Pc fou

tekk -  
bonjours mon pc est fous la page ineternet se ferme otomatiquement et windows media player aussi je vien de le formater il y a 3 semaine et deje il dérape et pourten jé un anti verus mise a jour symentec aidé moi s'il vous plait
Configuration: windows xp sp2

6 réponses

  1.  ^^Marie^^
    Salut,

    Autant repartir sur de bonnes bases ::::::

    Il est important d’effectuer la manip dans sa totalité.

    Télécharge et colle les 3 rapports :

    A - ad-aware version 1.06

    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo
    http://pageperso.aol.fr/balltrap34/adwseflash.zip

    B - spybot version 1.4

    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo d utilisation
    http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

    C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
    Télécharge ici :
    https://www.ccleaner.com/ccleaner/download
    Tutorial ici:
    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    D - Ewido (download)- gratuit même après 14 jours d’essai
    http://perso.wanadoo.fr/entraide-hijackthis/Ewido/
    Copie/COLLE le rapport généré sur ce forum
    Pour certaines versions de Windows antérieures à XP, Ewido peut ne pas être compatible
    Dans ce cas, il te faudra utiliser a-squared free et demander une clef pour son usage gratuit
    https://www.emsisoft.com/fr/

    E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
    https://assiste.com/404_La_page_demandee_n_existe_pas.php
    http://www.bitdefender.fr/scan8/ie.html
    Copie/COLLE le rapport entier

    F - Hijackthis - Outil de diagnostic et réparation
    lire démo
    http://pageperso.aol.fr/balltrap34/Hijenr.gif
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    Télécharge version française ici
    http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
    Copie/colle le rapport

    Bon courage

    A++
    0
    2. tekk Auteur
      voici les raport

      Ad-Aware SE Build 1.06r1
      Logfile Created on:mercredi 14 juin 2006 07:57:01
      Created with Ad-Aware SE Personal, free for private use.
      Using definitions file:SE1R111 08.06.2006
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      References detected during the scan:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      MRU List(TAC index:0):12 total references
      Tracking Cookie(TAC index:3):1 total references
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Ad-Aware SE Settings
      ===========================
      Set : Search for negligible risk entries
      Set : Safe mode (always request confirmation)
      Set : Scan active processes
      Set : Scan registry
      Set : Deep-scan registry
      Set : Scan my IE Favorites for banned URLs
      Set : Scan within archives
      Set : Scan my Hosts file

      Extended Ad-Aware SE Settings
      ===========================
      Set : Unload recognized processes & modules during scan
      Set : Scan registry for all users instead of current user only
      Set : Always try to unload modules before deletion
      Set : During removal, unload Explorer and IE if necessary
      Set : Let Windows remove files in use at next reboot
      Set : Delete quarantined objects after restoring
      Set : Include basic Ad-Aware settings in log file
      Set : Include additional Ad-Aware settings in log file
      Set : Include reference summary in log file
      Set : Include alternate data stream details in log file
      Set : Play sound at scan completion if scan locates critical objects

      14-06-2006 07:57:01 - Scan started. (Smart mode)

      Listing running processes
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      #:1 [smss.exe]
      FilePath : \SystemRoot\System32\
      ProcessID : 476
      ThreadCreationTime : 14-06-2006 05:44:29
      BasePriority : Normal

      #:2 [csrss.exe]
      FilePath : \??\C:\WINDOWS\system32\
      ProcessID : 700
      ThreadCreationTime : 14-06-2006 05:44:34
      BasePriority : Normal

      #:3 [winlogon.exe]
      FilePath : \??\C:\WINDOWS\system32\
      ProcessID : 724
      ThreadCreationTime : 14-06-2006 05:44:34
      BasePriority : High

      #:4 [services.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 768
      ThreadCreationTime : 14-06-2006 05:44:35
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Système d'exploitation Microsoft® Windows®
      CompanyName : Microsoft Corporation
      FileDescription : Applications Services et Contrôleur
      InternalName : services.exe
      LegalCopyright : © Microsoft Corporation. Tous droits réservés.
      OriginalFilename : services.exe

