aug 2005 2:20:08 ..S.R 235 881 230,35 K
n66qlg~1.dll Thu 8 Sep 2005 18:48:08 ..S.R 233 519 228,04 K
odesvr.dll Thu 6 Oct 2005 20:18:56 ..S.R 235 961 230,43 K
p2p6lc~1.dll Tue 11 Oct 2005 15:10:18 ..S.R 236 177 230,64 K
pwqsp.dll Sat 24 Sep 2005 9:16:48 ..S.R 234 656 229,16 K
pwspl.dll Fri 23 Sep 2005 19:06:28 ..S.R 233 268 227,80 K
q0nu0a~1.dll Sun 2 Oct 2005 20:34:04 ..S.R 235 139 229,63 K
q6680g~1.dll Wed 7 Sep 2005 9:55:24 ..S.R 234 581 229,08 K
q8nuli~1.dll Sun 18 Sep 2005 9:36:32 ..... 235 452 229,93 K
qfartz.dll Sun 2 Oct 2005 20:18:22 ..S.R 233 375 227,90 K
rhsdlg.dll Fri 30 Sep 2005 9:24:46 ..S.R 236 807 231,25 K
rjcpldlg.dll Wed 21 Sep 2005 12:30:10 ..S.R 233 559 228,08 K
s0pu0a~1.dll Sat 10 Sep 2005 19:25:28 ..S.R 233 494 228,02 K
shsvc.dll Mon 3 Oct 2005 18:51:40 ..S.R 234 513 229,02 K
snncui.dll Sat 24 Sep 2005 13:55:58 ..S.R 234 656 229,16 K
suriptpw.dll Thu 6 Oct 2005 15:06:40 ..S.R 235 803 230,27 K
surmdll.dll Sun 18 Sep 2005 22:23:40 ..S.R 235 988 230,46 K
szfrslv.dll Mon 26 Sep 2005 19:57:06 ..S.R 233 641 228,16 K
wkhrm.dll Wed 21 Sep 2005 14:03:34 ..S.R 233 559 228,08 K
wmigest.dll Sun 18 Sep 2005 10:12:00 ..S.R 235 988 230,46 K
wobvw.dll Sun 2 Oct 2005 20:34:04 ..S.R 234 189 228,70 K
wvpencen.dll Thu 29 Sep 2005 9:35:56 ..S.R 235 075 229,56 K
wwsdmoe.dll Tue 27 Sep 2005 6:39:06 ..S.R 235 075 229,56 K
wzdrmnet.dll Sat 24 Sep 2005 18:27:30 ..S.R 235 693 230,17 K

76 items found: 76 files (72 H/S), 0 directories.
Total of file sizes: 17 845 169 bytes 17,02 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 5829-A9B1

