Anlyser mon hijackthis svp

salut telecharge et execute ces antispywares ( pense a les mettre a jour avant de les lancées)
(1) ad-aware version 1.06

(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
***
(2) spybot version 1.4

(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite

voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
***

et aussi ceci
(3) CleanUp40.exe
http://www.florensac-chasse-trap.com/ section virus/logiciel de securite

voir demo
http://pageperso.aol.fr/balltrap34/democleanup.htm
***
(4) a2

http://www.emsisoft.net/fr/
penser a le metre a jour avant de scanner le pc
***
ps : un grand merci a balltrap pour les lien :)

(5) Edwido
http://download.ewido.net/ewido-setup.exe
Pendant l'installation, sur la page "Additional Options", décoche les deux options "Install background guard" et "Install scan via context menu Ewido Security Suite. Clique sur mise à jour.

Clique sur scanner puis sur scan complet du système.

(6)SmitfraudFix

http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport
Copie/colle le sur le poste stp.

reparer internet explorer http://windowsxp.mvps.org/IEFIX.htm

:: Supprimer les fichiers temporaires ::
vider tout le contenu de ces dossiers.

* C:\Documents and Settings\ton compte\Local Settings\Temp
* C:\Documents and Settings\tous les autres comptes\Local Settings\Temp
* C:\Windows\Temp

demarrer/tout les programe /accessoire/outills system/neoyage de disque tu coche tout et clike sur OK

@++++++

voici pour iefix

Fixes the following symptoms:

1. Script Errors in Internet Explorer
2. When you click a hyperlink in an e-mail message or on a Web page,
or right-click a hyperlink on a Web page and then click "Open in New
Window", you may experience one or more of the following symptoms:

a. Nothing happens
b. The new window may be blank
c. You may receive a scripting error message

3. When you use the Print command or the Print Preview command in
Internet Explorer, nothing may happen.

4. Internet Explorer does prompt for the default browser check even
though the prompt is enabled in Internet Options.

5. Internet Options Advanced Tab is completely blank

6. Internet Explorer About box version info is blank

NOTE: This tool performs the following tasks:

* Registers the core Internet Explorer DLLs using Regsvr32 command:

Additonally: For Windows XP:
* Starts IE reinstallation using ie.inf method.

If the problem continues, reinstall Internet Explorer.

salut donne moi le rapport de smitfraud :) et execute les antispy

@++++++

#
# An unexpected error has been detected by HotSpot Virtual Machine:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x05f8d945, pid=2608, tid=4280
#
# Java VM: Java HotSpot(TM) Client VM (1.5.0_01-b08 mixed mode)
# Problematic frame:
# j y.po.79.n(Ly/po/116;)V+3
#

--------------- T H R E A D ---------------

Current thread (0x0912bc78): JavaThread "AWT-EventQueue-3" [_thread_in_Java, id=4280]

siginfo: ExceptionCode=0xc0000005, reading address 0x7ad81b2c

Registers:
EAX=0x00000000, EBX=0x000000b6, ECX=0x7ad8166c, EDX=0x0000012c
ESP=0x0a17f714, EBP=0x0a17f73c, ESI=0x166940a3, EDI=0x0a17f748
EIP=0x05f8d945, EFLAGS=0x00010212

Top of Stack: (sp=0x0a17f714)
0x0a17f714: 00000000 10fecb38 113c5200 0a17f720
0x0a17f724: 166940a3 0a17f748 7ad8166c 00000000
0x0a17f734: 166940a8 0a17f744 0a17f768 05f82923
0x0a17f744: 10fecb38 113c5200 0a17f74c 16694023
0x0a17f754: 0a17f778 166ce2b0 00000000 16694038
0x0a17f764: 0a17f770 0a17f798 05f82923 10fecb38
0x0a17f774: 113c5200 113f9e40 0a17f77c 16694197
0x0a17f784: 0a17f7b8 166ce2b0 00000000 166941b8

Instructions: (pc=0x05f8d945)
0x05f8d935: 00 52 50 89 75 e8 0f b7 56 01 8b 4d f0 c1 e2 02
0x05f8d945: 8b 5c 91 10 c1 eb 18 81 e3 ff 00 00 00 81 fb b6

