Ordi qui rame
Résolu
bonjour a tous
ja crois que je suis au bord de la crise de nerf avec mon ordi car il rame! il repond 3h aprés a mes demandes, je passe un temps fou avant de pouvoir l'éteindre. sur microsoft works il m'est impossible de travailler, car le texte s'écrit par morceaux et la sourie ne repond pas. merci d'avance pour tous vos bons conceils.
A+ Delphine
ja crois que je suis au bord de la crise de nerf avec mon ordi car il rame! il repond 3h aprés a mes demandes, je passe un temps fou avant de pouvoir l'éteindre. sur microsoft works il m'est impossible de travailler, car le texte s'écrit par morceaux et la sourie ne repond pas. merci d'avance pour tous vos bons conceils.
A+ Delphine
Configuration: xp familiale
15 réponses
-
Salut,
ça ne sert à rien de dormater parcequ'un ordi rame ..
Est tu bien proteger anti virus + pare feu ?
Telecharger ces logiciels gratuit puis fait un scan avec chacuns d'eux:
SpyBot - Search & Destroy en français: https://www.commentcamarche.net/telecharger/securite/20939-spybot-search-and-destroy/
a² free: Contre les trojans et malware.
http://www.commentcamarche.net/download/telecharger-34066271-a-free
Ad-Aware SE Personal:(en anglais)
http://www.commentcamarche.net/download/telecharger-34055308-ad-aware-se-personal-edition
-Le patch pour le faire fonctionner en français:
http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/25543.html
Ensuite si ça ne fonctionne toujours pas:
telecharge ce logiciel, installe le dans son propre dossier, choisis l'option 1, puis copie et colle ici le rapport, qu'il va te generer.
HijackThis:
https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
C'est en forgeant que l'on devient forgeron -
Quel est ta config?? et ramez-t-il deja avant??
-
je pense que tu as des virus il faut formater ton disque dur et reinstallez windows
-
Bein deja essaye de scanner ton ordi avec un antivirus et sinon comme dit sebiseb, c'est surment du a un virus!!
-
Tu peux aussi essayer de le défragmenter, mais je ne te promet rien!
Clique droit sur ton disque C:/ -> Propriétés -> Outils -> Défragmenter Maintenant
Essaye ca ne coute rien ... -
Oui c'est vrai que formater est la solution la plus radicale mais essaye d'abord les programmes proposer par boulepate comme j'ai dis avant ca ne coute rien d'essayer avant de formater on ne sait jamais !
-
j'adore faut formater il existe plein de methode avant d'avoir recours au formatage et ce meme avec un ecran bleu
-
Bonjour à tous
merci pour vos bons conseils
mon ordo semble ramer un peu moins, mais les fenêtres que j'ouvre lorsque je les referment elles se ferment par morceaux.
j'ai kaperski comme anti virus est t'il bon et vous qu'avez vous comme antivirus.
j'ai aussi un autre problème a chaque fois que je vai sur le net il y a plein de fenêtres de pub de casino qui s'ouvrent que faut il faire?
j'ai fais un scan avec mon ordi si vous voyez quelque chose qui ne va pas , moi je ne comprend rien . merci A+ Delphine **** Run Keys ****
RUN: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
RUN: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
RUN: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RUN: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
RUN: [WinampAgent] C:\Program Files\Winamp\winampa.exe
RUN: [adiras] adiras.exe
RUN: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
RUN: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
RUN: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
RUN: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
RUN: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
RUN: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
RUN: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
**** Browser Helper Objects ****
BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
BHO: [AcroIEHlprObj Class] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar1.dll
**** IE Toolbars ****
TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Google] c:\program files\google\googletoolbar1.dll
**** IE Extensions ****
IEExt: [@shdoclc.dll,-866]
IEExt: [Messenger] C:\Program Files\Messenger\MSMSGS.EXE
**** Hosts File Entries ****
HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost
**** IE Settings ****
Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Local Page: C:\WINDOWS\System32\blank.htm
Search Bar: http://www.wanadoo.fr/go/page_recherche/
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
**** IE Context Menu (Right click) ****
IEContext: [&Traduire à partir de l'anglais] res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IEContext: [Pages liées] res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IEContext: [Pages similaires] res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IEContext: [Recherche &Google] res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IEContext: [Version de la page actuelle disponible dans le cache Google] res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
**** Layered Service Providers ****
LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] SEQPACKET 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] DATAGRAM 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] SEQPACKET 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] DATAGRAM 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] SEQPACKET 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] DATAGRAM 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] SEQPACKET 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] DATAGRAM 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] SEQPACKET 10
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] DATAGRAM 10
**** Blocked Control Panel Items ****
BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No
**** Downloaded Program Files ****
DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
