Sujet Précédent Sujet Suivant

Problème avec net offers

Résolu/Fermé
cine - 14 déc. 2005 à 13:22
 Utilisateur anonyme - 7 janv. 2006 à 16:14
Bonjour,
mon écran est envahi par des fenêtres de net offers!
comment arreter cela??
Quelqu'un peut m'aider s'il vous plait?

voici ce qui se trouve dans mon PC :

Logfile of HijackThis v1.99.1
Scan saved at 14:43:05, on 16/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Norman\NVC\BIN\Zanda.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\NORMAN\nvc\BIN\ZLH.EXE
C:\NORMAN\nvc\BIN\NVCSCHED.EXE
C:\NORMAN\nvc\BIN\NYMSE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\WINDOWS\system32\spootty.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\NORMAN\nvc\BIN\NJEEVES.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exe
C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\program files\mailskinner\mailskinner.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Booster Wanadoo\wanadoo_booster.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\NORMAN\nvc\BIN\nvcoas.exe
C:\NORMAN\nvc\BIN\cclaw.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HbTools\Bin\4.7.0.0\HbtSrv.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Documents and Settings\DELPHINE\Local Settings\Temporary Internet Files\Content.IE5\TY2NLKJY\hijackthis_199[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ydejubblknmjnxxyxofg.com/BIU_ZGcox8S49jFKG/l8Pu3JI7ExPT/ttN8s0gaXGcXZvwhQQ9EwXkr0oR4W8B8v.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fcsbmaeplhitvrxsnkqrxqfbl.info/BIU_ZGcox8R15NYhIEBwXaylaMND0G/KxLz2y3Zobds.php
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.eml
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*windowsupdate.microsoft.com;*windowsupdate.com;download.microsoft.com;codecs.microsoft.com;activex.microsoft.com;liveupdate.symantecliveupdate.com;liveupdate.symantec.com;services.wanadoo.fr;secure.wanadoo.fr;webgen.wanadoo.fr;images.wanadoo.fr;images2.wanadoo.fr;wanadoo.wha.com;wha.wanadoo.fr;pay.www.wanadoo.fr;www.wanadoo.fr;webmail*.wanadoo.fr;iapref.wanadoo.fr;wip2.wanadoo.fr;vip.voila.fr;maj.wanadoo.fr;qos.wanadoo.fr;guidejuniorscontroleparental.wanadoo.fr;wip2pro.wanadoo.fr;wpms.wanadoo.fr;mobile.wanadoo.fr;wpms.wanadoo.fr;photos.wanadoo.fr;musicb.wanadoo.fr;wassup.wanadoo.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1776E9CF-7D47-A85A-0499-2D7CC9E22080} - C:\DOCUME~1\DELPHINE\APPLIC~1\helpregs\NurbDraw.exe
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\nvc\BIN\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [Microsoft Midtown] spootty.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [qexfueva] C:\WINDOWS\system32\dolxpnvm.exe
O4 - HKLM\..\Run: [army fast coal soap] C:\Documents and Settings\All Users\Application Data\DOG JUMP ARMY FAST\theshim.exe
O4 - HKLM\..\RunServices: [Microsoft Midtown] spootty.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1069.dll,InstantAccess
O4 - HKCU\..\Run: [Extra peak] C:\DOCUME~1\DELPHINE\APPLIC~1\DVDHOP~1\intra send two.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227
O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cab
O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_XP.cab
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cab
O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cab
O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cab
O16 - DPF: {201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_ASPIV4_XP.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03ca36600f3a647f6919/netzip/RdxIE601_fr.cab
O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_XP.cab
O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cab
O16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4_XP.cab
O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.girafoto.fr/XUpload.ocx
O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062_XP.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab
O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E1A47A93-C109-4F8A-BAE1-DF2CF68FD9FB}: NameServer = 80.10.246.134 80.10.246.7
O18 - Protocol: bw+0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN\nvc\BIN\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN\nvc\BIN\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN\nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
A voir également:

80 réponses

Précédent
Réponse 41 / 80
Cine
4 janv. 2006 à 21:50
impossible de rouvrir le rapport, ça me met ça : "no instances of ShopperReports found"
c'est normal?
0
Réponse 42 / 80
Utilisateur anonyme
5 janv. 2006 à 10:54
Salut

oui car
no instances of ShopperReports found = qu il n a plus rien trouvé !!!