R‚pertoire de C:\WINDOWS\System32

06/11/2005 12:08 235ÿ869 kmdaze.dll
06/11/2005 04:56 234ÿ272 g6jolg1316.dll
06/11/2005 00:01 235ÿ869 ktrql7951.dll
03/11/2005 18:54 <REP> dllcache
03/11/2005 00:14 234ÿ612 ducompos.dll
03/11/2005 00:14 234ÿ740 f82m0if1e82.dll
31/10/2005 18:33 234ÿ612 hrn8055ue.dll
27/10/2005 12:00 235ÿ758 fn0021dmg.dll
21/10/2005 23:27 234ÿ999 irl2l53o1.dll
16/10/2005 19:35 234ÿ357 gp22l3fo1.dll
13/10/2005 12:46 233ÿ735 mvrul9991.dll
12/10/2005 17:58 233ÿ321 enpml1711.dll
11/10/2005 15:10 236ÿ177 p2p6lc7s1f.dll
10/10/2005 22:21 233ÿ526 en8ql1l51.dll
06/10/2005 20:18 235ÿ961 odesvr.dll
06/10/2005 15:06 235ÿ803 suriptpw.dll
06/10/2005 11:39 234ÿ189 dlprov.dll
05/10/2005 16:50 234ÿ513 cdyptui.dll
04/10/2005 07:34 234ÿ189 msdemui.dll
03/10/2005 18:51 234ÿ513 shsvc.dll
02/10/2005 20:58 234ÿ189 jKl40i3qe8.dll
02/10/2005 20:34 234ÿ189 wobvw.dll
02/10/2005 20:34 235ÿ139 q0nu0a59ed.dll
02/10/2005 20:18 233ÿ375 qfartz.dll
01/10/2005 09:37 236ÿ807 iiput.dll
30/09/2005 21:21 235ÿ075 MIPI.DLL
30/09/2005 09:24 236ÿ807 rHsdlg.dll
29/09/2005 09:35 235ÿ075 wvpencen.dll
28/09/2005 20:39 235ÿ481 kjdca.dll
27/09/2005 06:39 235ÿ075 wwsdmoe.dll
26/09/2005 19:57 233ÿ641 sZfrslv.dll
26/09/2005 14:45 235ÿ075 MVC71FRA.DLL
25/09/2005 09:45 234ÿ656 Lfwvc12n.dll
24/09/2005 18:27 235ÿ693 WZDRMNet.dll
24/09/2005 13:55 234ÿ656 snncui.dll
24/09/2005 09:16 234ÿ656 pWqsp.dll
24/09/2005 09:16 236ÿ309 gpn6l35s1.dll
23/09/2005 19:06 233ÿ268 pwspl.dll
21/09/2005 18:35 236ÿ052 dxskadp.dll
21/09/2005 17:22 235ÿ265 mecories.dll
21/09/2005 14:03 233ÿ559 WkhRm.dll
21/09/2005 12:30 233ÿ559 rJcpldlg.dll
20/09/2005 16:27 233ÿ559 dp8vb.dll
19/09/2005 06:55 235ÿ452 jt8607lse.dll
19/09/2005 06:47 235ÿ452 dwconfig.dll
18/09/2005 22:23 235ÿ988 surmdll.dll
18/09/2005 20:53 235ÿ452 axstream.dll
18/09/2005 10:11 235ÿ988 wmigest.dll
18/09/2005 10:02 236ÿ313 dn6801jue.dll
18/09/2005 09:34 235ÿ499 jr0025dmg.dll
10/09/2005 19:25 233ÿ494 s0pu0a79ed.dll
09/09/2005 20:19 234ÿ936 k244lchq1f4e.dll
08/09/2005 18:48 233ÿ519 n66qlgj516o.dll
08/09/2005 10:59 236ÿ747 ktn6l75s1.dll
07/09/2005 22:01 236ÿ429 mvlol9331.dll
07/09/2005 09:55 234ÿ581 q6680gjue6o80.dll
07/09/2005 00:20 234ÿ188 fpp4037qe.dll
06/09/2005 20:24 233ÿ950 hrl2053oe.dll
06/09/2005 19:31 233ÿ941 g6220gfoe62c0.dll
06/09/2005 14:01 235ÿ245 k0lqla351d.dll
05/09/2005 09:37 234ÿ153 j8l40i3qe8.dll
02/09/2005 23:34 233ÿ720 hr0005dme.dll
02/09/2005 20:56 235ÿ596 en88l1lu1.dll
02/09/2005 19:56 234ÿ308 fprq0395e.dll
01/09/2005 01:22 234ÿ808 gpr0l39m1.dll
31/08/2005 20:02 233ÿ715 l8j8li1u18.dll
30/08/2005 17:29 234ÿ739 azas0id7e80.dll
28/08/2005 02:20 235ÿ881 n2l8lc3u1f.dll
25/08/2005 15:14 234ÿ469 i0240afqed2e0.dll
19/08/2005 23:44 235ÿ179 jt2m07f1e.dll
14/08/2005 18:47 233ÿ749 dnlo0133e.dll
14/08/2005 18:42 233ÿ749 mlj8l91u1.dll
14/08/2005 18:42 234ÿ791 g240lchm1f4a.dll
01/08/2005 02:54 235ÿ174 sOfrcdlg.dll
31/07/2005 17:27 233ÿ720 m8lsli3718.dll
28/07/2005 22:08 233ÿ720 ddconfig.dll
28/07/2005 14:21 233ÿ720 jcbexec.dll
27/07/2005 23:58 235ÿ253 lvn6095se.dll
27/07/2005 23:58 235ÿ474 o4nsle571h.dll
26/07/2005 22:16 234ÿ831 gpjol3131.dll
26/07/2005 22:16 233ÿ720 dukquota.dll
26/07/2005 17:48 235ÿ400 j84olih3184.dll
26/07/2005 17:48 235ÿ684 r46ulej91ho.dll
25/07/2005 21:02 235ÿ115 j6j60g1se6.dll
25/07/2005 20:39 235ÿ192 lvnu0959e.dll
25/07/2005 20:38 233ÿ720 lvr0099me.dll
25/07/2005 18:50 233ÿ720 n08o0al3edq.dll
25/07/2005 18:26 234ÿ442 gp8ql3l51.dll
25/07/2005 18:26 233ÿ720 tabyuv.dll
25/07/2005 18:24 235ÿ177 e4jmle111h.dll
25/07/2005 18:24 233ÿ720 otbc16gt.dll
25/07/2005 18:24 235ÿ539 mvj8l91u1.dll
25/07/2005 18:20 234ÿ927 mv0sl9d71.dll
25/07/2005 18:20 235ÿ320 i006lads1d06.dll
25/07/2005 18:18 235ÿ382 o266lcjs1fo6.dll
25/07/2005 18:17 235ÿ164 k444lehq1h4e.dll
25/07/2005 18:03 235ÿ067 d00mlad11d0.dll
25/07/2005 17:29 235ÿ521 ktp6l77s1.dll
25/07/2005 14:36 234ÿ725 dn6m01j1e.dll
25/07/2005 14:34 235ÿ163 mv24l9fq1.dll
25/07/2005 14:25 235ÿ536 irl8l53u1.dll
25/07/2005 14:25 235ÿ289 mv6ql9j51.dll
25/07/2005 14:20 233ÿ836 e6jm0g11e6.dll
24/07/2005 19:29 233ÿ958 fpn0035me.dll
24/07/2005 19:29 234ÿ242 j22q0cf5ef2.dll
24/07/2005 19:19 234ÿ468 g2lm0c31ef.dll
24/07/2005 19:19 233ÿ248 lxhsvc.dll
24/07/2005 14:22 233ÿ580 j80s0id7e80.dll
24/07/2005 10:53 233ÿ611 o2660cjsefo60.dll
24/07/2005 10:52 234ÿ599 dnl6013se.dll
23/07/2005 04:08 233ÿ640 k8pmli7118.dll
23/07/2005 04:08 234ÿ033 hr8s05l7e.dll
23/07/2005 04:04 234ÿ797 irl0l53m1.dll
23/07/2005 00:17 232ÿ231 gpr8l39u1.dll
05/07/2005 01:54 <REP> Microsoft
113 fichier(s) 26ÿ523ÿ584 octets
2 R‚p(s) 7ÿ181ÿ938ÿ688 octets libres

