winfixer2005 Résolu

Question

bonsoir tout le monde,

un petit mot pour vous dire que je suis allé sur le forum windows pour un gros problème qui concerne winfixer2005 et je m'excuse encore une fois mais la personne qui m'a aidé a été vraiment sympa.
j'ai télécharger regcleaner et il m'a enlevé pratiquement tout de winfixer. j'ai remarqué qu'il restait encore des traces de ce maudit winfixer. donc je suis allé sur le forum puis j'ai eu seb08 et il m'a conseillé de télécharger ad-aware. et la miracle, plus de winfixer.
si cela peut aider d'autres personnes...
merci encore à seb08.
ceux qui ont cette merde sur leur ordinateur, bon courage.

elo2

ben13010 · Answer

salut

telecharge hijackthis

http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/29061.html

clique sur la case un ( do a scan and save a log ) je crois

copie nous ce rapport ici

bye

elo2 · Answer

voilà, j'ai fait la Logfile of HijackThis v1.99.1Scan saved at 17:58:03, on 04/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeC:\WINDOWS\Explorer.EXEc:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exec:\Program Files\Norton AntiVirus
avapsvc.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exec:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\WINDOWS\system32
vsvc32.exec:\Program Files\Norton AntiVirus\SAVScan.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\system32\hphmon06.exeC:\HP\KBD\KBD.EXEC:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exeC:\Program Files\InterVideo\Common\Bin\WinRemote.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\keyhook.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\WINDOWS\system32undll32.exeC:\Program Files\iPod\bin\iPodService.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\ALCXMNTR.EXEC:\Program Files\Larousse\Petit Larousse 2005\bin\HIPL2002Popup.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\SurfAccuracy\SAcc.exeC:\WINDOWS\xload.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Wanadoo\EspaceWanadoo.exeC:\Program Files\Wanadoo\ComComp.exeC:\Program Files\Wanadoo\Watch.exeC:\Documents and Settings\HP_Propriétaire\Mes documentsosemadder\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.frR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.frR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantecstore.com/promo=45269R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO1 - Hosts: 62.75.224.159 www.bns1.netO1 - Hosts: 62.75.224.159 www.bns2.netO1 - Hosts: 62.75.224.159 www.bns3.netO1 - Hosts: 62.75.224.159 www.bns4.netO1 - Hosts: 62.75.224.159 www.bns5.netO1 - Hosts: 62.75.224.159 www.bns6.netO1 - Hosts: 62.75.224.159 www.bns7.netO1 - Hosts: 62.75.224.159 www.bns8.netO1 - Hosts: 62.75.224.159 www.cms1.netO1 - Hosts: 62.75.224.159 www.cms2.netO1 - Hosts: 62.75.224.159 www.cms3.netO1 - Hosts: 62.75.224.159 www.cms4.netO1 - Hosts: 62.75.224.159 www.cms5.netO1 - Hosts: 62.75.224.159 www.cms6.netO1 - Hosts: 62.75.224.159 www.cms7.netO1 - Hosts: 62.75.224.159 www.cms8.netO1 - Hosts: 62.75.224.159 www.rg1.comO1 - Hosts: 62.75.224.159 www.rg2.comO1 - Hosts: 62.75.224.159 www.rg3.comO1 - Hosts: 62.75.224.159 www.rg4.comO1 - Hosts: 62.75.224.159 www.rg5.comO1 - Hosts: 62.75.224.159 www.rg6.comO1 - Hosts: 62.75.224.159 www.rg7.comO1 - Hosts: 62.75.224.159 www.rg8.comO1 - Hosts: 62.75.224.159 www.cjt1.netO1 - Hosts: 62.75.224.159 www.rgs1.netO1 - Hosts: 62.75.224.159 www.rgs2.netO1 - Hosts: 62.75.224.159 www.bns1.netO1 - Hosts: 62.75.224.159 www.bns2.netO1 - Hosts: 62.75.224.159 www.cms1.netO1 - Hosts: 62.75.224.159 www.cms2.netO1 - Hosts: 62.75.224.159 bns1.netO1 - Hosts: 62.75.224.159 bns2.netO1 - Hosts: 62.75.224.159 bns3.netO1 - Hosts: 62.75.224.159 bns4.netO1 - Hosts: 62.75.224.159 bns5.netO1 - Hosts: 62.75.224.159 bns6.netO1 - Hosts: 62.75.224.159 bns7.netO1 - Hosts: 62.75.224.159 bns8.netO1 - Hosts: 62.75.224.159 cms1.netO1 - Hosts: 62.75.224.159 cms2.netO1 - Hosts: 62.75.224.159 cms3.netO1 - Hosts: 62.75.224.159 cms4.netO1 - Hosts: 62.75.224.159 cms5.netO1 - Hosts: 62.75.224.159 cms6.netO1 - Hosts: 62.75.224.159 cms7.netO1 - Hosts: 62.75.224.159 cms8.netO1 - Hosts: 62.75.224.159 rg1.comO1 - Hosts: 62.75.224.159 rg2.comO1 - Hosts: 62.75.224.159 rg3.comO1 - Hosts: 62.75.224.159 rg4.comO1 - Hosts: 62.75.224.159 rg5.comO1 - Hosts: 62.75.224.159 rg6.comO1 - Hosts: 62.75.224.159 rg7.comO1 - Hosts: 62.75.224.159 rg8.comO1 - Hosts: 62.75.224.159 cjt1.netO1 - Hosts: 62.75.224.159 rgs1.netO1 - Hosts: 62.75.224.159 rgs2.netO1 - Hosts: 62.75.224.159 bns1.netO1 - Hosts: 62.75.224.159 bns2.netO1 - Hosts: 62.75.224.159 cms1.netO1 - Hosts: 62.75.224.159 cms2.netO1 - Hosts: 62.75.224.159 j800banners.cjt1.netO1 - Hosts: 62.75.224.159 jadlogix.cjt1.netO1 - Hosts: 62.75.224.159 jadtegrity.cjt1.netO1 - Hosts: 62.75.224.159 jaimmedia.cjt1.netO1 - Hosts: 62.75.224.159 javatar.cjt1.netO1 - Hosts: 62.75.224.159 jbeet.cjt1.netO1 - Hosts: 62.75.224.159 jbigpops.cjt1.netO1 - Hosts: 62.75.224.159 jbouncetek.cjt1.netO1 - Hosts: 62.75.224.159 jbravenet.cjt1.netO1 - Hosts: 62.75.224.159 jcdcover.cjt1.netO1 - Hosts: 62.75.224.159 jclickspring.cjt1.netO1 - Hosts: 62.75.224.159 jcollegehumor.cjt1.netO1 - Hosts: 62.75.224.159 jdownloadacc.cjt1.netO1 - Hosts: 62.75.224.159 jedonkey.cjt1.netO1 - Hosts: 62.75.224.159 jeuniverse.cjt1.netO1 - Hosts: 62.75.224.159 jhot.cjt1.netO1 - Hosts: 62.75.224.159 jicmedia.cjt1.netO1 - Hosts: 62.75.224.159 jicq.cjt1.netO1 - Hosts: 62.75.224.159 jieplugin.cjt1.netO1 - Hosts: 62.75.224.159 jinternetoptimizer.cjt1.netO1 - Hosts: 62.75.224.159 jmediabuy1.cjt1.netO1 - Hosts: 62.75.224.159 jmediabuyad.cjt1.netO1 - Hosts: 62.75.224.159 jmindset.cjt1.netO1 - Hosts: 62.75.224.159 jmindsettest.cjt1.netO1 - Hosts: 62.75.224.159 jnictech.cjt1.netO1 - Hosts: 62.75.224.159 jnova.cjt1.netO1 - Hosts: 62.75.224.159 jpiolet.cjt1.netO1 - Hosts: 62.75.224.159 jsanboxer.cjt1.netO1 - Hosts: 62.75.224.159 jsercee.cjt1.netO1 - Hosts: 62.75.224.159 jthedelfin.cjt1.netO1 - Hosts: 62.75.224.159 jwarezp2p.cjt1.netO1 - Hosts: 62.75.224.159 jwildmedia.cjt1.netO1 - Hosts: 62.75.224.159 mediabuy-nic.cjt1.netO1 - Hosts: 62.75.224.159 www.m7z.netO1 - Hosts: 62.75.224.159 m7z.netO1 - Hosts: 62.75.224.159 jcms.cydoor.comO1 - Hosts: 62.75.224.159 cydoor.comO1 - Hosts: 62.75.224.159 www.cydoor.comO1 - Hosts: 62.75.224.159 jnova.cjt1.netO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dllO2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program Files\Starware\bin\Starware.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exeO4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe"O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exeO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exeO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Fichiers communs\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [HyperappelPL] C:\Program Files\Larousse\Petit Larousse 2005\bin\HIPL2002Popup.exeO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /iconO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exeO4 - HKLM\..\Run: [F ma] C:\windows\mrjj.exeO4 - HKLM\..\Run: [xload] "C:\WINDOWS\xload.exe"O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -trayO4 - HKCU\..\Run: [BoontyBox] "C:\Program Files\Boonty\BoontyBox\BoontyBox.exe" /bootO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exeO9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O15 - Trusted Zone: *.sxload.comO16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - http://sib1.od2.com/common/Member/ClientInstall/9.20.0002/OCI/setup.exeO16 - DPF: {7149E79C-DC19-4C5E-A53C-A54DDF75EEE9} (IObjSafety.DemoCtl) - mk:@MSITStore:C:\WINDOWS\mma.chm::/joysaver.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{E460367A-3614-4C7B-9904-F9A1DCD3CB62}: NameServer = 80.10.246.1 80.10.246.132O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exeO23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exemanip.