Ou en sont tes soucis?

a+
0
Réponse 43 / 80
Cine
5 janv. 2006 à 16:40
Bonjour, j'ai passé un peu de temps sur le net pour voir ou ça en été et j'ai d'autres pages qui apparaissent de :
http.products-news.com
0
Réponse 44 / 80
Utilisateur anonyme
5 janv. 2006 à 18:23
re,

ok, continuons le nettoyage

1/peux tu refaire ceci
HijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici.

2/Télécharge ceci: (merci a S!RI pour ce petit programme).
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport
Copie/colle le sur le poste stp.

++
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 45 / 80
Cine
5 janv. 2006 à 18:44
Adobe Acrobat 4.0
Adobe Acrobat 5.0
Adobe Photoshop Elements
All To MP3 Converter 1.6rc4
ArcSoft PhotoImpression
Barre d'outils MSN Search
Booster Wanadoo
CleanUp!
Comptabilité
Construisez votre maison
Correctif Windows XP - KB873333
Correctif Windows XP - KB873339
Correctif Windows XP - KB885250
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB885884
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB887742
Correctif Windows XP - KB888113
Correctif Windows XP - KB888302
Correctif Windows XP - KB890047
Correctif Windows XP - KB890175
Correctif Windows XP - KB890859
Correctif Windows XP - KB890923
Correctif Windows XP - KB891781
Correctif Windows XP - KB893066
Correctif Windows XP - KB893086
Crazy Taxi
DivX
DivX Converter
DivX Converter
DivX Player
Encyclopédie Standard Microsoft Encarta 2002
EPSON Copy Utility
EPSON Logiciel imprimante
EPSON Photo Print
EPSON PhotoQuicker3.2
EPSON PRINT Image Framer Tool1.1
EPSON Smart Panel
EPSON TWAIN 5
Extension Système de Microsoft Money
Heredis 2001
Heredis 7
Heredis 8
HijackThis 1.99.1
IncrediMail Xe
Installation de Microsoft Works Suite 2002
Instant Access
InterVideo WinDVD 4
Lecteur Windows Media 10
Logitech Desktop Messenger
Logitech Print Service
Logitech QuickCam
Mediamixer 4.03
Messenger Plus! 3
Microsoft AutoRoute 2002
Microsoft Money
Microsoft Office 2000 Professional
Microsoft Picture It! Express 2001
Microsoft Picture It! Photo 2002
Microsoft Word 2002
Microsoft Works 6.0
Microsoft Works Suite -- Macro complémentaire Microsoft Word
Mise à jour de sécurité pour Windows XP (KB883939)
Mise à jour de sécurité pour Windows XP (KB890046)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896422)
Mise à jour de sécurité pour Windows XP (KB896428)
MSN Messenger 7.5
Nero
NVC v5.30
NVIDIA Windows 2000/XP Display Drivers
PCFriendly
PhotoFiltre
PowerPoint to Video 1.3.0
Print@Auchan
Programme de gestion Camera de Logitech®
RealPlayer
ScanToWeb
Shockwave
Spybot - Search & Destroy 1.4
Starsky&Hutch
Tetris
Tetris4000
Wanadoo
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows XP Service Pack 2
WJChess 1.0

----------------------------------------------------------------------

SmitFraudFix v2.08

Rapport fait à 18:42:21,62 le 05/01/2006
Executé à partir de C:\Documents and Settings\DELPHINE\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\DELPHINE\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau


»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau



»»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
0
Réponse 46 / 80
Utilisateur anonyme
5 janv. 2006 à 19:20
ok,

dis moi quels genres de pubs tu as, merci
0
Réponse 47 / 80
Cine
5 janv. 2006 à 19:38
ce sont des pub porno. Dans la barre du haut, il y a le site, et dans la page, il y a des photos.
Ca me propose d'aller voir des video, d'aller sur des tchats...
C'est un carré qui se placent au milieu de l'écran.
0
Réponse 48 / 80
Utilisateur anonyme
5 janv. 2006 à 19:51
salut

dans panneau de configuration < option internet
onglet general
[parametres]
[afficher les fichiers]

Qu as tu dedans?

a+
0
Réponse 49 / 80
Cine
5 janv. 2006 à 19:59
j'ai plein de fichier la-dedans, comment je peux copier la liste des fichiers pour vous la montrer ?
0
Réponse 50 / 80
Utilisateur anonyme
5 janv. 2006 à 20:16
re,

