Kaspersky bug troo et spybot a un probleme

joker0 Messages postés 46 Statut Membre -  
joker0 Messages postés 46 Statut Membre -
bnsoi
jai un probleme que jai expliqué dans ce forum

https://forums.commentcamarche.net/forum/affich-2183306-kaspersky-deconne-spybot-a-un-prob-pop-up

Et on ma conseillé de venir ici avec mon rapport hijackthis car mon kaspersky bug de trop mais je vous consielle d'aller sur le forum https://forums.commentcamarche.net/forum/affich-2183306-kaspersky-deconne-spybot-a-un-prob-pop-up

voila ce que me donne hijackthis : bonne lecture !

Logfile of HijackThis v1.99.1
Scan saved at 23:26:22, on 10/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.uzy
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Clean-Up Pro] C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.Exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Popup Ad Stopper.lnk = C:\Program Files\popupads\pas.exe
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
O8 - Extra context menu item: Tous Télécharger par ReGet Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_All.htm
O8 - Extra context menu item: Télécharger avec Re&Get Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_Link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Pop up Blocker Pro - {A186CB8C-EE00-4F15-9AEA-0662BC028133} - C:\Program Files\Pop up Blocker Pro\pdie.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: Shell Extensions - C:\WINDOWS\system32\kt8ml7l11.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Ocean FTP Server (CODE_OCEAN_OCEANFTPSERVER_SERVICE) - Code Ocean - C:\Program Files\Code Ocean\Ocean FTP Server\Ocean FTP Server.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

15 réponses

  1. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut ;-)

    Pyton a très bien fait de te re-orienté ici, tu est infecté par look2me au minimum ...

    #Phase 1 :
    - Quitter le net, le navigateur, et toutes autres fenêtres d'applications ;
    - Dézipper l2mfix.exe sur le bureau ;
    - Dans le dossier du programme, double-cliquer sur l2mfix.bat ;
    - Choisir OPTION 1 (Run find log) et valider par la touche [Entrée] ;
    => Un rapport sera généré dans le Bloc-notes, se reconnecter pour le poster au forum.

    ++

    ***Le deuxieme mot le plus important apres Aimer, c'est Aider! ...***
    0
  2. joker0 Messages postés 46 Statut Membre
     
    salut green day tu peux me dire ou je peux trouver l2mfix.bat et
    jai trouve ca sur le net http://www.pchell.com/support/look2me.shtml cest bon ??
    0
    1. Utilisateur anonyme
       
      Salut,

      Télécharge l2mfix ici:
      http://www.downloads.subratam.org/l2mfix.exe
      0
  3. joker0 Messages postés 46 Statut Membre
     
    voila le rapport que le programe me la donné

    L2MFIX find log 032106
    These are the registry keys present
    **********************************************************************************
    Winlogon/notify:
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    "Asynchronous"=dword:00000000
    "Impersonate"=dword:00000000
    "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
    6c,00,00,00
    "Logoff"="ChainWlxLogoffEvent"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    "Asynchronous"=dword:00000000
    "Impersonate"=dword:00000000
    "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
    6c,00,6c,00,00,00
    "Logoff"="CryptnetWlxLogoffEvent"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    "DLLName"="cscdll.dll"
    "Logon"="WinlogonLogonEvent"
    "Logoff"="WinlogonLogoffEvent"
    "ScreenSaver"="WinlogonScreenSaverEvent"
    "Startup"="WinlogonStartupEvent"
    "Shutdown"="WinlogonShutdownEvent"
    "StartShell"="WinlogonStartShellEvent"
    "Impersonate"=dword:00000000
    "Asynchronous"=dword:00000001

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Explorer]
    "Asynchronous"=dword:00000000
    "DllName"="C:\\WINDOWS\\system32\\gp8ul3l91.dll"
    "Impersonate"=dword:00000000
    "Logon"="WinLogon"
    "Logoff"="WinLogoff"
    "Shutdown"="WinShutdown"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    "DLLName"="wlnotify.dll"
    "Logon"="SCardStartCertProp"
    "Logoff"="SCardStopCertProp"
    "Lock"="SCardSuspendCertProp"
    "Unlock"="SCardResumeCertProp"
    "Enabled"=dword:00000001
    "Impersonate"=dword:00000001
    "Asynchronous"=dword:00000001