Yahoo! Chat [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab]
{0594AF7E-573B-40DF-8165-E47AB2EAEFE8} [http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab] C:\WINDOWS\System32\eglivecam_1028.dll C:\WINDOWS\System32\EGAUTH.dll
{0B682CC1-FB40-4006-A5DD-99EDD3C9095D} [http://www.thepaymentcentre.com/build/vbiewer.cab]
{1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
{2B323CD9-50E3-11D3-9466-00A0C9700498} [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab] C:\WINDOWS\Downloaded Program Files\avsniff.dll
{469C7080-8EC8-43A6-AD97-45848113743C} [http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab]
{511F9316-771B-4953-A268-1C36DA667FE9} [http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{71CBDCD9-0830-4470-A890-35D364DA352C} [http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab]
{917623D1-D8E5-11D2-BE8B-00104B06BDE3} [http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx]
{95460ABD-946A-46FF-9F56-268718323EEE} [http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab]
{9F1C11AA-197B-4942-BA54-47A8489BB47F} [http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37865.3030902778]
{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} [http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab]
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{D670D0B3-05AB-4115-9F87-D983EF1AC747} [http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab]
{F00F4763-7355-4725-82F7-0DA94A256D46} [http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab]
**** Windows Services ****
[Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
[ALG] %SystemRoot%\System32\alg.exe
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
[Ati HotKey Poller] %SystemRoot%\System32\Ati2evxx.exe
[ATI Smart] C:\WINDOWS\system32\ati2sgag.exe
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[CiSvc] %SystemRoot%\system32\cisvc.exe
[ClipSrv] %SystemRoot%\system32\clipsrv.exe
[COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[Eventlog] %SystemRoot%\system32\services.exe
[EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
[ImapiService] C:\WINDOWS\System32\imapi.exe
[Ip6FwHlp] %SystemRoot%\System32\svchost.exe -k netsvcs
[kavsvc] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe"
[lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
[LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
[Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
[mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
[MSDTC] C:\WINDOWS\System32\msdtc.exe
[MSIServer] C:\WINDOWS\System32\msiexec.exe /V
[NetDDE] %SystemRoot%\system32\netdde.exe
[NetDDEdsdm] %SystemRoot%\system32\netdde.exe
[Netlogon] %SystemRoot%\System32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
[Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
[NtLmSsp] %SystemRoot%\System32\lsass.exe
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[PlugPlay] %SystemRoot%\system32\services.exe
[Pml Driver HPZ12] C:\WINDOWS\System32\HPZipm12.exe
[PolicyAgent] %SystemRoot%\System32\lsass.exe
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
[RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[RpcLocator] %SystemRoot%\System32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost -k rpcss
[RSVP] %SystemRoot%\System32\rsvp.exe
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardDrv] %SystemRoot%\System32\SCardSvr.exe
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[Spooler] %SystemRoot%\system32\spoolsv.exe
[srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
[SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
[SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{26790C32-D2FF-44F3-8933-D5857D14371C}
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[TermService] %SystemRoot%\System32\svchost.exe -k netsvcs
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
[uploadmgr] %SystemRoot%\System32\svchost.exe -k netsvcs
[upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
[UPS] %SystemRoot%\System32\ups.exe
[VSS] %SystemRoot%\System32\vssvc.exe
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
[WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WMDM PMSP Service] C:\WINDOWS\System32\MsPMSPSv.exe
[WmdmPmSp] %SystemRoot%\System32\svchost.exe -k netsvcs
[WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs
**** Custom IE Search Items ****
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
**** Complete IE Options ****
IEOPT: [NoUpdateCheck]
IEOPT: [NoJITSetup]
IEOPT: [Disable Script Debugger] yes
IEOPT: [Show_ChannelBand] No
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\WINDOWS\System32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Start Page] http://www.wanadoo.fr
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [FullScreen] no
IEOPT: [Window_Placement] ,
IEOPT: [Window Title] Wanadoo
IEOPT: [NotifyDownloadComplete] no
IEOPT: [Use FormSuggest] no
IEOPT: [Error Dlg Displayed On Every Error] no
IEOPT: [AddToFavoritesExpanded]
IEOPT: [Search Bar] http://www.wanadoo.fr/go/page_recherche/
IEOPT: [Use Custom Search URL]
IEOPT: [Check_Associations] no
IEOPT: [HistoryViewType]
IEOPT: [HistoryTopNSitesView]
IEOPT: [Enable Browser Extensions] yes
IEOPT: [Save Directory] C:\Documents and Settings\del.mick\Mes documents\
IEOPT: [Default_Page_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]
IEOPT: [Start Page] http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IEOPT: [CompanyName] Microsoft Corporation
IEOPT: [Custom_Key] MICROSO
IEOPT: [Wizard_Version] 6.00.2800.1017
IEOPT: [FullScreen] no
IEOPT: [BigBitmap] C:\PROGRA~1\WANADOO\static38.bmp
IEOPT: [SmallBitmap] C:\PROGRA~1\WANADOO\static22.bmp -
Salut,
Pour ton probleme d'internet, telecharge Firefox, c'est 100x mieux qu'internet explorer et ca devrait te bloquer pas mal de pop-up.