      #:5 [lsass.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 780
      ThreadCreationTime : 14-06-2006 05:44:35
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : LSA Shell (Export Version)
      InternalName : lsass.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : lsass.exe

      #:6 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 932
      ThreadCreationTime : 14-06-2006 05:44:36
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:7 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1012
      ThreadCreationTime : 14-06-2006 05:44:36
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:8 [svchost.exe]
      FilePath : C:\WINDOWS\System32\
      ProcessID : 1072
      ThreadCreationTime : 14-06-2006 05:44:36
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:9 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1140
      ThreadCreationTime : 14-06-2006 05:44:37
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:10 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1188
      ThreadCreationTime : 14-06-2006 05:44:37
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:11 [ccsetmgr.exe]
      FilePath : C:\Program Files\Fichiers communs\Symantec Shared\
      ProcessID : 1248
      ThreadCreationTime : 14-06-2006 05:44:37
      BasePriority : Normal
      FileVersion : 103.5.1.9
      ProductVersion : 103.5.1.9
      ProductName : Client and Host Security Platform
      CompanyName : Symantec Corporation
      FileDescription : Symantec Settings Manager Service
      InternalName : ccSetMgr
      LegalCopyright : Copyright (c) 2000-2005 Symantec Corporation. All rights reserved.
      OriginalFilename : ccSetMgr.exe

      #:12 [ccevtmgr.exe]
      FilePath : C:\Program Files\Fichiers communs\Symantec Shared\
      ProcessID : 1340
      ThreadCreationTime : 14-06-2006 05:44:38
      BasePriority : Normal
      FileVersion : 103.5.1.9
      ProductVersion : 103.5.1.9
      ProductName : Client and Host Security Platform
      CompanyName : Symantec Corporation
      FileDescription : Symantec Event Manager Service
      InternalName : ccEvtMgr
      LegalCopyright : Copyright (c) 2000-2005 Symantec Corporation. All rights reserved.
      OriginalFilename : ccEvtMgr.exe

      #:13 [spoolsv.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1644
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
      ProductVersion : 5.1.2600.2696
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Spooler SubSystem App
      InternalName : spoolsv.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : spoolsv.exe

      #:14 [explorer.exe]
      FilePath : C:\WINDOWS\
      ProcessID : 1652
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 6.00.2900.2180
      ProductName : Système d'exploitation Microsoft® Windows®
      CompanyName : Microsoft Corporation
      FileDescription : Explorateur Windows
      InternalName : explorer
      LegalCopyright : © Microsoft Corporation. Tous droits réservés.
      OriginalFilename : EXPLORER.EXE

      #:15 [mainserv.exe]
      FilePath : C:\Program Files\APC\APC PowerChute Personal Edition\
      ProcessID : 1776
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 1, 4, 0, 0
      ProductVersion : 1, 4, 0, 0
      ProductName : APC PowerChute Personal Edition
      CompanyName : American Power Conversion Corporation
      FileDescription : Battery backup management service
      InternalName : PowerChute
      LegalCopyright : Copyright © 2003
      OriginalFilename : PowerChute
      Comments : Battery backup management service

      #:16 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1816
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:17 [defwatch.exe]
      FilePath : C:\Program Files\Symantec AntiVirus\
      ProcessID : 1832
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 10.0.0.359
      ProductVersion : 10.0.0.359
      ProductName : Symantec AntiVirus
      CompanyName : Symantec Corporation
      FileDescription : Virus Definition Daemon
      InternalName : DefWatch
      LegalCopyright : Copyright 1998 - 2005 Symantec Corporation. All rights reserved.
      OriginalFilename : DefWatch.exe

      #:18 [ewidoctrl.exe]
      FilePath : C:\Program Files\ewido anti-malware\
      ProcessID : 1880
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 3, 0, 0, 1
      ProductVersion : 3, 0, 0, 1
      ProductName : ewido control
      CompanyName : ewido networks
      FileDescription : ewido control
      InternalName : ewido control
      LegalCopyright : Copyright © 2004
      OriginalFilename : ewidoctrl.exe

