remove tool bar Fermé

Question

bonjourje voudrais sa voir comment supprimer remove toolbarde plus je n'arrive plus a trouver mon pilote de lecteur dvd rom c'est un compaqet windows me dit erreur code 37merci d'avance

Utilisateur anonyme · Answer

Salut,

télécharges hijackthis:
http://www.hijackthis.de/downloads/hijackthis_199.zip

Installe le dans son propre dossier:
-cliques droit sur le bureau, nouveau dossier, installes-le dedans.
Lance le, cliques sur "do a system scan and save logfile"
Puis copies et colles le rapport ici.

martin · Answer

merci d'avanceLogfile of HijackThis v1.99.1Scan saved at 13:48:30, on 16/03/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\Program Files\Lexmark X74-X75\lxbbbmgr.exeC:\Program Files\Lexmark X74-X75\lxbbbmon.exeC:\Program Files\Fichiers communs\CMEII\CMESys.exeC:\Program Files\Extrafilm FotoFacil\Agent.exeC:\WINDOWS\system32undll32.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Microsoft Office\Office\OSA.EXEC:\Program Files\Microsoft Office\Office\FINDFAST.EXEC:\Program Files\Fichiers communs\GMT\GMT.exeC:\WINDOWS\system32
tvdm.exeC:\Program Files\acer\eRecovery\Monitor.exeJ:\BSINSTALL.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Mes documents\logiciel\BSINSTALL.exeC:\Program Files\BearShare\BearShare.exeC:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Mes documents\divers\logiciels\maxthon11039\Maxthon.exeC:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Nouveau dossier\hijackthis_199\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.chello.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.comR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.1.1/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\system32\qeqot.dllO2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet
ewdotnet7_22.dllO3 - Toolbar: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\system32\qeqot.dllO4 - HKLM\..\Run: [LaunchApp] AlaunchO4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNCO4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNCO4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMENameO4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exeO4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgentO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [CMESys] "C:\Program Files\Fichiers communs\CMEII\CMESys.exe"O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\Extrafilm FotoFacil\Agent.exe"O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -sO4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pauseO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe"O4 - Startup: PowerReg Scheduler.exeO4 - Startup: Pense-bête.lnk = C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXEO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXEO4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXEO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exeO8 - Extra context menu item: Ajouter au tueur de pub - C:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Mes documents\divers\logiciels\maxthon11039\config/blacklist.htmO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1DC92EF5-F2E7-41FA-A3E1-548CE186B66F}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{5DD08AA2-095D-4397-9679-E9C9B263B904}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{701BCDF3-6ED1-473C-9DAA-859CB7C9F689}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{7651FF9A-406B-49D6-B51D-A2DF91739743}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{BE7241EF-E218-424C-8A7C-51011F7CA196}: NameServer = 85.255.113.114,85.255.112.60O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

martin · Answer

rebonjourvoici les 2 rapportsseulement je n'arrive pas supprimer le ficier dll de new donetmerci d'avance--------------------------------------------------------- ewido anti-malware - Rapport des processus--------------------------------------------------------- + Créé le:		10:39:22, 17/03/2006 + Somme de contrôle:	67A24B3B       0: System Process       4: System Process     108: C:\Program Files\ewido anti-malware\ewidoguard.exe     216: C:\Program Files\Microsoft Office\Office\OSA.EXE     232: C:\Program Files\Microsoft Office\Office\FINDFAST.EXE     332: C:\WINDOWS\system32\svchost.exe     368: C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe     424: \SystemRoot\System32\smss.exe     488: \??\C:\WINDOWS\system32\csrss.exe     516: \??\C:\WINDOWS\system32\winlogon.exe     560: C:\WINDOWS\system32\services.exe     572: C:\WINDOWS\system32\lsass.exe     576: C:\WINDOWS\system32
tvdm.exe     764: C:\WINDOWS\system32\svchost.exe     812: C:\WINDOWS\system32\svchost.exe     900: C:\WINDOWS\System32\svchost.exe    1008: C:\WINDOWS\system32\svchost.exe    1084: C:\WINDOWS\system32\svchost.exe    1244: C:\WINDOWS\system32\LEXBCES.EXE    1316: C:\WINDOWS\system32\spoolsv.exe    1328: C:\WINDOWS\system32\LEXPPS.EXE    1460: C:\WINDOWS\Explorer.EXE    1552: C:\Program Files\ewido anti-malware\securitysuite.exe    1692: C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe    1716: C:\WINDOWS\SOUNDMAN.EXE    1728: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe    1804: C:\Program Files\acer\eRecovery\Monitor.exe    1860: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe    1876: C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe    1884: C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe    1928: C:\Program Files\Extrafilm FotoFacil\Agent.exe    1936: C:\Program Files\Lexmark X74-X75\lxbbbmon.exe    1944: C:\Program Files\ewido anti-malware\ewidoctrl.exe    1956: C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe    1964: C:\WINDOWS\system32undll32.exe    2488: C:\WINDOWS\System32\alg.exeLogfile of HijackThis v1.99.1Scan saved at 10:41:27, on 17/03/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Lexmark X74-X75\lxbbbmgr.exeC:\Program Files\Extrafilm FotoFacil\Agent.exeC:\Program Files\Lexmark X74-X75\lxbbbmon.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\WINDOWS\system32undll32.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\Microsoft Office\Office\OSA.EXEC:\Program Files\Microsoft Office\Office\FINDFAST.EXEC:\WINDOWS\system32\svchost.exeC:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exeC:\WINDOWS\system32
tvdm.exeC:\Program Files\acer\eRecovery\Monitor.exeC:\WINDOWS\System32\alg.exeC:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Nouveau dossier\hijackthis_199\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.chello.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.comR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.1.1/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\system32\qeqot.dll (file missing)O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet
ewdotnet7_22.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO3 - Toolbar: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\system32\qeqot.dll (file missing)O4 - HKLM\..\Run: [LaunchApp] AlaunchO4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNCO4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNCO4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMENameO4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exeO4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgentO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\Extrafilm FotoFacil\Agent.exe"O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -sO4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pauseO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe"O4 - Startup: PowerReg Scheduler.exeO4 - Startup: Pense-bête.lnk = C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXEO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXEO4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXEO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exeO8 - Extra context menu item: Ajouter au tueur de pub - C:\Documents and Settings\Marilyne.ACER-A7D3E14A69\Bureau\Mes documents\divers\logiciels\maxthon11039\config/blacklist.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO10 - Hijacked Internet access by New.NetO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1DC92EF5-F2E7-41FA-A3E1-548CE186B66F}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{5DD08AA2-095D-4397-9679-E9C9B263B904}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{701BCDF3-6ED1-473C-9DAA-859CB7C9F689}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{7651FF9A-406B-49D6-B51D-A2DF91739743}: NameServer = 85.255.113.114,85.255.112.60O17 - HKLM\System\CCS\Services\Tcpip\..\{BE7241EF-E218-424C-8A7C-51011F7CA196}: NameServer = 85.255.113.114,85.255.112.60O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

Remove tool bar

3 réponses

Discussions similaires