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    "Asynchronous"=dword:00000000
    "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
    6c,00,6c,00,00,00
    "Impersonate"=dword:00000000
    "StartShell"="SchedStartShell"
    "Logoff"="SchedEventLogOff"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    "Logoff"="WLEventLogoff"
    "Impersonate"=dword:00000000
    "Asynchronous"=dword:00000001
    "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
    6c,00,6c,00,00,00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    "DLLName"="WlNotify.dll"
    "Lock"="SensLockEvent"
    "Logon"="SensLogonEvent"
    "Logoff"="SensLogoffEvent"
    "Safe"=dword:00000001
    "MaxWait"=dword:00000258
    "StartScreenSaver"="SensStartScreenSaverEvent"
    "StopScreenSaver"="SensStopScreenSaverEvent"
    "Startup"="SensStartupEvent"
    "Shutdown"="SensShutdownEvent"
    "StartShell"="SensStartShellEvent"
    "PostShell"="SensPostShellEvent"
    "Disconnect"="SensDisconnectEvent"
    "Reconnect"="SensReconnectEvent"
    "Unlock"="SensUnlockEvent"
    "Impersonate"=dword:00000001
    "Asynchronous"=dword:00000001

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    "Asynchronous"=dword:00000000
    "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
    6c,00,6c,00,00,00
    "Impersonate"=dword:00000000
    "Logoff"="TSEventLogoff"
    "Logon"="TSEventLogon"
    "PostShell"="TSEventPostShell"
    "Shutdown"="TSEventShutdown"
    "StartShell"="TSEventStartShell"
    "Startup"="TSEventStartup"
    "MaxWait"=dword:00000258
    "Reconnect"="TSEventReconnect"
    "Disconnect"="TSEventDisconnect"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    "DLLName"="wlnotify.dll"
    "Logon"="RegisterTicketExpiredNotificationEvent"
    "Logoff"="UnregisterTicketExpiredNotificationEvent"
    "Impersonate"=dword:00000001
    "Asynchronous"=dword:00000001

    **********************************************************************************
    useragent:
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
    "{5EA3B62C-8E61-7B60-9C60-C53E62522065}"=""