c u
Ludovic -
salut
récupere Hijack this (http://www.infos-du-net.com/telecharger/HijackThis.html)
fait un scan
puis colle moi le log...(complet)
t'as effectivement des trucs pas clair sur a bécane (par ex : RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess ).
on va essayer d'y voir clair
bye
-
boujour à tous
excusez moi pour le retard mais je n'arrivais plus a me conecter sur le net. j'ai toujours les même problèmes! et toujours ces pub de casino qui se mette sur mon ordi qt je navigue sur le net
merci d'avance pour votre aide
a+delphine.
voici mon dernier scan.
**** Run Keys ****
RUN: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
RUN: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
RUN: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RUN: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
RUN: [WinampAgent] C:\Program Files\Winamp\winampa.exe
RUN: [adiras] adiras.exe
RUN: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
RUN: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
RUN: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
RUN: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
RUN: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
RUN: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
RUN: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
**** Browser Helper Objects ****
BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
BHO: [AcroIEHlprObj Class] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar1.dll
**** IE Toolbars ****
TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Google] c:\program files\google\googletoolbar1.dll
**** IE Extensions ****
IEExt: [Messenger] C:\Program Files\Messenger\MSMSGS.EXE
**** Hosts File Entries ****
HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost
**** IE Settings ****
Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Local Page: C:\WINDOWS\System32\blank.htm
Search Bar: http://www.wanadoo.fr/go/page_recherche/
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
**** IE Context Menu (Right click) ****
IEContext: [&Traduire à partir de l'anglais] res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IEContext: [Pages liées] res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IEContext: [Pages similaires] res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IEContext: [Recherche &Google] res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IEContext: [Version de la page actuelle disponible dans le cache Google] res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
**** Layered Service Providers ****
LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] SEQPACKET 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] DATAGRAM 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] SEQPACKET 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] DATAGRAM 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] SEQPACKET 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] DATAGRAM 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] SEQPACKET 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] DATAGRAM 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] SEQPACKET 10
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] DATAGRAM 10
**** Blocked Control Panel Items ****
BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No
**** Downloaded Program Files ****
DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
Yahoo! Chat [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab]
{0594AF7E-573B-40DF-8165-E47AB2EAEFE8} [http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab] C:\WINDOWS\System32\eglivecam_1028.dll C:\WINDOWS\System32\EGAUTH.dll
{1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
{2B323CD9-50E3-11D3-9466-00A0C9700498} [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab] C:\WINDOWS\Downloaded Program Files\avsniff.dll
{469C7080-8EC8-43A6-AD97-45848113743C} [http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab]
{511F9316-771B-4953-A268-1C36DA667FE9} [http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{71CBDCD9-0830-4470-A890-35D364DA352C} [http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab]
{917623D1-D8E5-11D2-BE8B-00104B06BDE3} [http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx]
{95460ABD-946A-46FF-9F56-268718323EEE} [http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab]
{9F1C11AA-197B-4942-BA54-47A8489BB47F} [http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37865.3030902778]
{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} [http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab]
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{D670D0B3-05AB-4115-9F87-D983EF1AC747} [http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab]
{F00F4763-7355-4725-82F7-0DA94A256D46} [http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab]
**** Windows Services ****
[Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
[ALG] %SystemRoot%\System32\alg.exe
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
[Ati HotKey Poller] %SystemRoot%\System32\Ati2evxx.exe
[ATI Smart] C:\WINDOWS\system32\ati2sgag.exe
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[CiSvc] %SystemRoot%\system32\cisvc.exe
[ClipSrv] %SystemRoot%\system32\clipsrv.exe
[COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[Eventlog] %SystemRoot%\system32\services.exe
[EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
[ImapiService] C:\WINDOWS\System32\imapi.exe
[Ip6FwHlp] %SystemRoot%\System32\svchost.exe -k netsvcs
[kavsvc] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe"
[lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
[LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
[Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
[mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
[MSDTC] C:\WINDOWS\System32\msdtc.exe
[MSIServer] C:\WINDOWS\System32\msiexec.exe /V
[NetDDE] %SystemRoot%\system32\netdde.exe
[NetDDEdsdm] %SystemRoot%\system32\netdde.exe
[Netlogon] %SystemRoot%\System32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
[Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
[NtLmSsp] %SystemRoot%\System32\lsass.exe
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[PlugPlay] %SystemRoot%\system32\services.exe
[Pml Driver HPZ12] C:\WINDOWS\System32\HPZipm12.exe
[PolicyAgent] %SystemRoot%\System32\lsass.exe
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
[RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[RpcLocator] %SystemRoot%\System32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost -k rpcss
[RSVP] %SystemRoot%\System32\rsvp.exe
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardDrv] %SystemRoot%\System32\SCardSvr.exe
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[Spooler] %SystemRoot%\system32\spoolsv.exe
[srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
[SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
[SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{26790C32-D2FF-44F3-8933-D5857D14371C}
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[TermService] %SystemRoot%\System32\svchost.exe -k netsvcs
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
[uploadmgr] %SystemRoot%\System32\svchost.exe -k netsvcs
[upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
[UPS] %SystemRoot%\System32\ups.exe
[VSS] %SystemRoot%\System32\vssvc.exe
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
[WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WMDM PMSP Service] C:\WINDOWS\System32\MsPMSPSv.exe
[WmdmPmSp] %SystemRoot%\System32\svchost.exe -k netsvcs
[WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs
**** Custom IE Search Items ****
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
**** Complete IE Options ****
IEOPT: [NoUpdateCheck]
IEOPT: [NoJITSetup]
IEOPT: [Disable Script Debugger] yes
IEOPT: [Show_ChannelBand] No
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\WINDOWS\System32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Start Page] http://www.wanadoo.fr
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [FullScreen] no
IEOPT: [Window_Placement] ,
IEOPT: [Window Title] Wanadoo
IEOPT: [NotifyDownloadComplete] no
IEOPT: [Use FormSuggest] no
IEOPT: [Error Dlg Displayed On Every Error] no
IEOPT: [AddToFavoritesExpanded]
IEOPT: [Check_Associations] no
IEOPT: [HistoryViewType]
IEOPT: [HistoryTopNSitesView]
IEOPT: [Save Directory] C:\Documents and Settings\del.mick\Mes documents\
IEOPT: [Search Bar] http://www.wanadoo.fr/go/page_recherche/
IEOPT: [Use Custom Search URL]
IEOPT: [Default_Page_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]
IEOPT: [Start Page] http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IEOPT: [CompanyName] Microsoft Corporation
IEOPT: [Custom_Key] MICROSO
IEOPT: [Wizard_Version] 6.00.2800.1017
IEOPT: [FullScreen] no
IEOPT: [BigBitmap] C:\PROGRA~1\WANADOO\static38.bmp
IEOPT: [SmallBitmap] C:\PROGRA~1\WANADOO\static22.bmp-
Salut
telecharge Hijack this ci dessous, installe le dans son propre dossier, choisis l'option 1, puis copie et colle le rapprot ici:
http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/29061.html
-
-
boujour a tous
j'ai suivi vos conceils et j'ai fait un scan, mais je n'y comprnds rien
merci a+ delphine
Logfile of HijackThis v1.99.1
Scan saved at 22:55:31, on 21/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWISVC.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PUSAS.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Hacker\KAVPF.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\PROGRA~1\WANADOO\EspaceWanadoo.exe
C:\PROGRA~1\WANADOO\ComComp.exe
C:\PROGRA~1\WANADOO\Watch.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\del.mick\Local Settings\Temporary Internet Files\Content.IE5\DO6M14FG\HijackThis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWIBHO.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWITB.DLL
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Pop-Up_Stopper_Anti-Spyware] C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PUSAS.EXE
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Anti-Hacker.lnk = ?
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {71CBDCD9-0830-4470-A890-35D364DA352C} - http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D670D0B3-05AB-4115-9F87-D983EF1AC747} (AOL Downloader Plugin) - http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Pop-Up Stopper Anti-Spyware Service (PWISVC) - Panicware, Inc. - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWISVC.EXE -
salut execute hijack clike sur le 2 eme bouton ensuite selectiones et fix ces ligne :
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {71CBDCD9-0830-4470-A890-35D364DA352C} - http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab
cherche et supprime ces fichiers :
WMCRRS.EXE
EGDACCESS_1068.dll
lance les antispyware (adaware, spybot...ect)
redemaree refait un hijack et colle le resultat ici
@+++++ -
je crois que plusieure page internette reste ouvert et ca fait ce que tu vois sur ton ordie essai de la restaurer dans accessoire systeme restore a un point inferieure juste avant que est ses problemes ca devrait regler tout essais. tu ne perdras pas tes document ou autre fichier.
-
ray54 le message date de 2005^^
