pages intempestives Résolu

Question

BonjourJ'ai plein de pages web qui s'ouvrent : paypopup et d'autres...merci de me venir en aidej'ai  win xprapport hijackthis:Logfile of HijackThis v1.99.1Scan saved at 12:33:39, on 22/02/2006Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32undll32.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXEC:\WINDOWS\System32\winsystems.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\Program Files\Network Monitor
etmon.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\WinRAR\WinRAR.exeC:\DOCUME~1	iboneur\LOCALS~1\Temp\Rar$EX09.906\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLLO3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dllO4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimizeO4 - HKLM\..\Run: [winsystems25] winsystems.exeO4 - HKLM\..\RunServices: [Microsoft Spng] stfnplug.exeO4 - HKLM\..\RunServices: [winsystems25] winsystems.exeO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\RunServices: [Microsoft Spng] stfnplug.exeO4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exeO8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXTO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - Winlogon Notify: RunOnce - C:\WINDOWS\system32\k8pm0i71e8.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exeO23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exeO23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor
etmon.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

boulepate · Answer

Salut,Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"O4 - HKLM\..\Run: [winsystems25] winsystems.exeO4 - HKLM\..\RunServices: [Microsoft Spng] stfnplug.exeO4 - HKLM\..\RunServices: [winsystems25] winsystems.exeO4 - HKCU\..\RunServices: [Microsoft Spng] stfnplug.exeO23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor
etmon.exe cliques sur demarrer, executer, tapes: services.msc ,cherches dans la list ecette ligne te regle là sur "desactivé" Network Monitorcliques sur demarrer, rechercher, cherches et supprimes ces fichiers:netmon.exe stfnplug.exewinsystems.exeTelecharge, installe puis mets à jour ce logiciel, une fois que c'est fait, fais un scan complet de ton systeme et colle le rapport ici avec un nouveau rapport hijackthisEwido:http://www.01net.com/telecharger/windows/Utilitaire/antivirus/fiches/31851.html