    **********************************************************************************
    Shell Extension key:
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
    "{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
    "{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
    "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
    "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
    "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
    "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
    "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
    "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
    "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
    "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
    "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
    "{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
    "{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
    "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
    "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
    "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
    "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
    "{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
    "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
    "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
    "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
    "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
    "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
    "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
    "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
    "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
    "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
    "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
    "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
    "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
    "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
    "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
    "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
    "{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
    "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
    "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
    "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
    "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
    "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
    "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
    "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
    "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
    "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults"
    "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
    "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
    "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
    "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
    "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
    "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
    "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
    "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
    "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
    "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
    "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Page de propri‚t‚s des versions pr‚c‚dentes"
    "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Versions pr‚c‚dentes"
    "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
    "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
    "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
    "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
    "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
    "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
    "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
    "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
    "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
    "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
    "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
    "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
    "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
    "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
    "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
    "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
    "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
    "{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
    "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
    "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
    "{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
    "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
    "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
    "{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
    "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
    "{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
    "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
    "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
    "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
    "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
    "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
    "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
    "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
    "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
    "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
    "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
    "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
    "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
    "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
    "{FF393560-C2A7-11CF-BFF4-444553540000}"="History"
    "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
    "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
    "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
    "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
    "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
    "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
    "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
    "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="The Internet"
    "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
    "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
    "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
    "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
    "{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
    "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
    "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
    "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
    "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
    "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
    "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
    "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
    "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
    "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
    "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
    "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
    "{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
    "{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
    "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
    "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
    "{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow"
    "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
    "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
    "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
    "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
    "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
    "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
    "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
    "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
    "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
    "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
    "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
    "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder"
    "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
    "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
    "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
    "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
    "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
    "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
    "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
    "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
    "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
    "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
    "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
    "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
    "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
    "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
    "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
    "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
    "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
    "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
    "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
    "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
    "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
    "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
    "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
    "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
    "{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
    "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
    "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
    "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
    "{D653647D-D607-4DF6-A5B8-48D2BA195F7B}"="BitDefender Antivirus v9"
    "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
    "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
    "{00020D75-0000-0000-C000-000000000046}"="Microsoft Office Outlook Desktop Icon Handler"
    "{0006F045-0000-0000-C000-000000000046}"="Microsoft Office Outlook Custom Icon Handler"
    "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
    "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache"
    "{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band"
    "{906b0e6e-61ce-11d3-8ee2-0060080a7242}"="QuickSFV Shell Extension"
    "{EBDF1F20-C829-11D1-8233-FF20AF3E97A9}"="TrojanHunter Menu Shell Extension"
    "{B8323370-FF27-11D2-97B6-204C4F4F5020}"="SmartFTP Shell Extension DLL"
    "{D9872D13-7651-4471-9EEE-F0A00218BEBB}"="Multiscan"
    "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
    "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
    "{43886CD5-6529-41c4-A707-7B3C92C05E68}"="IE Navigation Bar"
    "{3028902F-6374-48b2-8DC6-9725E775B926}"="IE AutoComplete"
    "{4B78D326-D922-44f9-AF2A-07805C2A3560}"="IE Menu Band"
    "{6CF48EF8-44CD-45d2-8832-A16EA016311B}"="IE IShellFolderBand"
    "{F2CF5485-4E02-4f68-819C-B92DE9277049}"="&Links"
    "{1C1EDB47-CE22-4bbb-B608-77B48F83C823}"="IE Fade Task"
    "{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}"="IE Tracking Shell Menu"
    "{44C76ECD-F7FA-411c-9929-1B77BA77F524}"="IE Menu Site"
    "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
    "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
    "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
    "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
    "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
    "{e57ce731-33e8-4c51-8354-bb4de9d215d1}"="P‚riph‚riques Plug and Play universels"
    "{634DB63B-B423-400F-937C-9E6916F1DB65}"=""
    "{965B9C27-8EAB-4258-8F06-2868273D4B95}"=""
    "{00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}"="TuneUp Shredder Shell Context Menu Extension"
    "{e82a2d71-5b2f-43a0-97b8-81be15854de8}"="ShellLink for Application References"
    "{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}"="Shell Icon Handler for Application References"
    "{02F84E94-4A3C-4574-AC56-8B9B0D6A8C62}"=""
    "{721A1B24-EC8B-4eda-9CCE-39720B9FA747}"="WipeExt"
    "{CD843585-CBE7-4D95-8E30-F3C51A7F9FCD}"=""
    "{B327765E-D724-4347-8B16-78AE18552FC3}"="NeroDigitalIconHandler"
    "{7F1CF152-04F8-453A-B34C-E609530A9DC8}"="NeroDigitalPropSheetHandler"

    **********************************************************************************
    HKEY ROOT CLASSIDS:
    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\CLSID\{965B9C27-8EAB-4258-8F06-2868273D4B95}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{965B9C27-8EAB-4258-8F06-2868273D4B95}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{965B9C27-8EAB-4258-8F06-2868273D4B95}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{965B9C27-8EAB-4258-8F06-2868273D4B95}\InprocServer32]
    "ThreadingModel"="Apartment"

    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\CLSID\{02F84E94-4A3C-4574-AC56-8B9B0D6A8C62}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{02F84E94-4A3C-4574-AC56-8B9B0D6A8C62}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{02F84E94-4A3C-4574-AC56-8B9B0D6A8C62}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{02F84E94-4A3C-4574-AC56-8B9B0D6A8C62}\InprocServer32]
    "ThreadingModel"="Apartment"
    @="C:\\WINDOWS\\system32\\guard.tmp"

    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\CLSID\{CD843585-CBE7-4D95-8E30-F3C51A7F9FCD}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{CD843585-CBE7-4D95-8E30-F3C51A7F9FCD}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{CD843585-CBE7-4D95-8E30-F3C51A7F9FCD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\CLSID\{CD843585-CBE7-4D95-8E30-F3C51A7F9FCD}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    **********************************************************************************
    Files Found are not all bad files:

