Besoin d'aide, à chaque démarrage de windows, une fenêtre s'ouvre : erreur de chargement de p2esocks_1049.dll
je ne sais pas vraiment quoi faire?
voilà les trois rapports :
---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------
+ Créé le: 01:14:56, 03/05/2006
+ Somme de contrôle: CC272485
+ Résultats du scan:
HKLM\SOFTWARE\Classes\CLSID\{2178F3FB-2560-458f-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignoré
HKLM\SOFTWARE\Classes\CLSID\{93CECBB2-6B1B-448D-91B9-72604EF70105} -> Adware.180Solutions : Ignoré
HKLM\SOFTWARE\Gator.com -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_gi -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_trickle -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_ts -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\dyn\GUS -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\Gator\stat -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\GInternet -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Gator.com\GInternet\Proxy -> Adware.Gator : Ignoré
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{93CECBB2-6B1B-448D-91B9-72604EF70105} -> Adware.180Solutions : Ignoré
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignoré
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Ignoré
HKU\S-1-5-21-1275210071-1547161642-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93CECBB2-6B1B-448D-91B9-72604EF70105} -> Adware.180Solutions : Ignoré
HKU\S-1-5-21-1275210071-1547161642-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignoré
HKU\S-1-5-21-1275210071-1547161642-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21B4ACC4-8874-4AEC-AEAC-F567A249B4D4} -> Adware.ZangoSearch : Ignoré
HKU\S-1-5-21-1275210071-1547161642-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38} -> Adware.Generic : Ignoré
HKU\S-1-5-21-1275210071-1547161642-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{93CECBB2-6B1B-448D-91B9-72604EF70105} -> Adware.180Solutions : Ignoré
[440] VM_10001000 -> Adware.NaviPromo : Ignoré
[464] VM_010B1000 -> Adware.NaviPromo : Ignoré
[508] VM_10001000 -> Adware.NaviPromo : Ignoré
[520] VM_10001000 -> Adware.NaviPromo : Ignoré
[664] VM_10001000 -> Adware.NaviPromo : Ignoré
[680] VM_10001000 -> Adware.NaviPromo : Ignoré
[764] C:\Program Files\NewDotNet\newdotnet7_22.dll -> Adware.NewDotNet : Ignoré
[816] C:\Program Files\NewDotNet\newdotnet7_22.dll -> Adware.NewDotNet : Ignoré
[928] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Ignoré
[992] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Ignoré
[1068] VM_00B21000 -> Adware.NaviPromo : Ignoré
[1136] VM_10001000 -> Adware.NaviPromo : Ignoré
[1156] VM_10001000 -> Adware.NaviPromo : Ignoré
[1184] VM_00E71000 -> Adware.NaviPromo : Ignoré
[1192] VM_01161000 -> Adware.NaviPromo : Ignoré
[1380] C:\Program Files\NewDotNet\newdotnet7_22.dll -> Adware.NewDotNet : Ignoré
[1492] VM_10001000 -> Adware.NaviPromo : Ignoré
[1600] VM_00FD1000 -> Adware.NaviPromo : Ignoré
[1660] VM_10001000 -> Adware.NaviPromo : Ignoré
[1748] VM_00C91000 -> Adware.NaviPromo : Ignoré
[1796] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Ignoré
[168] VM_00E81000 -> Adware.NaviPromo : Ignoré
[180] VM_00F51000 -> Adware.NaviPromo : Ignoré
[156] VM_00EF1000 -> Adware.NaviPromo : Ignoré
[216] VM_00D01000 -> Adware.NaviPromo : Ignoré
[208] VM_00B91000 -> Adware.NaviPromo : Ignoré
[232] VM_01061000 -> Adware.NaviPromo : Ignoré
[244] VM_00F81000 -> Adware.NaviPromo : Ignoré
[368] VM_00E51000 -> Adware.NaviPromo : Ignoré
[272] VM_00AC1000 -> Adware.NaviPromo : Ignoré
[444] C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL -> Adware.NewDotNet : Ignoré
[524] VM_01381000 -> Adware.NaviPromo : Ignoré
[692] VM_01251000 -> Adware.NaviPromo : Ignoré
[908] VM_00A61000 -> Adware.NaviPromo : Ignoré
[1080] VM_009F1000 -> Adware.NaviPromo : Ignoré
[1064] C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL -> Adware.NewDotNet : Ignoré
[2168] VM_00B61000 -> Adware.NaviPromo : Ignoré
[2076] C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL -> Adware.NewDotNet : Ignoré
[3820] VM_00E51000 -> Adware.NaviPromo : Ignoré
[2276] VM_01BE1000 -> Adware.NaviPromo : Ignoré
[3740] VM_00931000 -> Adware.NaviPromo : Ignoré
[2372] C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL -> Adware.NewDotNet : Ignoré
[3380] C:\Program Files\NewDotNet\newdotnet7_22.dll -> Adware.NewDotNet : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@2o7[2].txt -> TrackingCookie.2o7 : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@advertising[1].txt -> TrackingCookie.Advertising : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@as1.falkag[1].txt -> TrackingCookie.Falkag : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@banner.clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@blackbox.weborama[2].txt -> TrackingCookie.Weborama : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@casinopays[1].txt -> TrackingCookie.Casinopays : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@casinotropez[1].txt -> TrackingCookie.Casinotropez : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@com[1].txt -> TrackingCookie.Com : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@counter2.hitslink[2].txt -> TrackingCookie.Hitslink : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@crbanner.casinopays[2].txt -> TrackingCookie.Casinopays : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@e-2dj6wfkocjczibp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@e-2dj6wfkyspczeho.