tiboneur · Answer

Bonjour et merci à toi de ton aidealors tout d'abord dans services.msc,quelle ligne est à désactiver?j'ai téléchargé le logiciel mais je n'arrive pas à faire de mise à jour : il n'arrive pas à se connectervoici tout de même un scan complet:+ Résultats du scan:	[1484] C:\WINDOWS\system32\dxnet.dll -> Adware.Look2Me : Erreur durant le nettoyage	[1744] C:\WINDOWS\system32\dxnet.dll -> Adware.Look2Me : Erreur durant le nettoyage	C:\Documents and Settings	iboneur\Cookies	iboneur@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@2o7[2].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@ads.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@advertising[1].txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@c7.zedo[1].txt -> TrackingCookie.Zedo : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@com[2].txt -> TrackingCookie.Com : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@data2.perf.overture[1].txt -> TrackingCookie.Overture : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@ivwbox[1].txt -> TrackingCookie.Ivwbox : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@linksynergy[2].txt -> TrackingCookie.Linksynergy : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@paypopup[1].txt -> TrackingCookie.Paypopup : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@trafficmp[2].txt -> TrackingCookie.Trafficmp : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@webstat[2].txt -> TrackingCookie.Web-stat : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@wreport.weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@www.myaffiliateprogram[1].txt -> TrackingCookie.Myaffiliateprogram : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Cookies	iboneur@zedo[1].txt -> TrackingCookie.Zedo : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Local Settings\Temp	emp.frA4EB -> Adware.Look2Me : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Local Settings\Temporary Internet Files\Content.IE5\8HIRGDEF\ErrorSafeScannerInstall_fr[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyer et sauvegarder	C:\Documents and Settings	iboneur\Local Settings\Temporary Internet Files\Content.IE5\ALKVY921\AppWrap[1].exe -> Adware.AdURL : Nettoyer et sauvegarder	C:\Installer.exe -> Adware.Look2Me : Nettoyer et sauvegarder	C:\RECYCLER\S-1-5-21-1801674531-1078081533-839522115-1003\Dc2.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Nettoyer et sauvegarder	C:\ucmoreiex.exe/UCMTSAIE.DLL -> Adware.Ucmore : Nettoyer et sauvegarder	C:\ucmoreiex.exe/IUCMORE.DLL -> Adware.Ucmore : Nettoyer et sauvegarder	C:\WINDOWS\Downloaded Program Files\UERSV_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.d : Nettoyer et sauvegarder	C:\WINDOWS\icont.exe -> Adware.AdURL : Nettoyer et sauvegarder	C:\WINDOWS\system32\cbpbk32.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\config\systemprofile\Bureau\freeprodtb.exe -> Adware.Maxifiles : Nettoyer et sauvegarder	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0PEF0XMB\freeprodtb[1].exe -> Adware.Maxifiles : Nettoyer et sauvegarder	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4TMJ4P6R\ucmoreiex[1].exe/UCMTSAIE.DLL -> Adware.Ucmore : Nettoyer et sauvegarder	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4TMJ4P6R\ucmoreiex[1].exe/IUCMORE.DLL -> Adware.Ucmore : Nettoyer et sauvegarder	C:\WINDOWS\system32\cPmocx.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\dkactfrm.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\duband.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\EcPicPrt.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\iLsrecst.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\ipfgnt5.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\it41_qc.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\lscdll.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\ltrhelp.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\mgvidctl.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\mnsystem.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\mxdemui.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32
ctapi.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32
rprovau.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\ogbcji32.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\okecnv32.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\oSkley.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\s6pu0g79e6.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\syrwvdrv.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32	ikwks.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\uprsdpia.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\vamdbg.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\wenmp32.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\whvdmoe.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\system32\xBctsrv.dll -> Adware.Look2Me : Nettoyer et sauvegarder	C:\WINDOWS\Temp\bw2.com -> Adware.AdURL : Nettoyer et sauvegarder	C:\WINDOWS\Temp\ICD1.tmp\UERSV_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.d : Nettoyer et sauvegarder	G:\FOUND.000\FILE0011.CHK -> Not-A-Virus.Downloader.Win32.Agent.e : Nettoyer et sauvegarder	G:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MCCN51EA\v3cab[1].cab/v3.dll -> Adware.EliteBar : Nettoyer et sauvegarder	G:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\5Z92KH9D\MediaTicketsInstaller[1].cab/MediaTicketsInstaller.ocx -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\WINDOWS\system32\eraseme_50553.exe -> Backdoor.SdBot.ajs : Nettoyer et sauvegarder	G:\WINDOWS\system32\TFTP2016 -> Backdoor.Rbot : Nettoyer et sauvegarder	G:\WINDOWS\system32\oins.exe -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\WINDOWS\system32\xoadsij.dll -> Adware.PurityScan : Nettoyer et sauvegarder	G:\WINDOWS\system32
coatagi.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\WINDOWS\system32\j&#1072;vaw.exe -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\WINDOWS\Temp\ICD2.tmp\v3.dll -> Adware.EliteBar : Nettoyer et sauvegarder	G:\WINDOWS\Temp\ICD4.tmp\MediaTicketsInstaller.ocx -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\WINDOWS\Tempes130.tmp -> Adware.180Solutions : Nettoyer et sauvegarder	G:\WINDOWS\Temp\update.exe -> Adware.Sahat : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\v3.dll -> Adware.EliteBar : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\UWFX5V_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.e : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\CONFLICT.2\UWFX5V_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.e : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\CONFLICT.3\UWFX5V_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.d : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\fra_pagl.exe -> Dialer.Creazione.q : Nettoyer et sauvegarder	G:\WINDOWS\Downloaded Program Files\CONFLICT.1\SETFA.tmp -> Dialer.Creazione.q : Nettoyer et sauvegarder	G:\WINDOWS\elos.exe -> Adware.MediaMotor : Nettoyer et sauvegarder	G:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\R7ZCDBCJ\pic[1].jpg -> Adware.WinAD : Nettoyer et sauvegarder	G:\Documents and Settings\Tiboneur\Local Settings\Temp\oins.exe -> Adware.MediaTickets : Nettoyer et sauvegarder	G:\Documents and Settings\Tiboneur\Cookies	ino@burstnet[2].txt -> TrackingCookie.Burstnet : Nettoyer et sauvegarder	G:\Documents and Settings\Tiboneur\Cookies	ino@www.abcsearch[1].txt -> TrackingCookie.Abcsearch : Nettoyer et sauvegarder	G:\Documents and Settings\Tiboneur\Cookies	ino@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyer et sauvegarder	G:\Documents and Settings\Tiboneur\Cookies	ino@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\Cml.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtAds.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtCoreSrv.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtGuard.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtHostIE.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtHostOE.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtHostOL.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtInstIE.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtOEAddOn.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtSrv.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtToolbar.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtWallpaper.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\HbTools\bin\4.7.1.0\HbtWeatherOnTray.exe -> Adware.HotBar : Nettoyer et sauvegarder	G:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll -> Adware.HotBar : Nettoyer et sauvegarder	G:\98.exe -> Adware.WinAD : Nettoyer et sauvegarder	G:	emp\180SAInstaller.exe/clientax.dll -> Adware.180Solutions : Nettoyer et sauvegarder	G:	emp\180SAInstaller.exe/clientax.dll -> Adware.180Solutions : Nettoyer et sauvegarder	G:	emp\MediaGateway.exe -> Adware.WinAD : Nettoyer et sauvegarder::Fin du rapportLogfile of HijackThis v1.99.1Scan saved at 15:49:02, on 22/02/2006Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32undll32.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXEC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\WINDOWS\system32\NOTEPAD.EXEC:\Program Files\ewido anti-malware\SecuritySuite.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\WinRAR\WinRAR.exeC:\DOCUME~1	iboneur\LOCALS~1\Temp\Rar$EX00.172\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLLO3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dllO4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimizeO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exeO8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXTO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXEO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - Winlogon Notify: SideBySide - C:\WINDOWS\system32\q6680gjue6o80.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exeO23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

tiboneur · Answer

bonjour
je t'envoie déjà ceci,pour le scan anti virus en ligne,je le ferais plus tard,il l'estime à 4h et ça n'arrête pas d'augmenter
y a qqchose qui me ralentit le pc...