    C:\WINDOWS\SYSTEM32\
    bassmod.dll Wed 5 Apr 2006 20:30:48 A.... 34 308 33,50 K
    bn.dll Sat 25 Feb 2006 21:00:12 A.... 30 0,03 K
    gp8ul3~1.dll Wed 12 Apr 2006 1:17:10 A.... 235 192 229,68 K
    kt6ul7~1.dll Wed 12 Apr 2006 7:40:42 ..S.R 235 192 229,68 K
    lap20n~1.dll Tue 11 Apr 2006 22:03:58 A.... 665 0,65 K
    legitc~1.dll Thu 2 Mar 2006 15:36:10 A.... 550 120 537,23 K
    msgplu~1.dll Tue 21 Mar 2006 12:59:02 A.... 58 952 57,57 K
    o248lc~1.dll Tue 11 Apr 2006 8:40:10 ..S.R 234 005 228,52 K
    qke3ki~1.dll Tue 11 Apr 2006 22:03:58 A.... 25 462 24,86 K
    sirenacm.dll Tue 24 Jan 2006 20:34:24 A.... 118 784 116,00 K
    suppdll.dll Fri 31 Mar 2006 20:33:56 A.... 53 248 52,00 K
    xkh1ud~1.dll Tue 11 Apr 2006 22:03:58 A.... 19 354 18,90 K

    12 items found: 12 files (2 H/S), 0 directories.
    Total of file sizes: 1 565 312 bytes 1,49 M
    Locate .tmp files:

    C:\WINDOWS\SYSTEM32\
    guard.tmp Wed 12 Apr 2006 11:05:28 ..S.R 235 192 229,68 K

    1 item found: 1 file (1 H/S), 0 directories.
    Total of file sizes: 235 192 bytes 229,68 K
    **********************************************************************************
    Directory Listing of system files:
    Le volume dans le lecteur C n'a pas de nom.
    Le num‚ro de s‚rie du volume est E828-6D46

    R‚pertoire de C:\WINDOWS\System32

    12/04/2006 11:05 235ÿ192 guard.tmp
    12/04/2006 07:40 235ÿ192 kt6ul7j91.dll
    11/04/2006 08:40 234ÿ005 o248lchu1f48.dll
    05/04/2006 12:56 <REP> dllcache
    13/03/2006 18:48 6ÿ144 Thumbs.db
    11/02/2006 08:26 <REP> Microsoft
    4 fichier(s) 710ÿ533 octets
    2 R‚p(s) 20ÿ983ÿ189ÿ504 octets libres
    0
    1. Utilisateur anonyme
       
      Relances l2mfix.bat et sélectionne l'option 2
      L'ordi va redémarrer automatiquement sinon fais le de toi même
      Recopie le rapport et colle le ici

      avec un nouveau rapport hijackthis

      A++
      0
  4. joker0 Messages postés 46 Statut Membre
     
    cest quoi cette embrouille j'ai rallumé mon ordi é jai vu une nouvell session de cree é elle a le meme non que l2mfix ???? cest quoi ca faut mespliké la je comprends pas

    ---------------------------------------------------------------------------
    Logfile of HijackThis v1.99.1
    Scan saved at 13:55:45, on 12/04/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\DU Meter\DUMeter.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\PROGRA~1\TWEAKM~1\TMTray.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.uzy
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\PROGRA~1\TWEAKM~1\LinkFox.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    F2 - REG:system.ini: UserInit=userinit.exe
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Clean-Up Pro] C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.Exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [TweakMASTER] "C:\PROGRA~1\TWEAKM~1\TMTray.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    O8 - Extra context menu item: Add to &LinkFox - res://C:\PROGRA~1\TWEAKM~1\TweakBHO.dll/IESCRIPT
    O8 - Extra context menu item: Tous Télécharger par ReGet Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_All.htm
    O8 - Extra context menu item: Télécharger avec Re&Get Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_Link.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Pop up Blocker Pro - {A186CB8C-EE00-4F15-9AEA-0662BC028133} - C:\Program Files\Pop up Blocker Pro\pdie.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\kt6ul7j91.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. joker0 Messages postés 46 Statut Membre
     
    eh mais pk jai que style windows classique dans apparence je comprends plus rien espliké moi la!
    0
  7. joker0 Messages postés 46 Statut Membre
     
    on + les fichiers ne marche toujours pas!
    0
  8. joker0 Messages postés 46 Statut Membre
     
    ah oui jai aussi oublié de vous dire que mon ordi ne s'eteint plus normalement demarrer >arret de l'orninateur ca safiche mais ca ne fait rien quand je met eteindre il faut que je leteint manuellemnt cest quoi ca pk tout cest niké???
    0
  9. joker0 Messages postés 46 Statut Membre
     
    boulepate62 mtn que mon ordi é bien chelou é kil é niké t plu la t ouuu é di moi pk ya la nouvell session administrateur de lordi é protegé ac un mo de pass???
    0
  10. joker0 Messages postés 46 Statut Membre
     