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@e-2dj6wjkyqoczkfp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@e-2dj6wjloukc5cfp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@e-2dj6wjlychcjaao.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@edge.ru4[2].txt -> TrackingCookie.Ru4 : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@estat[1].txt -> TrackingCookie.Estat : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@hotlog[1].txt -> TrackingCookie.Hotlog : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@ivwbox[1].txt -> TrackingCookie.Ivwbox : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@media.fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@overture[1].txt -> TrackingCookie.Overture : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@questionmarket[2].txt -> TrackingCookie.Questionmarket : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@spylog[1].txt -> TrackingCookie.Spylog : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@trafficmp[1].txt -> TrackingCookie.Trafficmp : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@valueclick[1].txt -> TrackingCookie.Valueclick : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@web-stat[2].txt -> TrackingCookie.Web-stat : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@weborama[1].txt -> TrackingCookie.Weborama : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@wreport.weborama[1].txt -> TrackingCookie.Weborama : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@www.casinotropez[1].txt -> TrackingCookie.Casinotropez : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@www.etracker[2].txt -> TrackingCookie.Etracker : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@www.sidefind[2].txt -> TrackingCookie.Sidefind : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@ysbweb[1].txt -> TrackingCookie.Ysbweb : Ignoré
C:\Documents and Settings\Nicolas\Cookies\nicolas@zedo[1].txt -> TrackingCookie.Zedo : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\18014.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\Del45.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\Del6E.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\DelD4B.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\res107.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temp\res16.tmp -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temporary Internet Files\Content.IE5\0LY785QF\bridge-c24[1].cab/SAIX.dll -> Adware.180Solutions : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temporary Internet Files\Content.IE5\OTQBGTIR\ErrorSafeScannerInstallFR[1].cab/UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré
C:\Documents and Settings\Nicolas\Local Settings\Temporary Internet Files\Content.IE5\SHEJ0XI7\Setup[1].exe -> Adware.Zango : Ignoré
C:\Program Files\NewDotNet -> Adware.NewDotNet : Ignoré
C:\Program Files\NewDotNet\newdotnet7_22.dll -> Adware.NewDotNet : Ignoré
C:\Program Files\NewDotNet\readme.html -> Adware.NewDotNet : Ignoré
C:\Program Files\NewDotNet\uninstall6_38.exe -> Adware.NewDotNet : Ignoré
C:\Program Files\NewDotNet\uninstall7_22.exe -> Adware.NewDotNet : Ignoré
C:\Program Files\TheSearchAccelerator -> Adware.UCmore : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1019.dll -> Adware.Gator : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWA6PV_0001_N69M0303NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.g : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\HDPlugin1019.dll -> Adware.Gator : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UWA6PV_0001_N69M0303NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.g : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\HDPlugin1019.dll -> Adware.Gator : Ignoré
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UWA6PV_0001_N69M0303NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.g : Ignoré
C:\WINDOWS\Downloaded Program Files\HDPlugin1019.dll -> Adware.Gator : Ignoré
C:\WINDOWS\Downloaded Program Files\imloader.exe -> Not-A-Virus.Downloader.Win32.ImLoader.b : Ignoré
C:\WINDOWS\Downloaded Program Files\SAIX.dll -> Adware.180Solutions : Ignoré
C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré
C:\WINDOWS\Downloaded Program Files\UWA6PV_0001_N69M0303NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.g : Ignoré
C:\WINDOWS\NDNuninstall6_30.exe -> Adware.NewDotNet : Ignoré
C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Ignoré
C:\WINDOWS\NDNuninstall7_22.exe -> Adware.NewDotNet : Ignoré
C:\WINDOWS\system32\msplock32.dll -> Adware.NaviPromo : Ignoré
C:\WINDOWS\system32\sysiasvc32.dll -> Dialer.EGroup.u : Ignoré
C:\WINDOWS\system32\syswbsvc32.dll -> Dialer.InstantAccess.e : Ignoré
C:\WINDOWS\system32\__delete_on_reboot__msclock32.dll -> Adware.NaviPromo : Ignoré