ben13010 · Answer

ok supprime ca C:\Program Files\SurfAccuracy\SAcc.exe C:\WINDOWS\xload.exe fixe ca et supprime manuellment les fichiers en grasR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktopR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantecstore.com/promo=45269 R3 - Default URLSearchHook is missingO1 - Hosts: 62.75.224.159 www.bns1.netO1 - Hosts: 62.75.224.159 www.bns2.netO1 - Hosts: 62.75.224.159 www.bns3.netO1 - Hosts: 62.75.224.159 www.bns4.netO1 - Hosts: 62.75.224.159 www.bns5.netO1 - Hosts: 62.75.224.159 www.bns6.netO1 - Hosts: 62.75.224.159 www.bns7.netO1 - Hosts: 62.75.224.159 www.bns8.netO1 - Hosts: 62.75.224.159 www.cms1.netO1 - Hosts: 62.75.224.159 www.cms2.netO1 - Hosts: 62.75.224.159 www.cms3.netO1 - Hosts: 62.75.224.159 www.cms4.netO1 - Hosts: 62.75.224.159 www.cms5.netO1 - Hosts: 62.75.224.159 www.cms6.netO1 - Hosts: 62.75.224.159 www.cms7.netO1 - Hosts: 62.75.224.159 www.cms8.netO1 - Hosts: 62.75.224.159 www.rg1.comO1 - Hosts: 62.75.224.159 www.rg2.comO1 - Hosts: 62.75.224.159 www.rg3.comO1 - Hosts: 62.75.224.159 www.rg4.comO1 - Hosts: 62.75.224.159 www.rg5.comO1 - Hosts: 62.75.224.159 www.rg6.comO1 - Hosts: 62.75.224.159 www.rg7.comO1 - Hosts: 62.75.224.159 www.rg8.comO1 - Hosts: 62.75.224.159 www.cjt1.netO1 - Hosts: 62.75.224.159 www.rgs1.netO1 - Hosts: 62.75.224.159 www.rgs2.netO1 - Hosts: 62.75.224.159 www.bns1.netO1 - Hosts: 62.75.224.159 www.bns2.netO1 - Hosts: 62.75.224.159 www.cms1.netO1 - Hosts: 62.75.224.159 www.cms2.netO1 - Hosts: 62.75.224.159 bns1.netO1 - Hosts: 62.75.224.159 bns2.netO1 - Hosts: 62.75.224.159 bns3.netO1 - Hosts: 62.75.224.159 bns4.netO1 - Hosts: 62.75.224.159 bns5.netO1 - Hosts: 62.75.224.159 bns6.netO1 - Hosts: 62.75.224.159 bns7.netO1 - Hosts: 62.75.224.159 bns8.netO1 - Hosts: 62.75.224.159 cms1.netO1 - Hosts: 62.75.224.159 cms2.netO1 - Hosts: 62.75.224.159 cms3.netO1 - Hosts: 62.75.224.159 cms4.netO1 - Hosts: 62.75.224.159 cms5.netO1 - Hosts: 62.75.224.159 cms6.netO1 - Hosts: 62.75.224.159 cms7.netO1 - Hosts: 62.75.224.159 cms8.netO1 - Hosts: 62.75.224.159 rg1.comO1 - Hosts: 62.75.224.159 rg2.comO1 - Hosts: 62.75.224.159 rg3.comO1 - Hosts: 62.75.224.159 rg4.comO1 - Hosts: 62.75.224.159 rg5.comO1 - Hosts: 62.75.224.159 rg6.comO1 - Hosts: 62.75.224.159 rg7.comO1 - Hosts: 62.75.224.159 rg8.comO1 - Hosts: 62.75.224.159 cjt1.netO1 - Hosts: 62.75.224.159 rgs1.netO1 - Hosts: 62.75.224.159 rgs2.netO1 - Hosts: 62.75.224.159 bns1.netO1 - Hosts: 62.75.224.159 bns2.netO1 - Hosts: 62.75.224.159 cms1.netO1 - Hosts: 62.75.224.159 cms2.netO1 - Hosts: 62.75.224.159 j800banners.cjt1.netO1 - Hosts: 62.75.224.159 jadlogix.cjt1.netO1 - Hosts: 62.75.224.159 jadtegrity.cjt1.netO1 - Hosts: 62.75.224.159 jaimmedia.cjt1.netO1 - Hosts: 62.75.224.159 javatar.cjt1.netO1 - Hosts: 62.75.224.159 jbeet.cjt1.netO1 - Hosts: 62.75.224.159 jbigpops.cjt1.netO1 - Hosts: 62.75.224.159 jbouncetek.cjt1.netO1 - Hosts: 62.75.224.159 jbravenet.cjt1.netO1 - Hosts: 62.75.224.159 jcdcover.cjt1.netO1 - Hosts: 62.75.224.159 jclickspring.cjt1.netO1 - Hosts: 62.75.224.159 jcollegehumor.cjt1.netO1 - Hosts: 62.75.224.159 jdownloadacc.cjt1.netO1 - Hosts: 62.75.224.159 jedonkey.cjt1.netO1 - Hosts: 62.75.224.159 jeuniverse.cjt1.netO1 - Hosts: 62.75.224.159 jhot.cjt1.netO1 - Hosts: 62.75.224.159 jicmedia.cjt1.netO1 - Hosts: 62.75.224.159 jicq.cjt1.netO1 - Hosts: 62.75.224.159 jieplugin.cjt1.netO1 - Hosts: 62.75.224.159 jinternetoptimizer.cjt1.netO1 - Hosts: 62.75.224.159 jmediabuy1.cjt1.netO1 - Hosts: 62.75.224.159 jmediabuyad.cjt1.netO1 - Hosts: 62.75.224.159 jmindset.cjt1.netO1 - Hosts: 62.75.224.159 jmindsettest.cjt1.netO1 - Hosts: 62.75.224.159 jnictech.cjt1.netO1 - Hosts: 62.75.224.159 jnova.cjt1.netO1 - Hosts: 62.75.224.159 jpiolet.cjt1.netO1 - Hosts: 62.75.224.159 jsanboxer.cjt1.netO1 - Hosts: 62.75.224.159 jsercee.cjt1.netO1 - Hosts: 62.75.224.159 jthedelfin.cjt1.netO1 - Hosts: 62.75.224.159 jwarezp2p.cjt1.netO1 - Hosts: 62.75.224.159 jwildmedia.cjt1.netO1 - Hosts: 62.75.224.159 mediabuy-nic.cjt1.netO1 - Hosts: 62.75.224.159 www.m7z.netO1 - Hosts: 62.75.224.159 m7z.netO1 - Hosts: 62.75.224.159 jcms.cydoor.comO1 - Hosts: 62.75.224.159 cydoor.comO1 - Hosts: 62.75.224.159 www.cydoor.comO1 - Hosts: 62.75.224.159 jnova.cjt1.net O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program Files\Starware\bin\Starware.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dll O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe O4 - HKLM\..\Run: [F ma] C:\windows\mrjj.exe O4 - HKLM\..\Run: [xload] "C:\WINDOWS\xload.exe" O4 - HKCU\..\Run: [BoontyBox] "C:\Program Files\Boonty\BoontyBox\BoontyBox.exe" /boot O15 - Trusted Zone: *.sxload.comO16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - http://sib1.od2.com/common/Member/ClientInstall/9.20.0002/OCI/setup.exeO16 - DPF: {7149E79C-DC19-4C5E-A53C-A54DDF75EEE9} (IObjSafety.DemoCtl) - mk:@MSITStore:C:\WINDOWS\mma.chm::/joysaver.