+ Résultats du scan:

[3312] C:\WINDOWS\system32\guard.tmp -> Adware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\guard.tmp -> Adware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\__delete_on_reboot__guard.tmp -> Adware.Look2Me : Nettoyer et sauvegarder

::Fin du rapport

Logfile of HijackThis v1.99.1
Scan saved at 18:16:51, on 23/02/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\tiboneur\LOCALS~1\Temp\Rar$EX01.766\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: policies - C:\WINDOWS\system32\ir66l5js1.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

A++

tiboneur · Answer

BitDefender Online Scanner

Scan report generated at: Thu, Feb 23, 2006 - 19:49:02

Scan path: A:\;C:\;D:\;E:\;G:\;

Statistics

Time
01:21:49

Files
285928

Folders
5242

Boot Sectors
4

Archives
5161

Packed Files
21596

Results

Identified Viruses
2

Infected Files
21

Suspect Files
4

Warnings
0

Disinfected
0

Deleted Files
24

Engines Info

Virus Definitions
274496

Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins
13

Archive plugins
39

Unpack plugins
4

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0094651.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0094651.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0094879.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0094879.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095040.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095040.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095070.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095070.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095117.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095117.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095118.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095118.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095738.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0095738.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0096073.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0096073.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0102180.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0102180.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105991.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105991.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105995.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105995.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105996.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP39\A0105996.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108505.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108505.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108533.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108533.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108909.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108909.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108910.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108910.dll
Deleted

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108916.dll
Detected with: Adware.Dinky.A.Trojan

C:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0108916.dll
Deleted

C:\WINDOWS\system32\guard.tmp
Detected with: Adware.Dinky.A.Trojan

C:\WINDOWS\system32\guard.tmp
Deleted

C:\WINDOWS\system32\__delete_on_reboot__mrastmib.dll
Detected with: Adware.Dinky.A.Trojan

C:\WINDOWS\system32\__delete_on_reboot__mrastmib.dll
Disinfection failed

C:\WINDOWS\system32\__delete_on_reboot__mrastmib.dll
Delete failed

G:\WINDOWS\system32\bla.txt
Suspected of: Backdoor.BotGet.FtpB.Gen

G:\WINDOWS\system32\bla.txt
Disinfection failed

G:\WINDOWS\system32\bla.txt
Deleted

G:\WINDOWS\system32\prxz.exe
Infected with: Backdoor.PoeBot.B

G:\WINDOWS\system32\prxz.exe
Disinfection failed

G:\WINDOWS\system32\prxz.exe
Deleted

G:\WINDOWS\EPISMF00.SWB
Suspected of: Exploit.Win32.MS06-005.Gen

G:\WINDOWS\EPISMF00.SWB
Disinfection failed

G:\WINDOWS\EPISMF00.SWB
Deleted

G:\System Volume Information\_restore{E4085079-3745-40C9-92CD-E13B6657FCC5}\RP106\A0067720.SWB
Suspected of: Exploit.Win32.MS06-005.Gen

G:\System Volume Information\_restore{E4085079-3745-40C9-92CD-E13B6657FCC5}\RP106\A0067720.SWB
Disinfection failed

G:\System Volume Information\_restore{E4085079-3745-40C9-92CD-E13B6657FCC5}\RP106\A0067720.SWB
Deleted

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109243.exe
Infected with: Backdoor.PoeBot.B

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109243.exe
Disinfection failed

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109243.exe
Deleted

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109253.SWB
Suspected of: Exploit.Win32.MS06-005.Gen

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109253.SWB
Disinfection failed

G:\System Volume Information\_restore{6280A928-2430-4E20-A9E8-3655C065660F}\RP40\A0109253.SWB
Deleted

Logfile of HijackThis v1.99.1
Scan saved at 20:23:36, on 23/02/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~1\bin\ImNotfy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\tiboneur\LOCALS~1\Temp\Rar$EX00.875\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Setup - C:\WINDOWS\system32\fp4u03h9e.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

j'ai kaspersky anti-hacker c'est considéré comme un pare feu?

tiboneur · Answer

BonjourToujours ces pages de pub qui s'ouvrent.Oui apparemment avec l'anti-hacker,je peux interdire des programmes.

tiboneur · Answer

En regardant quelques sujets,étant infecté par look2meJe viens de passer l2fmx + mise à jour de windowsTout est calme...Pourvu que ça dureMerci à toi!

tiboneur · Answer

ah oui merci...et merci pour tout!

boulepate · Answer

Derien a++;-)

Pages intempestives

8 réponses

Discussions similaires

Newsletters