Stack: [0x0a080000,0x0a180000), sp=0x0a17f714, free space=1021k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
j y.po.79.n(Ly/po/116;)V+3
j y.po.79.ko(Ly/po/78;Ly/po/116;)V+43
j y.po.79.lo(Ly/po/116;Z)V+135
j y.po.79.n(Ly/po/116;)V+3
j y.po.79.ko(Ly/po/78;Ly/po/116;)V+43
j y.po.79.lo(Ly/po/116;Z)V+135
j y.po.79.n(Ly/po/116;)V+3
j y.po.79.ko(Ly/po/78;Ly/po/116;)V+43
j y.po.79.lo(Ly/po/116;Z)V+135
j y.po.79.n(Ly/po/116;)V+3
j y.po.21.sb(Ljava/awt/Graphics;)V+29
j y.po.146.paint(Ljava/awt/Graphics;)V+132
j y.po.146.update(Ljava/awt/Graphics;)V+2
j sun.awt.RepaintArea.updateComponent(Ljava/awt/Component;Ljava/awt/Graphics;)V+6
j sun.awt.RepaintArea.paint(Ljava/lang/Object;Z)V+263
j sun.awt.windows.WComponentPeer.handleEvent(Ljava/awt/AWTEvent;)V+63
j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+765
j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+200
j java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V+26
j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
j java.awt.EventDispatchThread.run()V+9
v ~StubRoutines::call_stub
V [jvm.dll+0x8176e]
V [jvm.dll+0xd481d]
V [jvm.dll+0x8163f]
V [jvm.dll+0x8139c]
V [jvm.dll+0x9c05c]
V [jvm.dll+0xfeece]
V [jvm.dll+0xfee9c]
C [msvcrt.dll+0x2a3b0]
C [kernel32.dll+0xb50b]

--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x09150a10 JavaThread "Thread-14" [_thread_blocked, id=4284]
=>0x0912bc78 JavaThread "AWT-EventQueue-3" [_thread_in_Java, id=4280]
0x0912b220 JavaThread "Thread-13" [_thread_blocked, id=4276]
0x05eb8530 JavaThread "Thread-12" [_thread_blocked, id=4272]
0x028ffc98 JavaThread "Thread-11" [_thread_blocked, id=4268]
0x05eecd88 JavaThread "Thread-10" [_thread_blocked, id=4264]
0x05eec408 JavaThread "thread applet-y.po.0" [_thread_blocked, id=4236]
0x091aa458 JavaThread "Thread-6" [_thread_blocked, id=4212]
0x05e987d8 JavaThread "TimerQueue" daemon [_thread_blocked, id=4188]
0x092344c0 JavaThread "Thread-5" [_thread_in_native, id=4184]
0x092348b0 JavaThread "thread applet-y.po.0" [_thread_blocked, id=4172]
0x05e61fd0 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=4156]
0x05e86008 JavaThread "AWT-Shutdown" [_thread_blocked, id=4152]
0x05e6a848 JavaThread "traceMsgQueueThread" [_thread_blocked, id=4136]
0x05e62388 JavaThread "AWT-Windows" daemon [_thread_in_native, id=4132]
0x05e5c998 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=4124]
0x02992538 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=4116]
0x02991220 JavaThread "CompilerThread0" daemon [_thread_blocked, id=4112]
0x0298bf10 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=4108]
0x02987b80 JavaThread "Finalizer" daemon [_thread_blocked, id=4100]
0x02936280 JavaThread "Reference Handler" daemon [_thread_blocked, id=1884]
0x029164e0 JavaThread "main" [_thread_in_native, id=2796]

Other Threads:
0x02943738 VMThread [id=3708]
0x0292e7f8 WatcherThread [id=4120]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
def new generation total 1408K, used 657K [0x10040000, 0x101c0000, 0x107a0000)
eden space 1280K, 41% used [0x10040000, 0x100c4728, 0x10180000)
from space 128K, 100% used [0x10180000, 0x101a0000, 0x101a0000)
to space 128K, 0% used [0x101a0000, 0x101a0000, 0x101c0000)
tenured generation total 17460K, used 13141K [0x107a0000, 0x118ad000, 0x16040000)
the space 17460K, 75% used [0x107a0000, 0x11475710, 0x11475800, 0x118ad000)
compacting perm gen total 8192K, used 7407K [0x16040000, 0x16840000, 0x1a040000)
the space 8192K, 90% used [0x16040000, 0x1677bf20, 0x1677c000, 0x16840000)
No shared spaces configured.