Verifie bien que tu es dans downloaded Program files
Si oui,
supprime tout

a+
0
Réponse 51 / 80
Cine
5 janv. 2006 à 20:22
voilà, j'ai tout supprimé
0
Réponse 52 / 80
Utilisateur anonyme
5 janv. 2006 à 20:29
ok,

Telecharge Ewido:
http://download.ewido.net/ewido-setup.exe

Scan ton pc avec, copie colle le rapport

a+
0
Réponse 53 / 80
Cine
5 janv. 2006 à 21:55
---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 21:53:08, 05/01/2006
+ Somme de contrôle: 7C24DA26

+ Résultats du scan:

HKLM\SOFTWARE\Classes\AppID\WeatherOnTray.EXE -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\{0507FDDE-F3B7-49F5-9E8F-C557E991F39B} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Interface\{34F4D917-31E4-464C-B8B3-84C1CE76B395} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Interface\{3F04CBF7-CD62-4403-B090-B432DEDCB159} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbAx -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButton -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\SysWebTelecom.SysWebTelecom -> Dialer.Generic : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\SysWebTelecom.SysWebTelecom\CurVer -> Dialer.Generic : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{45397063-D7D0-47C2-9508-26487608A298} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{71E9CF40-AF72-4B55-BD3F-1FEA2A0EAEA6} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{71EFE583-62FE-4419-9918-CA3B683F7B36} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{793AF621-5CD0-4B92-B765-6712F6AAF48E} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{9967A873-40F3-4C7E-9239-6C8760F19F61} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{B9F51D42-CCA0-4408-BB02-D433D1865A3A} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\TypeLib\{F8EE014F-B34C-4544-8E45-95A7971D323B} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\MachineInfo -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\Mail -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\PI -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HbTools\Upgrade -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOI\Mail -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOL -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOL\Mail -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\HostOL\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Hotbar -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Hotbar\Install -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Install\CmpMap -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Install\Icons -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\HbTools\Install\Links -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}\\ClsidExtension -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169} -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}\\ClsidExtension -> Spyware.HotBar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\EGDHTML -> Dialer.Generic : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common\Time -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\dynamic -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\dynamicFail -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\EUI -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\HtmlPPP -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\ImagesHistory -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\init -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\links -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\mail -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\MultiUrl -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\options -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\PI -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg800 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg801 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg802 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg803 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg807 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg808 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg810 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg811 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg812 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg818 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg819 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg824 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg825 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg826 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg827 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg828 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg829 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg830 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg842 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg843 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg844 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg845 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg847 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg848 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg849 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg856 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg857 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg862 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg863 -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sgsbt -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\UserInfo -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI\links -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\links -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\Mail -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\soho -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostIE -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostIE\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOE -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOE\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOL -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOL\Updates -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289} -> Spyware.SmartShopper : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{946B3E9E-E21A-49C8-9F63-900533FAFE14} -> Spyware.HotBar : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E77EDA01-3C56-4A96-8D08-02B42891C169} -> Spyware.HotBar : Nettoyer et sauvegarder
[492] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[520] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[564] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[576] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[772] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[816] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[852] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[912] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[972] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[1232] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1348] VM_01831000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1428] VM_00BE1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1452] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1572] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1604] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[1788] VM_00D91000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1796] VM_00A71000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1928] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1968] VM_00A81000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1976] VM_00AB1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1992] VM_00CE1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2016] VM_00AA1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2024] VM_010E1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2044] VM_00F71000 -> Adware.NaviPromo : Erreur durant le nettoyage
[120] VM_00CE1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[128] VM_003C1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[148] VM_01151000 -> Adware.NaviPromo : Erreur durant le nettoyage
[140] VM_00991000 -> Adware.NaviPromo : Erreur durant le nettoyage
[476] VM_00971000 -> Adware.NaviPromo : Erreur durant le nettoyage
[396] VM_00D31000 -> Adware.NaviPromo : Erreur durant le nettoyage
[360] VM_01401000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1004] VM_00801000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1288] VM_00BB1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[736] VM_00961000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2092] VM_003D1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2736] VM_01011000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2880] VM_01201000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2212] VM_00C51000 -> Adware.NaviPromo : Erreur durant le nettoyage
[932] VM_01801000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1596] VM_00F41000 -> Adware.NaviPromo : Erreur durant le nettoyage
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\Config.xml -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db\Aliases.dbs -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db\Sites.dbs -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\dwld -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\persist.dbs -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\report -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\report\ag_ShopperReports.xml -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\report\ag_ShopperReports.xml.db -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\report\send_ShopperReports.xml -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\report\send_ShopperReports.xml.db -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\res3 -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\res3\WhiteList.dbs -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\shprrprt.log -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\shprrprt_1131123111.log -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190411-453.dll -> Spyware.HotBar : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-111.dll -> Dialer.InstantAccess.f : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-621.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-728.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-744.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-944.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-137.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-442.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-695.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-261.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-420.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-453.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-490.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-511.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190416-351.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190416-898.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\WINDOWS\system32\EGDACCESS_1060.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\WINDOWS\system32\EGDACCESS_1065.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\WINDOWS\system32\EGDACCESS_ASPIV4_1064.dll -> Dialer.Generic : Nettoyer et sauvegarder
C:\WINDOWS\system32\msplock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder
C:\WINDOWS\system32\__delete_on_reboot__msclock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder


::Fin du rapport
0
Réponse 54 / 80
Utilisateur anonyme
5 janv. 2006 à 23:02
salut

relance ewido et remet le rapport

a+
0
Réponse 55 / 80
Cine
6 janv. 2006 à 13:09
---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 13:06:51, 06/01/2006
+ Somme de contrôle: C98FACD7

+ Résultats du scan:

[492] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[520] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[564] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[576] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[772] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[816] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[852] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[904] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[996] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage
[1104] VM_00DF1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1228] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1340] VM_01831000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1404] VM_00D71000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1428] VM_00CB1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1448] VM_00DA1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1456] VM_003D1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1516] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1544] VM_00A81000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1568] VM_00C81000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1588] VM_00AA1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1604] VM_010F1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1632] VM_04371000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1640] VM_00D31000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1656] VM_00921000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1668] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1692] VM_00AF1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1824] VM_00921000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1860] VM_00C51000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1872] VM_01511000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1884] VM_00961000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1940] VM_00A21000 -> Adware.NaviPromo : Erreur durant le nettoyage
[220] VM_01201000 -> Adware.NaviPromo : Erreur durant le nettoyage
[1424] VM_009B1000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2152] VM_01501000 -> Adware.NaviPromo : Erreur durant le nettoyage
[2924] VM_00801000 -> Adware.NaviPromo : Erreur durant le nettoyage
C:\WINDOWS\system32\__delete_on_reboot__msclock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder


::Fin du rapport
0
Réponse 56 / 80
Utilisateur anonyme
6 janv. 2006 à 13:13
Salut Cine, ca va?

Telecharge ceci
http://www.silentrunners.org/Silent%20Runners.vbs
Execute le,atends quelques minutes, il va creer ensuite un dossier juste a coté de silent runner sous format texte, copie/colle ce qu il te donnera

A+
0
Réponse 57 / 80
Cine
6 janv. 2006 à 13:35
Bonjour
Ca va bien, je suis déjà en week end !
J'ai exécuté puis appuyer sur ok et depuis il n'y a rien qui apparait depuis 15 min, est-ce normal?
0
Réponse 58 / 80
Utilisateur anonyme
6 janv. 2006 à 14:47
Salut

ah super, long we alors !

Alors Lorsque tu le lances, il va chercher , tu le laisses faire
Apres 5 min, tu vas a coté du programme que tu as lancer, il y a un rapport .txt qui s est crée
copie/colle le rapport

a+
0
Réponse 59 / 80
Cine
6 janv. 2006 à 14:55
ah j'avais pas pigé, je croyais qu'une nouvelle fenêtre allait s'ouvrir. Le voilà...