C:\WINDOWS\system32\__delete_on_reboot__Runner.dll -> Adware.CASClient : Ignoré
::Fin du rapport
BitDefender Online Scanner
Scan report generated at: Wed, May 03, 2006 - 04:58:07
Scan path: A:\;C:\;D:\;E:\;Z:\;
Statistics
Time
03:31:48
Files
1347983
Folders
5412
Boot Sectors
4
Archives
35465
Packed Files
199145
Results
Identified Viruses
2
Infected Files
2
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
2
Engines Info
Virus Definitions
373085
Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)
Scan plugins
13
Archive plugins
39
Unpack plugins
4
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\System Volume Information\_restore{2580C8BA-8972-49ED-8FCC-AA83DCD1BFC2}\RP792\A0103327.dll
Detected with: Application.Adware.NewDotNet.B
C:\System Volume Information\_restore{2580C8BA-8972-49ED-8FCC-AA83DCD1BFC2}\RP792\A0103327.dll
Disinfection failed
C:\System Volume Information\_restore{2580C8BA-8972-49ED-8FCC-AA83DCD1BFC2}\RP792\A0103327.dll
Deleted
C:\System Volume Information\_restore{2580C8BA-8972-49ED-8FCC-AA83DCD1BFC2}\RP792\A0103369.EXE
Detected with: Application.Adware.NewDotNet.B.Dropper
C:\System Volume Information\_restore{2580C8BA-8972-49ED-8FCC-AA83DCD1BFC2}\RP792\A0103369.EXE
Deleted
Logfile of HijackThis v1.99.1
Scan saved at 11:16:38, on 03/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe
C:\WINDOWS\system32\GSICON.EXE
C:\WINDOWS\system32\dslagent.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\windows\system32\ndiqcybo.exe
C:\Program Files\Common Files\Companion Wizard\compwiz.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Nicolas\Mes documents\My downloads\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: CIEIntegrator Object - {2178F3FB-2560-458F-BDEE-631E2FE0DFE4} - C:\Program Files\WinAntiVirus Pro 2006\winpgi.dll
O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet7_22.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {82315A18-6CFB-44a7-BDFD-90E36537C252} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: IEFW Object - {B5141620-C2B2-4D95-9F0F-134D99C87AB0} - C:\Program Files\WinAntiVirus Pro 2006\iefwbho.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: 180search Toolbar - {93CECBB2-6B1B-448D-91B9-72604EF70105} - C:\Program Files\180search Assistant Programs\180search Toolbar\180ST.dll (file missing)
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\Minitel\Watch.exe
O4 - HKLM\..\Run: [PoPo Stop Message] C:\Documents and Settings\Nicolas\Mes documents\My downloads\PoPo Stop Message 3.0 - Désactiver les pubs envoyées par service d'affichage des messages sous Windows XP..exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [SynapseUpdate] C:\DOCUME~1\NICOLAS\MESDOC~1\Synapse Update.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [Jolhau] C:\Program Files\Lyjeevp\Biidh.exe
O4 - HKLM\..\Run: [ndiqcybo] c:\windows\system32\ndiqcybo.exe ndiqcybo
O4 - HKLM\..\Run: [CompanionWizard] "C:\Program Files\Common Files\Companion Wizard\compwiz.exe" /silent
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKCU\..\Run: [MediaDico] C:\Program Files\Micro Application\12 DICOS Indispensables\LanceMediaDICO12.exe Lancement
O4 - HKCU\..\Run: [EQBranch] "C:\Program Files\EQBranch\EQBranch.exe"
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1049.dll,InstantAccess
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Personnaliser - C:\Program Files\PROMT98\promtie4\options.htm
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Rechercher sur Internet - C:\Program Files\PROMT98\promtie4\search.htm
O8 - Extra context menu item: Traduire - C:\Program Files\PROMT98\promtie4\translat.htm
O8 - Extra context menu item: Traduire dans WebView - C:\Program Files\PROMT98\promtie4\webview.htm
O8 - Extra context menu item: Traduire la page - C:\Program Files\PROMT98\promtie4\page.htm
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by New.Net
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dll
O16 - DPF: {0E79192A-C52C-4260-920F-639AC2296203} -
https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) -
https://www.cult3d.com/
O16 - DPF: {39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} -
https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-18.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} -
https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://www.f5biz.com/dial/htm/WebInstall.dll
O16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} -
https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} -
https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/cab/WinAntiVirusPro2006FreeI...
O16 - DPF: {DECEAAA2-370A-49BB-9362-68C3A58DDC62} (SAIX) - http://static.zangocash.com/cab/Seekmo/ie/bridge-c24.cab?fd7767a287b2d2f76c0a95f8...
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winfixer.com/www/pages/scanner_fr/WinFixe...
O17 - HKLM\System\CCS\Services\Tcpip\..\{506F22B9-2AA4-400A-9D1E-166CF20B014D}: NameServer = 194.117.200.10 194.117.200.15
O20 - AppInit_DLLs: Runner.dll,Runner.dll,Runner.dll,Runner.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: Firewall service (FWSvc) - WinSoftware, Ltd. - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.e
Afficher la suite