salut
tu l as relancer et fais option 2?

a+

oui
ces faiyt

ok,
remet un hijack this stp

a+

e voila

Logfile of HijackThis v1.99.1
Scan saved at 18:56:30, on 07/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\WoW-FE\WoW-FE.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\mes telechargements\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [3DNADesktop] "C:\Program Files\3DNA\Resources\3dnasys.exe" -open
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0 -chkss
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IDMan] C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IDMan.exe /onboot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Icone Symbiose.lnk = C:\Program Files\Correcteur 101 pro v5\SYMBIOSE\ICONESYM.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Search the Web - C:\WINDOWS\Web\Ers_src.htm
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Download All Links with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\DOCUME~1\piaffie\LOCALS~1\Temp\Rar$EX00.015\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Micro Application Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra 'Tools' menuitem: Anti-Popup - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - C:\PROGRA~1\MICROA~1\EFFACE~1\Blocker.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125532112546
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe

re,
ou en sont tes soucis?

a+

beh j ai plein de bug aider moi

re,
c est vague pour essayer de t aider

peux tu etre plus explicite?

a+

ok j ai plein de pub de site qui s affiche tout le temp

re,
tu peux me le decrire?
Un titre? les fotos? toujours les memes?

Lance ce scan en ligne:
http://www.bitdefender.fr/scan8/ie.html
Copie/colle le rapport

A+

les diferent infesteur que j ai opu relever sont :
http://e.rn11.com/adbuys/a405-admed-ron
http://www210.paypopup.com/links.php?data=rSe_2%2F%FE%2B%2B%286%23%28-%25%24S%5C77sX%5CfZUKj_%FEq_ZcY%3B%7B%2B1-0%F3lcY%3B%FE%29-%261%221%2A%28.&serverfile=popdirect&id=BundleWare&subid=23782&tid=1131389030&clater=&m=50&o=1&c=1&a=32767&q=6&s=%3C%3D&ah=10&al=0&l=english&campaign=&rurl=&defurl=
ya du win fixer aussi du meetic et plein de search le scan est en cour

ok,
on verra apres le scan

bon appetit le forum