      #:19 [ewidoguard.exe]
      FilePath : C:\Program Files\ewido anti-malware\
      ProcessID : 1912
      ThreadCreationTime : 14-06-2006 05:44:39
      BasePriority : Normal
      FileVersion : 3, 0, 0, 1
      ProductVersion : 3, 0, 0, 1
      ProductName : guard
      CompanyName : ewido networks
      FileDescription : guard
      InternalName : guard
      LegalCopyright : Copyright © 2004
      OriginalFilename : guard.exe

      #:20 [nvsvc32.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1964
      ThreadCreationTime : 14-06-2006 05:44:40
      BasePriority : Normal
      FileVersion : 6.14.10.6573
      ProductVersion : 6.14.10.6573
      ProductName : NVIDIA Driver Helper Service, Version 65.73
      CompanyName : NVIDIA Corporation
      FileDescription : NVIDIA Driver Helper Service, Version 65.73
      InternalName : NVSVC
      LegalCopyright : (C) NVIDIA Corporation. All rights reserved.
      OriginalFilename : nvsvc32.exe

      #:21 [smagent.exe]
      FilePath : C:\Program Files\Analog Devices\SoundMAX\
      ProcessID : 2012
      ThreadCreationTime : 14-06-2006 05:44:40
      BasePriority : Normal
      FileVersion : 3, 2, 6, 0
      ProductVersion : 3, 2, 6, 0
      ProductName : SoundMAX service agent
      CompanyName : Analog Devices, Inc.
      FileDescription : SoundMAX service agent component
      InternalName : SMAgent
      LegalCopyright : Copyright © 2002
      OriginalFilename : SMAgent.exe

      #:22 [svchost.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 2028
      ThreadCreationTime : 14-06-2006 05:44:40
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Generic Host Process for Win32 Services
      InternalName : svchost.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : svchost.exe

      #:23 [rtvscan.exe]
      FilePath : C:\Program Files\Symantec AntiVirus\
      ProcessID : 164
      ThreadCreationTime : 14-06-2006 05:44:41
      BasePriority : Normal
      FileVersion : 10.0.0.359
      ProductVersion : 10.0.0.359
      ProductName : Symantec AntiVirus
      CompanyName : Symantec Corporation
      FileDescription : Symantec AntiVirus
      LegalCopyright : Copyright 1991 - 2005 Symantec Corporation. All rights reserved.

      #:24 [ccapp.exe]
      FilePath : C:\Program Files\Fichiers communs\Symantec Shared\
      ProcessID : 316
      ThreadCreationTime : 14-06-2006 05:44:42
      BasePriority : Normal
      FileVersion : 103.5.1.9
      ProductVersion : 103.5.1.9
      ProductName : Client and Host Security Platform
      CompanyName : Symantec Corporation
      FileDescription : Symantec User Session
      InternalName : ccApp
      LegalCopyright : Copyright (c) 2000-2005 Symantec Corporation. All rights reserved.
      OriginalFilename : ccApp.exe

      #:25 [vptray.exe]
      FilePath : C:\PROGRA~1\SYMANT~1\
      ProcessID : 436
      ThreadCreationTime : 14-06-2006 05:44:42
      BasePriority : Normal
      FileVersion : 10.0.0.359
      ProductVersion : 10.0.0.359
      ProductName : Symantec AntiVirus
      CompanyName : Symantec Corporation
      FileDescription : Symantec AntiVirus
      LegalCopyright : Copyright 1991 - 2005 Symantec Corporation. All rights reserved.