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab tu dois desactiver les services de bounty O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe tu fais pour desactiver le service fais démarrrer->exécuter-> taper services.msc tu recherches Service: Boonty Gamesensuite tu fais desactiver et arreter fixe ensuite la ligne reposte un hijackthis enssuite et passe tous ces utilitaires avant de le faire (1)ad-aware version 1.06 (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite voir demo http://pageperso.aol.fr/balltrap34/adwseflash.zip *** (2) spybot version 1.4 (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite voir demo d utilisation http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm *** et aussi ceci (3) CleanUp40.exe http://www.florensac-chasse-trap.com/ section virus/logiciel de securite voir demo http://pageperso.aol.fr/balltrap34/democleanup.htm *** (4) a2 http://www.emsisoft.net/fr/ penser a le metre a jour avant de scanner le pc *** ps : un grand merci a balltrap pour les lien :) (5) Edwido http://download.ewido.net/ewido-setup.exe Pendant l'installation, sur la page "Additional Options", décoche les deux options "Install background guard" et "Install scan via context menu Ewido Security Suite. Clique sur mise à jour. Clique sur scanner puis sur scan complet du système.reposte un hijack et dis nous ce qui a changé depuis bye

ben13010 · Answer

ensuite pour fixer , ouvre hijack et tu clique sur la seconde case

ensuite tu met une crois en face de chaque ligne que je t'ai mis et quand tu as fini , tu clique sur fix checked

ensuite tu telecarges les utiliatires que je t'ai mis plus haut , tu fais les mise a jour et tu scannes ton pc

tu vire tous ce qu'il ste trouvent

ensuite tu reposte un rapport hijackthis pour voir ce qui a ete effacé

bye

ben13010 · Answer

il me semble pas avoir vu de firewall

si c'est le cas installe zone alarm c'est indispensable

http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=&lang=fr

choisi le second lien

Téléchargez la version GRATUITE de ZoneAlarm® (Protection par firewall)

isntalle le

elo2 · Answer

rej'ai oublié de posé ma question ?faut-il installer zonealarm ?a plus

jean38 · Answer

Ho que oui.le fire wall de window est tout sauf ce qu'il annonce. enfin c'est juste mon avis.mais va sur le site de sebhttp://sebsauvage.netdans safe hex.A+Jean

jean38 · Answer

non sans pb.

Winfixer2005

8 réponses

Newsletters