"Silent Runners.vbs", revision 41, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Looney Tunes" = "C:\Program Files\Looney Tunes\Looney Tunes.exe" [file not found]
"LogitechSoftwareUpdate" = ""C:\Program Files\Logitech\Video\ManifestEngine.exe" boot" ["Logitech Inc."]
"LDM" = "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" ["Logitech"]
"IncrediMail" = "C:\Program Files\IncrediMail\bin\IncMail.exe /c" ["IncrediMail, Ltd."]
"MessengerPlus3" = ""C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart" ["Patchou"]
"Instant Access" = "rundll32.exe EGDACCESS_1072.dll,InstantAccess" [MS]
"msnmsgr" = ""C:\Program Files\MSN Messenger\msnmsgr.exe" /background" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"SoundMan" = "SOUNDMAN.EXE" ["Avance Logic, Inc."]
"Norman ZANDA" = "C:\NORMAN\nvc\BIN\ZLH.EXE /LOAD /SPLASH" [null data]
"NvCplDaemon" = "RUNDLL32.EXE NvQTwk,NvCplDaemon initialize" [MS]
"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]
"NeroCheck" = "C:\WINDOWS\System32\NeroCheck.exe" ["Ahead Software Gmbh"]
"WorksFUD" = "C:\Program Files\Microsoft Works\wkfud.exe" ["Microsoft® Corporation"]
"Microsoft Works Portfolio" = "C:\Program Files\Microsoft Works\WksSb.exe /AllUsers" ["Microsoft® Corporation"]
"Microsoft Works Update Detection" = "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" ["Microsoft® Corporation"]
"MoneyStartUp10.0" = ""C:\Program Files\Microsoft Money\System\Activation.exe"" [MS]
"WooCnxMon" = "C:\PROGRA~1\Wanadoo\CnxMon.exe" [empty string]
"WOOWATCH" = "C:\PROGRA~1\Wanadoo\Watch.exe" ["France Télécom R&D"]
"WOOTASKBARICON" = "C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" ["France Télécom R&D"]
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."]
"LVCOMSX" = "C:\WINDOWS\System32\LVCOMSX.EXE" ["Logitech Inc."]
"LogitechVideoRepair" = "C:\Program Files\Logitech\Video\ISStart.exe" ["Logitech Inc."]
"LogitechVideoTray" = "C:\Program Files\Logitech\Video\LogiTray.exe" ["Logitech Inc."]
"TkBellExe" = ""C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]
"MessengerPlus3" = ""C:\Program Files\MessengerPlus! 3\MsgPlus.exe"" ["Patchou"]
"njmsxgq" = "c:\windows\system32\njmsxgq.exe njmsxgq" [null data]
"KernelFaultCheck" = "C:\WINDOWS\system32\dumprep 0 -k" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll" ["Safer Networking Limited"]
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\(Default) = "Barre d'outils MSN Search Helper" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}\(Default) = (no title provided)
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyviewer.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Extension Affichage Panorama du Panneau de configuration"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Extension icône HyperTerminal"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Explorateur de Bureau"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office\OLKFSTUB.DLL" [MS]
"{C14F7681-33D8-11D3-A09B-00500402F30B}" = "CtxMenu"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Fujifilm\Print@Auchan\pafshell.dll" [empty string]
"{400CFEE2-39D0-46DC-96DF-E0BB5A4324B3}" = "Mes photos Logitech"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Logitech\Video\Namespc2.dll" ["Logitech Inc."]
"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]
"{13E7F612-F261-4391-BEA2-39DF4F3FA311}" = "Windows Desktop Search"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\EXT\02.05.0001.1119\fr-fr\msnlExt.dll" [MS]
"{97090E2F-3062-4459-855B-014F0D3CDBB1}" = "MSN Deskbar"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\DB\02.05.0001.1119\fr-fr\deskbar.dll" [MS]
"{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}" = "All To MP3 Converter"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\shellhook.dll" ["TODO: <Firmenname>"]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
CtxMenu\(Default) = "{C14F7681-33D8-11D3-A09B-00500402F30B}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Fujifilm\Print@Auchan\pafshell.dll" [empty string]
ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\context.dll" ["ewido networks"]
IMMenuShellExt\(Default) = "{F8984111-38B6-11D5-8725-0050DA2761C4}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\INCRED~1\bin\ImShExt.dll" ["IncrediMail, Ltd."]
NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"
-> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]
ZMP3ShellExt\(Default) = "{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\context.dll" ["ewido networks"]
MP3ShellExt\(Default) = "{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]
NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"
-> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"
-> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\DELPHINE\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\ssmyst.scr" [MS]


Startup items in "DELPHINE" & "All Users" startup folders:
----------------------------------------------------------

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
"Adobe Gamma Loader.exe" -> shortcut to: "C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]
"Booster Wanadoo" -> shortcut to: "C:\Program Files\Booster Wanadoo\wanadoo_booster.exe" ["SlipStream Data Inc."]
"InterVideo WinCinema Manager" -> shortcut to: "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe" [empty string]
"Logitech Desktop Messenger" -> shortcut to: "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe /start" ["Logitech"]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]
"Rappels du Calendrier Microsoft Works" -> shortcut to: "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe" ["Microsoft® Corporation"]
"Windows Desktop Search" -> shortcut to: "C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe /startup" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 19
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\
"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]