      #:26 [shwicon2k.exe]
      FilePath : C:\Program Files\Multimedia Card Reader\
      ProcessID : 512
      ThreadCreationTime : 14-06-2006 05:44:42
      BasePriority : Idle
      FileVersion : 1, 4, 0, 8
      ProductVersion : 1, 4, 0, 8
      ProductName : Multimedia Card Reader
      CompanyName : Alcor Micro, Corp.
      FileDescription : Sunkist
      InternalName : Sunkist
      LegalCopyright : Copyright c 2002
      OriginalFilename : Sunkist.exe
      Comments : 6362 4.5 Slot 2000/XP

      #:27 [wdfmgr.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 544
      ThreadCreationTime : 14-06-2006 05:44:42
      BasePriority : Normal
      FileVersion : 5.2.3790.1230 built by: DNSRV(bld4act)
      ProductVersion : 5.2.3790.1230
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Windows User Mode Driver Manager
      InternalName : WdfMgr
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : WdfMgr.exe

      #:28 [vsnpstd3.exe]
      FilePath : C:\WINDOWS\
      ProcessID : 556
      ThreadCreationTime : 14-06-2006 05:44:42
      BasePriority : Normal
      FileVersion : 1, 0, 1, 1
      ProductVersion : 1, 0, 1, 1
      ProductName : CameraMonitor Application
      FileDescription : CameraMonitor MFC Application
      InternalName : CameraMonitor
      LegalCopyright : Copyright © 2002-2004
      OriginalFilename : CameraMonitor.EXE

      #:29 [mspmspsv.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 656
      ThreadCreationTime : 14-06-2006 05:44:43
      BasePriority : Normal
      FileVersion : 7.01.00.3055
      ProductVersion : 7.01.00.3055
      ProductName : Microsoft (R) DRM
      CompanyName : Microsoft Corporation
      FileDescription : WMDM PMSP Service
      InternalName : MSPMSPSV.EXE
      LegalCopyright : Copyright (C) Microsoft Corp. 1981-2000
      OriginalFilename : MSPMSPSV.EXE

      #:30 [hpcmpmgr.exe]
      FilePath : C:\Program Files\HP\hpcoretech\
      ProcessID : 996
      ThreadCreationTime : 14-06-2006 05:44:44
      BasePriority : Normal
      FileVersion : 2.1.1.0
      ProductVersion : 2.1.5
      ProductName : hp coretech (COmponent REuse TECHnology)
      CompanyName : Hewlett-Packard Company
      FileDescription : HP Framework Component Manager Service
      InternalName : HPComponentManagerService module
      LegalCopyright : Copyright (C) Hewlett-Packard. 2002-2004
      OriginalFilename : HpCmpMgr.exe

      #:31 [hpwuschd2.exe]
      FilePath : C:\Program Files\HP\HP Software Update\
      ProcessID : 1096
      ThreadCreationTime : 14-06-2006 05:44:44
      BasePriority : Normal
      FileVersion : 50.0.146.000
      ProductVersion : 050.000.146.000
      ProductName : hp digital imaging - hp all-in-one series
      CompanyName : Hewlett-Packard Co.
      FileDescription : Hewlett-Packard Product Assistant
      InternalName : hpwuSchd2
      LegalCopyright : Copyright (C) Hewlett-Packard Co. 1995-2004
      OriginalFilename : hpwuSchd2.exe
      Comments : Hewlett-Packard Product Assistant

      #:32 [ctfmon.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1164
      ThreadCreationTime : 14-06-2006 05:44:45
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : CTF Loader
      InternalName : CTFMON
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : CTFMON.EXE

      #:33 [msnmsgr.exe]
      FilePath : C:\Program Files\MSN Messenger\
      ProcessID : 1500
      ThreadCreationTime : 14-06-2006 05:44:47
      BasePriority : Normal
      FileVersion : 7.5.0324
      ProductVersion : 7.5.0324
      ProductName : MSN Messenger
      CompanyName : Microsoft Corporation
      FileDescription : MSN Messenger
      InternalName : msnmsgr
      LegalCopyright : Copyright (c) Microsoft Corporation 1997-2004
      LegalTrademarks : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
      OriginalFilename : msnmsgr.exe

      #:34 [yahoom~1.exe]
      FilePath : C:\PROGRA~1\Yahoo!\MESSEN~1\
      ProcessID : 1772
      ThreadCreationTime : 14-06-2006 05:44:49
      BasePriority : Normal
      FileVersion : 7,5,0,814
      ProductVersion : 7,5,0,814
      ProductName : Yahoo! Messenger
      CompanyName : Yahoo! Inc.
      FileDescription : Yahoo! Messenger
      LegalCopyright : (c) 1998-2006 Yahoo! Inc. All rights reserved.