    L2mfix 032106
    Creating Account.
    Le compte existe d‚j….

    Vous obtiendrez une aide suppl‚mentaire en entrant NET HELPMSG 2224.

    Adding Administrative privleges.
    Checking for L2MFix account(0=no 1=yes):
    1
    Granting SeDebugPrivilege to L2MFIX ... successful
    Checking for L2MFix account(0=no 1=yes):
    0
    Zipping up files for submission:
    adding: dlls/en6sl1j71.dll (164 bytes security) (deflated 5%)
    adding: dlls/guard.tmp (164 bytes security) (deflated 5%)
    adding: dlls/ir0ol5d31.dll (164 bytes security) (deflated 5%)
    adding: dlls/kt6ul7j91.dll (164 bytes security) (deflated 5%)
    adding: dlls/mlwstr10.dll (164 bytes security) (deflated 5%)
    adding: dlls/o248lchu1f48.dll (164 bytes security) (deflated 4%)
    adding: backregs/notibac.reg (164 bytes security) (deflated 87%)
    adding: backregs/shell.reg (164 bytes security) (deflated 73%)

    je les refé en mode sans echec ca marche enfin ca marche pas s mé ya ca ki é aparu
    0
    1. Utilisateur anonyme
       
      Hey!

      J'passe pas spécialement ma vie ici tu sais ..

      redemarres en mdoe sans echec et vires le compte qui s'est crée, vires tou tce qui concerne L2mFIX puis remet un rapport hijackthis et explique tes problémes évitant le langage SMS.Merci
      0
  11. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut à vous

    'Lu Boule ;-)

    excuse moi Jocker, hier j'ai omie de te coller le line avec la procedure ...

    Merci Boule pour ton intervention :-)

    ++

    ***Le deuxieme mot le plus important apres Aimer, c'est Aider! ...***
    0
    1. Utilisateur anonyme
       
      Coucou Green Day :-p

      de rien même si apparament ça a foirer quelque part lol :-/
      0
  12. joker0 Messages postés 46 Statut Membre
     
    dsl j'ai angoissé lool parceque cest mon ptit bijou cette ordi lool donc
    le nouvel rapport de hijackthis en mode sans echec :
    Logfile of HijackThis v1.99.1
    Scan saved at 21:36:38, on 12/04/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: 66.249.85.99 www.google.fr
    O1 - Hosts: 193.19.219.216 www.commentcamarche.net
    O2 - BHO: TweakMASTER PRO Component - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - C:\PROGRA~1\TWEAKM~1\TweakBHO.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Clean-Up Pro] C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.Exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [TweakMASTER] "C:\PROGRA~1\TWEAKM~1\TMTray.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
    O4 - HKCU\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe
    O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Pop up Blocker Pro - {A186CB8C-EE00-4F15-9AEA-0662BC028133} - C:\Program Files\Pop up Blocker Pro\pdie.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\kt6ul7j91.dll (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

    et voici le rapport en mode normal :