Dynamic libraries:
0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\IEXPLORE.EXE
0x7c910000 - 0x7c9c7000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c904000 C:\WINDOWS\system32\kernel32.dll
0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
0x77ef0000 - 0x77f37000 C:\WINDOWS\system32\GDI32.dll
0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e50000 - 0x77ee1000 C:\WINDOWS\system32\RPCRT4.dll
0x77720000 - 0x7788c000 C:\WINDOWS\system32\SHDOCVW.dll
0x779e0000 - 0x77a76000 C:\WINDOWS\system32\CRYPT32.dll
0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
0x76610000 - 0x76694000 C:\WINDOWS\system32\CRYPTUI.dll
0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\WINTRUST.dll
0x76c40000 - 0x76c68000 C:\WINDOWS\system32\IMAGEHLP.dll
0x770e0000 - 0x7716c000 C:\WINDOWS\system32\OLEAUT32.dll
0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
0x6fee0000 - 0x6ff34000 C:\WINDOWS\system32\NETAPI32.dll
0x77aa0000 - 0x77b47000 C:\WINDOWS\system32\WININET.dll
0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
0x10000000 - 0x10033000 C:\WINDOWS\system32\sockspy.dll
0x77390000 - 0x77492000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
0x7c9d0000 - 0x7d1f3000 C:\WINDOWS\system32\SHELL32.dll
0x58b50000 - 0x58be7000 C:\WINDOWS\system32\comctl32.dll
0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
0x00b70000 - 0x00b7e000 C:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll
0x75f10000 - 0x7600d000 C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
0x77b50000 - 0x77b72000 C:\WINDOWS\system32\appHelp.dll
0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
0x77170000 - 0x7720e000 C:\WINDOWS\system32\urlmon.dll
0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
0x765b0000 - 0x76606000 C:\WINDOWS\System32\cscui.dll
0x76590000 - 0x765ad000 C:\WINDOWS\System32\CSCDLL.dll
0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
0x00e70000 - 0x00e78000 C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
0x00f20000 - 0x011fa000 C:\WINDOWS\system32\xpsp2res.dll
0x01430000 - 0x01505000 C:\PROGRA~1\SPYBOT~1\SDHelper.dll
0x5f140000 - 0x5f157000 C:\WINDOWS\system32\olepro32.dll
0x01310000 - 0x01320000 C:\PROGRA~1\FlashGet\jccatch.dll
0x02560000 - 0x02592000 C:\PROGRA~1\FlashFXP\IEFlash.dll
0x01820000 - 0x018ae000 C:\WINDOWS\system32\shdoclc.dll
0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\mlang.dll
0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\wsock32.dll
0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.DLL
0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
0x745e0000 - 0x748a6000 C:\WINDOWS\system32\msi.dll
0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
0x76960000 - 0x76a15000 C:\WINDOWS\system32\USERENV.dll
0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\DNSAPI.dll
0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
0x7d4c0000 - 0x7d7a6000 C:\WINDOWS\system32\Mshtml.dll
0x01910000 - 0x01937000 C:\WINDOWS\system32\msls31.dll
0x02470000 - 0x0249a000 C:\WINDOWS\System32\msimtf.dll
0x024a0000 - 0x024eb000 C:\WINDOWS\System32\MSCTF.dll
0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
0x75be0000 - 0x75c4e000 C:\WINDOWS\system32\jscript.dll
0x672b0000 - 0x672f0000 C:\WINDOWS\System32\iepeers.dll
0x72f50000 - 0x72f76000 C:\WINDOWS\System32\WINSPOOL.DRV
0x761c0000 - 0x76231000 C:\WINDOWS\system32\mshtmled.dll
0x030c0000 - 0x03279000 C:\Program Files\Fichiers communs\Ahead\Lib\NeroDigitalExt.dll
0x7c140000 - 0x7c243000 C:\Program Files\Fichiers communs\Ahead\Lib\MFC71.DLL
0x7c340000 - 0x7c396000 C:\Program Files\Fichiers communs\Ahead\Lib\MSVCR71.dll
0x7c3a0000 - 0x7c41b000 C:\Program Files\Fichiers communs\Ahead\Lib\MSVCP71.dll
0x72c70000 - 0x72c79000 C:\WINDOWS\system32\wdmaud.drv
0x72c60000 - 0x72c68000 C:\WINDOWS\system32\msacm32.drv
0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
0x30000000 - 0x30236000 C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
0x71ca0000 - 0x71cbc000 C:\WINDOWS\system32\Actxprxy.dll
0x6d120000 - 0x6d12b000 C:\WINDOWS\System32\dispex.dll
0x6d590000 - 0x6d5a1000 C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_01\bin\jpiexp32.dll
0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_01\bin\jpishare.dll
0x6d640000 - 0x6d7c5000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\client\jvm.dll
0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\hpi.dll
0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\PSAPI.DLL
0x6d610000 - 0x6d61c000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\verify.dll
0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\java.dll
0x6d630000 - 0x6d63f000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\zip.dll
0x086b0000 - 0x08816000 C:\Program Files\Java\jre1.5.0_01\bin\awt.dll
0x736b0000 - 0x736f9000 C:\WINDOWS\system32\ddraw.dll
0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
0x73890000 - 0x73960000 C:\WINDOWS\system32\D3DIM700.DLL
0x6d240000 - 0x6d27d000 C:\Program Files\Java\jre1.5.0_01\bin\fontmanager.dll
0x6d1f0000 - 0x6d203000 C:\Program Files\Java\jre1.5.0_01\bin\deploy.dll
0x6d5d0000 - 0x6d5ed000 C:\Program Files\Java\jre1.5.0_01\bin\RegUtils.dll
0x6d3e0000 - 0x6d3f4000 C:\Program Files\Java\jre1.5.0_01\bin\jpicom32.dll
0x6d4c0000 - 0x6d4d3000 C:\Program Files\Java\jre1.5.0_01\bin\net.dll
0x6d1c0000 - 0x6d1e3000 C:\Program Files\Java\jre1.5.0_01\bin\dcpr.dll
0x6d4e0000 - 0x6d4e9000 C:\Program Files\Java\jre1.5.0_01\bin\nio.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_01 -Djavaplugin.nodotversion=150_01 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~1.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_01 -Djavaplugin.nodotversion=150_01 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
java_command: <unknown>