      #:35 [alg.exe]
      FilePath : C:\WINDOWS\System32\
      ProcessID : 2212
      ThreadCreationTime : 14-06-2006 05:44:51
      BasePriority : Normal
      FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
      ProductVersion : 5.1.2600.2180
      ProductName : Microsoft® Windows® Operating System
      CompanyName : Microsoft Corporation
      FileDescription : Application Layer Gateway Service
      InternalName : ALG.exe
      LegalCopyright : © Microsoft Corporation. All rights reserved.
      OriginalFilename : ALG.exe

      #:36 [dslmon.exe]
      FilePath : C:\Program Files\SAGEM\SAGEM F@st 800-840\
      ProcessID : 2388
      ThreadCreationTime : 14-06-2006 05:44:54
      BasePriority : Normal
      FileVersion : 1, 0, 0, 1
      ProductVersion : 1, 0, 0, 1
      ProductName : DSLMON Application
      FileDescription : ADIMON MFC Application
      InternalName : DSLMON
      LegalCopyright : Copyright (C) 2000
      OriginalFilename : ADIMON.EXE

      #:37 [hpqtra08.exe]
      FilePath : C:\Program Files\HP\Digital Imaging\bin\
      ProcessID : 2472
      ThreadCreationTime : 14-06-2006 05:44:56
      BasePriority : Normal
      FileVersion : 45.4.157.000
      ProductVersion : 045.004.157.000
      ProductName : hp digital imaging - hp all-in-one series
      CompanyName : Hewlett-Packard Co.
      FileDescription : HP Digital Imaging Monitor
      InternalName : HPQTRA00
      LegalCopyright : Copyright (C) Hewlett-Packard Co. 1995-2004
      OriginalFilename : HPQTRA00.EXE
      Comments : HP Digital Imaging Monitor

      #:38 [apcsystray.exe]
      FilePath : C:\Program Files\APC\APC PowerChute Personal Edition\
      ProcessID : 2816
      ThreadCreationTime : 14-06-2006 05:45:01
      BasePriority : Normal
      FileVersion : 1, 4, 0, 0
      ProductVersion : 1, 4, 0, 0
      ProductName : APC PowerChute Personal Edition
      CompanyName : American Power Conversion Corporation
      FileDescription : PowerChute system tray power icon
      InternalName : PowerChute
      LegalCopyright : Copyright © 2003
      OriginalFilename : PowerChute
      Comments : PowerChute system tray power icon

      #:39 [hpqgalry.exe]
      FilePath : C:\Program Files\HP\Digital Imaging\bin\
      ProcessID : 2872
      ThreadCreationTime : 14-06-2006 05:45:03
      BasePriority : Normal

      #:40 [hpdarc.exe]
      FilePath : C:\Program Files\HP\hpcoretech\comp\
      ProcessID : 3276
      ThreadCreationTime : 14-06-2006 05:45:31
      BasePriority : Normal
      FileVersion : 2.1.5
      ProductVersion : 2.1.5
      ProductName : hp coretech (COmponent REuse TECHnology)
      CompanyName : Hewlett-Packard Company
      FileDescription : HP Data Archive Module
      InternalName : HP Data Archive Module
      LegalCopyright : Copyright (C) Hewlett-Packard. 2002-2004
      OriginalFilename : hpdarc.exe

      #:41 [espacewanadoo.exe]
      FilePath : C:\Program Files\Wanadoo\
      ProcessID : 3432
      ThreadCreationTime : 14-06-2006 05:45:50
      BasePriority : Normal
      FileVersion : 5.9 (3)
      ProductVersion : 5.9 (3)
      ProductName : Kit de Connexion et de Services
      CompanyName : France Télécom R&D
      FileDescription : Espace Client
      InternalName : EspaceClient
      LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
      OriginalFilename : EspaceClient.exe