    Logfile of HijackThis v1.99.1
    Scan saved at 21:39:23, on 12/04/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\DU Meter\DUMeter.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\PROGRA~1\TWEAKM~1\TMTray.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.uzy
    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: 66.249.85.99 www.google.fr
    O1 - Hosts: 193.19.219.216 www.commentcamarche.net
    O2 - BHO: TweakMASTER PRO Component - {7DAAC7DE-9EF0-4FF0-BFA5-AFF3E899054C} - C:\PROGRA~1\TWEAKM~1\TweakBHO.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [Windows Clean-Up Pro] C:\PROGRA~1\3BSOFT~1\WINDOW~1\Windows Clean-Up Pro.Exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [TweakMASTER] "C:\PROGRA~1\TWEAKM~1\TMTray.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    O8 - Extra context menu item: Add to &LinkFox - res://C:\PROGRA~1\TWEAKM~1\TweakBHO.dll/IESCRIPT
    O8 - Extra context menu item: Tous Télécharger par ReGet Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_All.htm
    O8 - Extra context menu item: Télécharger avec Re&Get Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_Link.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Pop up Blocker Pro - {A186CB8C-EE00-4F15-9AEA-0662BC028133} - C:\Program Files\Pop up Blocker Pro\pdie.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - AppInit_DLLs: MsgPlusLoader.dll
    O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\kt6ul7j91.dll (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
    0
  13. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

    O1 - Hosts: 66.249.85.99 www.google.fr
    O1 - Hosts: 193.19.219.216 www.commentcamarche.net

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab

    O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\kt6ul7j91.dll (file missing)

    ensuite :

    https://www.commentcamarche.net/faq/2490-supprimer-les-adwares-publicites-intempestives-pop-up-etc

    les rapports du 1) et 2) stp

    ++

    ***Le deuxieme mot le plus important apres Aimer, c'est Aider! ...***
    0
  14. joker0 Messages postés 46 Statut Membre
     
    voila le premiere rapport

    ---------------------------------------------------------
    ewido anti-malware - Rapport de scan
    ---------------------------------------------------------

    + Créé le: 12:52:31, 13/04/2006
    + Somme de contrôle: 17D6C078

    + Résultats du scan:

    HKU\S-1-5-21-484763869-1979792683-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6001CDF7-6F45-471B-A203-0225615E35A7} -> Adware.Generic : Nettoyer et sauvegarder
    :mozilla.8:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
    :mozilla.9:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
    :mozilla.10:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
    :mozilla.11:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
    :mozilla.12:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
    :mozilla.18:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Hotlog : Nettoyer et sauvegarder
    :mozilla.19:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Spylog : Nettoyer et sauvegarder
    :mozilla.20:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Yadro : Nettoyer et sauvegarder
    :mozilla.26:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder
    :mozilla.28:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
    :mozilla.47:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
    :mozilla.48:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
    :mozilla.49:C:\Documents and Settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\t32r68yf.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@hotlog[1].txt -> TrackingCookie.Hotlog : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@spylog[1].txt -> TrackingCookie.Spylog : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@wreport.weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Cookies\utilisateur@yadro[2].txt -> TrackingCookie.Yadro : Nettoyer et sauvegarder
    C:\Documents and Settings\Utilisateur\Local Settings\Temporary Internet Files\Content.IE5\G96N4TAN\get_68841_ReGet.Deluxe.4.2.build.264EXE_crack[1].htm -> Downloader.IstBar.u : Nettoyer et sauvegarder
    C:\Program Files\AGSeydsApp\AGSeyApp.exe -> Not-A-Virus.Monitor.Win32.GoldenEye.401 : Nettoyer et sauvegarder
    C:\Program Files\AGSeydsApp\KBHOOK.DLL -> Not-A-Virus.Monitor.Win32.Hooker.d : Nettoyer et sauvegarder
    C:\Program Files\Cain\Abel.dll -> Not-A-Virus.PSWTool.Win32.Cain.f : Nettoyer et sauvegarder
    C:\Program Files\Cain\Abel.exe -> Not-A-Virus.PSWTool.Win32.Cain.e : Nettoyer et sauvegarder
    C:\Program Files\NewDotNet -> Adware.NewDotNet : Nettoyer et sauvegarder
    C:\Program Files\NewDotNet\newdotnet7_22.mym -> Adware.NewDotNet : Nettoyer et sauvegarder
    C:\Program Files\whInstall -> Adware.Webhancer : Nettoyer et sauvegarder
    C:\Program Files\whInstall\license.txt -> Adware.Webhancer : Nettoyer et sauvegarder
    C:\Program Files\whInstall\readme.txt -> Adware.Webhancer : Nettoyer et sauvegarder
    C:\Program Files\whInstall\whAgent.ini -> Adware.Webhancer : Nettoyer et sauvegarder
    C:\WINDOWS\Temp\Cookies\utilisateur@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyer et sauvegarder
    C:\WINDOWS\Temp\Cookies\utilisateur@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyer et sauvegarder
    C:\WINDOWS\Temp\Cookies\utilisateur@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyer et sauvegarder
    C:\WINDOWS\Temp\Cookies\utilisateur@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder

    ::Fin du rapport
    0
  15. joker0 Messages postés 46 Statut Membre
     
    et voila le deuxieme rapport de bitdefender ke jai telecharger
    //-----------------------------------------------------------------
    //
    // Product: BitDefender 9 Professional Plus
    // Version: 9.5
    //
    // Created on: 14/04/2006 00:51:30
    //
    //-----------------------------------------------------------------

    Virus Statistics

    Scan path : C:\
    Folders : 4137
    Files : 226837
    Archives : 2902
    Packed files : 21394
    Identified viruses : 17
    Infected files : 21
    Warnings : 0
    Suspect files : 0
    Disinfected files : 0
    Deleted files : 1
    Copied files : 0
    Moved files : 0
    Renamed files : 0
    I/O errors : 32
    Scan time : 00:54:53
    Scan speed (files/sec) : 68

    Spyware Statistics

    Memory processes scanned : 35
    Memory processes infected : 0
    Registry keys scanned : 1220
    Registry keys infected : 1
    Cookies scanned : 5
    Cookies infected : 0
    Spyware files infected : 0
    Spyware threats detected : 1

    Virus definitions : 370850
    Scan plugins : 15
    Archive plugins : 42
    Unpack plugins : 4
    Mail plugins : 6
    System plugins : 5

    Virus scan options

    Detection
    [X] Scan boot sectors
    [X] Scan archives
    [X] Scan packed files
    [X] Scan email

    File mask
    [ ] Programs
    [X] All files
    [ ] User defined extensions:
    [ ] Exclude extensions: ;

    Action

    Infected objects
    [ ] Ignore
    [X] Disinfect
    [ ] Delete
    [ ] Copy to quarantine
    [ ] Move to quarantine
    [ ] Rename
    [ ] Prompt user

    Second action
    [ ] Ignore
    [ ] Delete
    [ ] Copy to quarantine
    [X] Move to quarantine
    [ ] Rename
    [ ] Prompt user

    Virus scan options
    [X] Enable warnings
    [X] Enable heuristics
    [ ] Show all files in log
    [X] Report file: C:\Program Files\Softwin\BitDefender9\Logs\vscan_1144968690.log

    Spyware scan options

    [X] Memory Processes
    [X] Registry keys
    [X] Cookies

    Summary:

    <System>=>HKEY_CLASSES_ROOT\CLSID\{7B87A1E1-481A-47A5-B58F-BB1430DCC930} Detected: Eventlog
    <System>=>HKEY_CLASSES_ROOT\CLSID\{7B87A1E1-481A-47A5-B58F-BB1430DCC930} Deleted
    <System> Update failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/brutus-aet2/BrutusA2.exe Detected: Application.PWCrack.Brutus.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/brutus-aet2/BrutusA2.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Compiled SNID Server.zip=>Compiled SNID Server/COMPILED.exe Infected: Trojan.MultiDrop.Generic
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Compiled SNID Server.zip=>Compiled SNID Server/COMPILED.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Compiled SNID Server.zip=>Compiled SNID Server/COMPILED.exe=>(Embedded EXE o) Infected: Backdoor.SnidX2.B
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Controller 1.08.zip=>Net Controller 1.08/NetCtrlr.exe Infected: Backdoor.NetController.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Controller 1.08.zip=>Net Controller 1.08/NetCtrlr.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack-s/Net Controller 1.08.zip=>Net Controller 1.08/NetSrvr.exe Infected: Backdoor.NetController.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Metropolitan 1.04/NetMetro.exe Infected: Backdoor.NetMetropolitan.1.B
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Metropolitan 1.04/NetMetro.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Metropolitan 1.04/NMS.exe Infected: Backdoor.NetMetropolitan.1.B
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Raider.zip=>Net Raider/netclnt.exe Infected: Backdoor.NetRaider.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Raider.zip=>Net Raider/netclnt.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Raider.zip=>Net Raider/netserv.exe Infected: Backdoor.Netraider
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Net Raider.zip=>Net Raider/netserv.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Netbus 2 PRO Picture Trojans.zip=>Netbus 2 PRO Picture Trojans/Mypicture.exe Infected: Trojan.Win32.TrojanRunner.C
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Netbus 2 PRO Picture Trojans.zip=>Netbus 2 PRO Picture Trojans/Mypicture.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Netbus1.70 Picture Trojans 2.zip=>Netbus1.70 Picture Trojans 2/mypic5.exe Infected: Trojan.Win32.TrojanRunner.C
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Netbus1.70 Picture Trojans 2.zip=>Netbus1.70 Picture Trojans 2/mypic5.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/NetSphere.zip=>NetSphere/NetSphereClient.exe Infected: Backdoor.NetSphere.1.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/NetSphere.zip=>NetSphere/NetSphereClient.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/NetSphere.zip=>NetSphere/NetSphereServer.exe Infected: Backdoor.NetSphere.1.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Sprut.zip=>Sprut/Sprut.exe Infected: Trojan.Ddos.Sprut.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/Sprut.zip=>Sprut/Sprut.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/tosser.zip=>tosser/Tosser.exe Infected: Flooder.ICMP.Tosser
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- - Team Nemesis/tosser.zip=>tosser/Tosser.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hotmail Account Freezer- s/Hotmail Account Freezer.exe Infected: Virtool.Homac.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hotmail Account Freezer- s/Hotmail Account Freezer.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Microsoft macro virs generator(Virs Yapar Tehlikeli)- s.zip=>Microsoft macro virs generator(Virs Yapar Tehlikeli)- s/mmvg-1.exe Infected: Virtool.MVG.A
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Microsoft macro virs generator(Virs Yapar Tehlikeli)- s.zip=>Microsoft macro virs generator(Virs Yapar Tehlikeli)- s/mmvg-1.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/sub7legends-s.zip=>sub7legends-s/editserver.exe Infected: Backdoor.Subseven.2.1.5
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/sub7legends-s.zip=>sub7legends-s/editserver.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/sub7legends-s.zip=>sub7legends-s/server.exe Disinfection failed
    C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/sub7legends-s.zip=>sub7legends-s/SubSeven.exe Infected: Backdoor.Subseven.2.1.5
    C:\Documents and Settings\Utilisateur\Bureau\l2mfix.exe=>(ZIP Sfx o)=>l2mfix/Process.exe Detected: Spyware.Processor.A
    C:\Documents and Settings\Utilisateur\Bureau\l2mfix.exe=>(ZIP Sfx o)=>l2mfix/Process.exe Disinfection failed
    0
    1. Utilisateur anonyme
       
      Salut,

      alors on joue l'aapprenti HACKER !!!!! et après on vient demander de l'aide !!!!!

      Certains passent leurs temps pour aider d'autres toi tu veux pourrir les ordis des autres :@!#/

      Bah pour moi debrouille toi ! Désolé Green Day j'aide pas les petits qui s'amuse a vouloir PIRATER d'autre personnes !!!!

      tu merites que l'ont fermes ton post !

      C:\Documents and Settings\Utilisateur\Bureau\hocinou\Haking\HTS2006.exe=>(ZIP Sfx o)=>AutoPlay/Docs/Hacking pack- s/brutus-aet2/BrutusA2.exe

      Tu me fera pas dire le contraire Brutus est bien connu pour forcer puis le nom de ton dossier laisse songeur !!

      Ciaoo ..

      PS: apprends à avoir un Pc propre avant de vouloir faire le mâlin
      0
  16. joker0 Messages postés 46 Statut Membre
     
    deja ce prog cest mon voisin qui ma dit si je pouvais lui garder parcequ'il reformaté et si j'ataits si fort comme hacker je pense que je trouverai des solution moi meme non ?? de toute facon dite moi d'avance si vous voulez maider on plus jai encore de plus gros probleme que la desinstalation de kaspersky que jai effectuer
    on telechargeant lle logiciel kasperksy est en le reinstallant et puis desinstaller mais la jai de serieux probleme donc dites moi juste parceque jai des prog douteux sur mon pc qu'il faut me penalisé
    0