Environment Variables:
PATH=C:\PROGRA~1\Java\JRE15~1.0_0\bin;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;.
USERNAME=stephane
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD

--------------- S Y S T E M ---------------

OS: Windows XP Build 2600 Service Pack 2

CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse

Memory: 4k page, physical 523764k(278112k free), swap 1280044k(1004904k free)

vm_info: Java HotSpot(TM) Client VM (1.5.0_01-b08) for windows-x86, built on Dec 6 2004 19:51:00 by "java_re" with MS VC++ 6.0

maintenant j'ai mon internet explorer qui plante

salut quesque t'as fait exactement ??
pour iefix tu clike sur apply apres il te demande le cd de windows xp puis a l'aide de parcourir tu fait le chemin du fichier iexplorer qui se trouve dans cd et tu clike sur ok

@+++++

il se trouve ou se fichier stp en detail

salut a l'aide de la comande parcourir tu vas dans :
post de travail/ lecteur ou se trouve le cd de windows xp/I386/ iexplore.exe ( tu double clike dessus) et clike sur ok

@++++++++++

il me dit l'installation a echouée

salut essay comme ceci

insére le CD de Windows XP puis clique sur
-Démarrer -> Exécuter -> taper :

rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 c:\windows\inf\ie.inf
Valide par Entrée.

a moment données il va te demande le fichier iexplorer.exe
a l'aide de parcourir tu fait le chemin du fichier iexplorer qui se trouve dans cd de windows xp en suivant ce chemin :
post de travail/ lecteur ou se trouve le cd de windows xp/I386/ iexplore.exe ( tu double clike dessus) et clike sur ok

@+++++++++++

desoler mais je n'ai pas le cd de xp

ok quand t'aura le cd fait la manip mais en attendant telecharge un autre navigateur par exemple firefox ou mozilla http://frenchmozilla.sourceforge.net/

tu peu faire les autre manip entre autre lancer les antispywares et vide les dossier temporaire ..

fait aussi le scan SmitfraudFix et colle le resultat ici
@+++++++

voici le rapport smitfradix

SmitFraudFix v2.02

Rapport fait à 12:08:02,73 le 05/12/2005
Executé à partir de E:\programme\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\stephane\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

Logfile of HijackThis v1.99.1
Scan saved at 16:56:29, on 05/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = NC NUMERICABLE
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [BDMCon] c:\progra~1\softwin\bitdef~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] "C:\progra~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129032012562
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/fr/check/qdiagh.cab?326
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

salut fixx ceci avec hijack

O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

ensuite va dans :

post de travail/lecteur C:/programe files puis cherche et supprime le dossier "flash get"

lance les antispyware

refait un hijack et colle le resultat ici

@+++++++++

oui mais si je fais ca je n'aurais plus mon programme aussi

ok laisse le alors

t'en ai ou avec tes problemes?

@+++++++

ben en faite mon ordi redemarre sur un certain site mais que vers 17 heure y a rien a comprendre

voila maintenant j'ai eu un ecran bleu avec le message suivant

DRIVER_IQL_NOT_LESS_OR_EQUAL

0x000000d1 (0x886ee7e0, 0x00000002, 0x00000000, 0x886ee7e0)

voila si quelqu'un c'est me dire a quoi cela correspond ca m'interesse car c'est d'avoir toujours sont ordis qui plante

Certainement tes pilotes ne sont plus à jour..
va ici: http://www.touslesdrivers.com tuas un utilitaire qui peut inspecter ta configuration