      #:42 [comcomp.exe]
      FilePath : C:\Program Files\Wanadoo\
      ProcessID : 3448
      ThreadCreationTime : 14-06-2006 05:45:52
      BasePriority : Normal
      FileVersion : 11.0 (9)
      ProductVersion : 11.0 (9)
      ProductName : Kit de Connexion et de Services
      CompanyName : France Télécom R&D
      FileDescription : Module de communication
      InternalName : ComComp
      LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
      OriginalFilename : ComComp.exe

      #:43 [toaster.exe]
      FilePath : C:\PROGRA~1\Wanadoo\
      ProcessID : 3468
      ThreadCreationTime : 14-06-2006 05:45:52
      BasePriority : Normal
      FileVersion : 1, 0, 0, 1
      ProductVersion : 1, 0, 0, 1
      ProductName : Application Toaster
      CompanyName : France Telecom R&D
      FileDescription : Application MFC Toaster
      InternalName : Toaster
      LegalCopyright : Copyright France Telecom R&D (C) 2004
      OriginalFilename : Toaster.EXE

      #:44 [inactivity.exe]
      FilePath : C:\PROGRA~1\Wanadoo\
      ProcessID : 3476
      ThreadCreationTime : 14-06-2006 05:45:52
      BasePriority : Normal
      FileVersion : 1, 0, 0, 1
      ProductVersion : 1, 0, 0, 1
      ProductName : Application Inactivity
      FileDescription : Application MFC Inactivity
      InternalName : Inactivity
      LegalCopyright : Copyright France Telecom R&D (C) 2004
      OriginalFilename : Inactivity.EXE

      #:45 [pollingmodule.exe]
      FilePath : C:\PROGRA~1\Wanadoo\
      ProcessID : 3484
      ThreadCreationTime : 14-06-2006 05:45:53
      BasePriority : Normal
      FileVersion : 1, 0, 0, 1
      ProductVersion : 1, 0, 0, 1
      ProductName : Application PollingModule
      FileDescription : Application PollingModule
      InternalName : PollingModule
      LegalCopyright : Copyright France Telecom R&D (C) 2004
      OriginalFilename : PollingModule.EXE

      #:46 [alertm~1.exe]
      FilePath : C:\PROGRA~1\Wanadoo\
      ProcessID : 3500
      ThreadCreationTime : 14-06-2006 05:45:53
      BasePriority : Normal
      FileVersion : 1, 0, 0, 1
      ProductVersion : 1, 0, 0, 1
      ProductName : Application AlertModule
      FileDescription : Application MFC AlertModule
      InternalName : AlertModule
      LegalCopyright : Copyright (C) 2003
      OriginalFilename : AlertModule.EXE

      #:47 [watch.exe]
      FilePath : C:\Program Files\Wanadoo\
      ProcessID : 3668
      ThreadCreationTime : 14-06-2006 05:45:54
      BasePriority : Normal
      FileVersion : 11.0 (2)
      ProductVersion : 11.0 (2)
      ProductName : Kit de Connexion et de Services
      CompanyName : France Télécom R&D
      FileDescription : Surveillance des modifications
      InternalName : Watch
      LegalCopyright : Copyright (C) France Télécom R&D 1999-2003
      OriginalFilename : Watch.exe

      #:48 [wuauclt.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 2824
      ThreadCreationTime : 14-06-2006 05:47:19
      BasePriority : Normal
      FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
      ProductVersion : 5.8.0.2469
      ProductName : Système d'exploitation Microsoft® Windows®
      CompanyName : Microsoft Corporation
      FileDescription : Mises à jour automatiques
      InternalName : wuauclt.exe
      LegalCopyright : © Microsoft Corporation. Tous droits réservés.
      OriginalFilename : wuauclt.exe