Explorer Bars

HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\
{66B90ADB-0BE3-40AE-8680-84A6F0577CA0}\ = "Web Assistant" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll" [file not found]

Extensions (Tools menu items, main toolbar menu buttons)

HKCU\Software\Microsoft\Internet Explorer\Extensions\
{1462651F-F4BA-4C76-A001-C4284D0FE16E}\
"ButtonText" = "Wanadoo"
"Exec" = "http://www.wanadoo.fr" [file not found]

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{85D1F590-48F4-11D9-9669-0800200C9A66}\
"MenuText" = "Uninstall BitDefender Online Scanner v8"
"Exec" = "%windir%\bdoscandel.exe" [null data]

{E023F504-0C5A-4750-A1E7-A9046DEA8A21}\
"ButtonText" = "MoneySide"
"CLSIDExtension" = "{301DA1EE-F65C-4188-A417-9E915CC8FBFA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyviewer.dll" [MS]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Miscellaneous IE Hijack Points
------------------------------

C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

Added lines (compared with English-language version):
[Strings]: SAFESITE_VALUE="http://home.microsoft.com/intl/fr/"

Missing lines (compared with English-language version):
[Strings]: 1 line

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\
"{08C06D61-F1F3-4799-86F8-BE1A89362C85}" = "Search Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\Wanadoo\SEARCH~1.DLL" [empty string]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

EPSON Printer Status Agent2, EPSONStatusAgent2, "C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe" ["SEIKO EPSON CORPORATION"]
ewido security suite control, ewido security suite control, "C:\Program Files\ewido anti-malware\ewidoctrl.exe" ["ewido networks"]
ewido security suite guard, ewido security suite guard, "C:\Program Files\ewido anti-malware\ewidoguard.exe" ["ewido networks"]
Norman NJeeves, Norman NJeeves, "C:\NORMAN\nvc\BIN\NJEEVES.EXE" [null data]
Norman Virus Control on-access component, nvcoas, "C:\NORMAN\nvc\BIN\nvcoas.exe" ["Norman ASA"]
Norman Virus Control Scheduler, NVCScheduler, "C:\NORMAN\nvc\BIN\NVCSCHED.EXE" ["Norman Data Defense Systems"]
Norman ZANDA, Norman ZANDA, "C:\Norman\NVC\BIN\Zanda.exe" [null data]
NVIDIA Driver Helper Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
EPSON V5 2KMonitor\Driver = "EBPMON2.DLL" ["SEIKO EPSON CORPORATION"]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points and all Registry CLSIDs for dormant Explorer Bars,
use the -supp parameter or answer "No" at the first message box.
---------- (total run time: 64 seconds, including 18 seconds for message boxes)
0
Réponse 60 / 80
Utilisateur anonyme
6 janv. 2006 à 15:00
Salut

1/dans ajout/suppression de programme, desinstalles:
Instant Access

2/Télécharge: Pocket Killbox ici
http://www.downloads.subratam.org/KillBox.exe

:: Démo d utilisation (merci a Balltrap34 pour cette réalisation) ::
http://pageperso.aol.fr/balltrap34/killbox.htm

3/Double clic sur killbox.exe (Pocket Killbox)

- coche: delete on reboot
- Dans "Full Path of File to Delete"
copie et colle:

c:\windows\system32\njmsxgq.exe

- clique sur la croix rouge
- une fenêtre va apparaître pour confirmation clique sur YES
- une seconde fenêtre te demande si tu veux redémarrer clique sur YES

Laisse le pc redémarrer.

4/Relance ewido et donne le rapport

A+


0

Discussions similaires

Processeur 98% gestionnaire des taches
TamarouMA -
Calain34 -

9 réponses
ERR_UNKNOWN_URL_SCHEME : Problème de redirection
IliasPier -
Zorglube -

4 réponses
téléchargement de .NetFramework 3.5(inclus .Net 2.0et 3.0)
djbingos -
Utilisateur anonyme -

1 réponse
Onoffapp.net
Josephine33260 -
Josephine33260 -

2 réponses
Logiciel gratuit équivalent à Paint.Net pour Mac
fiesta500 -
Utilisateur anonyme -

5 réponses