      #:49 [maxthon.exe]
      FilePath : C:\Program Files\Maxthon\
      ProcessID : 4080
      ThreadCreationTime : 14-06-2006 05:52:03
      BasePriority : Normal
      FileVersion : 1, 1, 0, 90
      ProductVersion : 1, 1, 0, 90
      ProductName : Maxthon Application
      CompanyName : MY Soft Technology
      FileDescription : Maxthon Web Browser
      InternalName : Maxthon
      LegalCopyright : Copyright (C) 2002
      LegalTrademarks : Maxthon
      OriginalFilename : Maxthon.EXE

      #:50 [hpzipm12.exe]
      FilePath : C:\WINDOWS\system32\
      ProcessID : 1976
      ThreadCreationTime : 14-06-2006 05:52:30
      BasePriority : Normal
      FileVersion : 9, 0, 0, 0
      ProductVersion : 9, 0, 0, 0
      ProductName : HP PML
      CompanyName : HP
      FileDescription : PML Driver
      InternalName : PmlDrv
      LegalCopyright : Copyright © 1998, 1999 Hewlett-Packard Company
      OriginalFilename : PmlDrv.exe

      #:51 [securitysuite.exe]
      FilePath : C:\Program Files\ewido anti-malware\
      ProcessID : 3704
      ThreadCreationTime : 14-06-2006 05:55:20
      BasePriority : Normal
      FileVersion : 3, 5, 0, 0
      ProductVersion : 3, 5, 0, 0
      ProductName : ewido anti-malware
      CompanyName : ewido networks
      FileDescription : anti-malware
      InternalName : GuiLoader
      LegalCopyright : © 2003 ewido networks
      OriginalFilename : SecuritySuite.exe

      #:52 [ad-aware.exe]
      FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
      ProcessID : 3796
      ThreadCreationTime : 14-06-2006 05:55:37
      BasePriority : Normal
      FileVersion : 6.2.0.236
      ProductVersion : SE 106
      ProductName : Lavasoft Ad-Aware SE
      CompanyName : Lavasoft Sweden
      FileDescription : Ad-Aware SE Core application
      InternalName : Ad-Aware.exe
      LegalCopyright : Copyright © Lavasoft AB Sweden
      OriginalFilename : Ad-Aware.exe
      Comments : All Rights Reserved

      Memory scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 0

      Started registry scan
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Registry Scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 0

      Started deep registry scan
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Deep registry scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 0

      Started Tracking Cookie scan
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Tracking Cookie Object Recognized!
      Type : IECache Entry
      Data : user@www.smartadserver[1].txt
      TAC Rating : 3
      Category : Data Miner
      Comment : Hits:1
      Value : Cookie:user@www.smartadserver.com/
      Expires : 27-11-2010 01:00:00
      LastSync : Hits:1
      UseCount : 0
      Hits : 1

      Tracking cookie scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 1
      Objects found so far: 1

      Deep scanning and examining files...
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Disk Scan Result for C:\WINDOWS
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 1

      Disk Scan Result for C:\WINDOWS\system32
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 1

      Disk Scan Result for C:\DOCUME~1\user\LOCALS~1\Temp\
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 1

      Scanning Hosts file......
      Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Hosts file scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      1 entries scanned.
      New critical objects:0
      Objects found so far: 1

      MRU List Object Recognized!
      Location: : C:\Documents and Settings\user\recent
      Description : list of recently opened documents

      MRU List Object Recognized!
      Location: : software\microsoft\directdraw\mostrecentapplication
      Description : most recent application to use microsoft directdraw

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\mediaplayer\medialibraryui
      Description : last selected node in the microsoft windows media player media library

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\mediaplayer\player\recentfilelist
      Description : list of recently used files in microsoft windows media player

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\mediaplayer\preferences
      Description : last playlist index loaded in microsoft windows media player

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\mediaplayer\preferences
      Description : last playlist loaded in microsoft windows media player

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\mediaplayer\preferences
      Description : last search path used in microsoft windows media player

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\search assistant\acmru
      Description : list of recent search terms used with the search assistant

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
      Description : list of recent programs opened

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
      Description : list of recently saved files, stored according to file extension

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\windows\currentversion\explorer\recentdocs
      Description : list of recent documents opened

      MRU List Object Recognized!
      Location: : S-1-5-21-1935655697-1614895754-725345543-1003\software\microsoft\windows media\wmsdk\general
      Description : windows media sdk

      Performing conditional scans...
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

      Conditional scan result:
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      New critical objects: 0
      Objects found so far: 13

      08:01:16 Scan Complete

      Summary Of This Scan
      »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
      Total scanning time:00:04:14.766
      Objects scanned:95428
      Objects identified:1
      Objects ignored:0
      New critical objects:1

      Logfile of HijackThis v1.99.1
      Scan saved at 08:06:40, on 14/06/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
      C:\Program Files\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Symantec AntiVirus\Rtvscan.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\PROGRA~1\SYMANT~1\VPTray.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\WINDOWS\vsnpstd3.exe
      C:\WINDOWS\system32\MsPMSPSv.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
      C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
      C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
      C:\Program Files\Wanadoo\EspaceWanadoo.exe
      C:\Program Files\Wanadoo\ComComp.exe
      C:\PROGRA~1\Wanadoo\Toaster.exe
      C:\PROGRA~1\Wanadoo\Inactivity.exe
      C:\PROGRA~1\Wanadoo\PollingModule.exe
      C:\PROGRA~1\Wanadoo\ALERTM~1.EXE
      C:\Program Files\Wanadoo\Watch.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Maxthon\Maxthon.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr7/*https://fr.search.yahoo.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo / Internet avec Planet Tunisie
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\Program Files\Wanadoo Booster\PBHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
      O4 - Global Startup: APC UPS Status.lnk = ?
      O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D27ADEA2-8420-457D-9F1D-309888A70AED}: NameServer = 193.95.122.40 193.95.93.77
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
      O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
      0
      1. aranjuez31 Contributeur
        bjr
        fais attention à ce qui t'est ddé, amigo

        qd je relis , je vois ces ddes :
        D - Ewido (download)- gratuit même après 14 jours d’essai
        http://perso.wanadoo.fr/entraide-hijackthis/Ewido/
        Copie/COLLE le rapport généré sur ce forum<====!!!
        E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
        https://assiste.com/404_La_page_demandee_n_existe_pas.php
        http://www.bitdefender.fr/scan8/ie.html
        Copie/COLLE le rapport entier <====!!!

        0
        2. aranjuez31 Contributeur
          re

          cette ligne doit requérir ton attention :
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          =========
          telecharge ceci si tu ne l'as pas fait :
          C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
          Télécharge ici :
          https://www.ccleaner.com/ccleaner/download
          Tutorial ici:
          https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
          =========
          mets-toi en sans échec ( au redémarrage tu tapotes f8 à l'apparition des tableaux du bios)
          +
          ouvre hijack
          coche et fixe ces lignes :
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll<==voir tratement plus bas

          O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe

          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

          O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

          O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

          O4 - Global Startup: APC UPS Status.lnk = ?

          O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

          O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

          O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
          O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

          O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
          +
          regarde dans démarrer>pano config>ajout/suppr de progr
          recherche
          MSN Apps
          si tu trouves, tu enléves
          +
          suis ce chemin
          démarrer>poste de travail>HDD
          C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          recherche et supprime
          stmain.dll
          +
          si tu ne trouves pas
          démarrer>rechercher "stmain.dll ",
          supprime
          +
          fais fonctionner spybot+ad-aware+ewido
          vide leurs quarantaines
          +
          fais fonctionner Ccleaner (nettoyeur+erreurs)
          +
          vide poubelle
          +
          redémarre en mode normam
          +
          recolle un nouvel hijack

          0
          1. aranjuez31 Contributeur
            re
            peux-tu me préciser la version de symantec que tu emploies
            car je ne la connais pas
            je lis la mention d'antivirus
            mais pas celle du p-feu ??
            0