[XP]Fermeture session/arret/reboot impossible
ludo
-
M&M Messages postés 5058 Statut Contributeur -
M&M Messages postés 5058 Statut Contributeur -
Bonjour !
J'ai un gros probléme :
J'ai 4 sessions windows et je n'arrive plus a fermer la session, eteindre/redemarrer le PC. Je peux fermer la session par Ctrl+Alt+Suppr !
Voici mon Log Hijack This :
Logfile of HijackThis v1.99.1
Scan saved at 12:30:26, on 14/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\E_S00RP1.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Laser Center\Laser Sensor Mouse\Panel.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\WINDOWS\NCLAUNCH.EXe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ScannerU\AM32.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\Ludovic\Application Data\Mozilla\Profiles\default\1ehs1pug.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - (no file)
O2 - BHO: IdnHelperObj Class - {118CE65F-5D86-4AEA-A9BD-94F92B89119F} - C:\WINDOWS\DOWNLO~1\CNSMIN~1.DLL
O2 - BHO: (no name) - {3A318A67-CD95-FB36-2003-5796950D3B23} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8E601180-AD4E-D5EC-47D4-F63AE1431796} - (no file)
O2 - BHO: (no name) - {98640C3B-0699-4D51-ADB4-A6FC48ACB966} - (no file)
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {BB4D2180-807D-E0D8-6AE4-C617D1733AA6} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {3D782BB3-F2A5-11D3-BF4C-000000000000} - (no file)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ts9f3mT] umdprep.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Laser mouse] "C:\Program Files\Laser Center\Laser Sensor Mouse\Panel.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\RunServices: [\1.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tools\1.exe
O4 - HKLM\..\RunServices: [\-1.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tools\-1.exe
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Zvop] C:\WINDOWS\system32\??rvices.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Action Manager 32.lnk = C:\Program Files\ScannerU\AM32.exe
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .swf: C:\Program Files\Internet Explorer\PLUGINS\NPSWF32.dll
O15 - Trusted Zone: http://www.smartbird.fr.st
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version3/Applet/wchatsign.cab
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {27FA5271-12D2-43E3-9424-365A43236EE7} (PIXACO upload plugin) - http://fr.pixaco.com/static/download/iedropupload.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/supergerball/miniclipGameLoader.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {3EB4F9EA-51A6-48DA-846A-0D69DCBA39EF} (DownloadManager Control) - http://download.akamaitools.com.edgesuite.net/dlmanager/live/code/DownloadManager...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by108fd.bay108.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/16bce870f42c3ef5cf05/netzip/RdxIE601_fr.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://scan.safety.live.com/resource/download/scanner/en-us/wlscbase7617.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://metaboli.goa.com/components/Metaboli.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwaredetection.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/699d0b87d65893/player.virtools.com/downloads/...
O16 - DPF: {DE910060-8EFB-44B9-B492-75180696643F} (iiittt Class) - http://www.hotsearchbar.com/toolbar30/hsrb.cab
O16 - DPF: {EF58E341-49C3-4156-A3C4-5FFCA7C1EAB7} (EURAS_Portal.Gateway) - http://www.euras.com/euras/activex2/euras.CAB
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28578.cab
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winfixer.com/www/pages/scanner_fr/WinFixe...
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O18 - Protocol: bw+0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw+0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw-0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw-0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw00 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw00s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw10 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw10s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw20 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw20s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw30 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw30s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw40 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw40s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw50 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw50s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw60 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw60s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw70 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw70s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw80 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw80s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw90 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw90s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwa0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwa0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwb0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwb0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwc0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwc0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwd0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwd0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwe0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwe0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwf0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwf0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwg0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwh0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwh0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwi0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwi0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwj0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwj0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwk0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwk0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwl0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwl0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwm0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwm0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwn0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwn0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwo0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwo0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwp0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwp0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwq0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwq0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwr0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwr0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bws0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bws0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwt0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwt0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwu0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwu0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwv0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwv0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bww0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bww0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwx0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwx0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwy0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwy0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwz0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwz0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O20 - AppInit_DLLs: ,wbsys.dll MsgPlusLoader.dll
O20 - Winlogon Notify: WB - C:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll
O23 - Service: Apache - Unknown owner - C:\Program Files\Apache Group\Apache\Apache.exe" --ntservice (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
Merci !
J'ai un gros probléme :
J'ai 4 sessions windows et je n'arrive plus a fermer la session, eteindre/redemarrer le PC. Je peux fermer la session par Ctrl+Alt+Suppr !
Voici mon Log Hijack This :
Logfile of HijackThis v1.99.1
Scan saved at 12:30:26, on 14/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\E_S00RP1.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Apache Group\Apache\Apache.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Laser Center\Laser Sensor Mouse\Panel.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\WINDOWS\NCLAUNCH.EXe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ScannerU\AM32.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\Ludovic\Application Data\Mozilla\Profiles\default\1ehs1pug.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - (no file)
O2 - BHO: IdnHelperObj Class - {118CE65F-5D86-4AEA-A9BD-94F92B89119F} - C:\WINDOWS\DOWNLO~1\CNSMIN~1.DLL
O2 - BHO: (no name) - {3A318A67-CD95-FB36-2003-5796950D3B23} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8E601180-AD4E-D5EC-47D4-F63AE1431796} - (no file)
O2 - BHO: (no name) - {98640C3B-0699-4D51-ADB4-A6FC48ACB966} - (no file)
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {BB4D2180-807D-E0D8-6AE4-C617D1733AA6} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {3D782BB3-F2A5-11D3-BF4C-000000000000} - (no file)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ts9f3mT] umdprep.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Laser mouse] "C:\Program Files\Laser Center\Laser Sensor Mouse\Panel.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\RunServices: [\1.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tools\1.exe
O4 - HKLM\..\RunServices: [\-1.exe] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tools\-1.exe
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Zvop] C:\WINDOWS\system32\??rvices.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Action Manager 32.lnk = C:\Program Files\ScannerU\AM32.exe
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .swf: C:\Program Files\Internet Explorer\PLUGINS\NPSWF32.dll
O15 - Trusted Zone: http://www.smartbird.fr.st
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version3/Applet/wchatsign.cab
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {27FA5271-12D2-43E3-9424-365A43236EE7} (PIXACO upload plugin) - http://fr.pixaco.com/static/download/iedropupload.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip.com/supergerball/miniclipGameLoader.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {3EB4F9EA-51A6-48DA-846A-0D69DCBA39EF} (DownloadManager Control) - http://download.akamaitools.com.edgesuite.net/dlmanager/live/code/DownloadManager...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by108fd.bay108.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/16bce870f42c3ef5cf05/netzip/RdxIE601_fr.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://scan.safety.live.com/resource/download/scanner/en-us/wlscbase7617.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://metaboli.goa.com/components/Metaboli.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwaredetection.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/699d0b87d65893/player.virtools.com/downloads/...
O16 - DPF: {DE910060-8EFB-44B9-B492-75180696643F} (iiittt Class) - http://www.hotsearchbar.com/toolbar30/hsrb.cab
O16 - DPF: {EF58E341-49C3-4156-A3C4-5FFCA7C1EAB7} (EURAS_Portal.Gateway) - http://www.euras.com/euras/activex2/euras.CAB
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28578.cab
O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winfixer.com/www/pages/scanner_fr/WinFixe...
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O18 - Protocol: bw+0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw+0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw-0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw-0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw00 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw00s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw10 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw10s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw20 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw20s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw30 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw30s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw40 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw40s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw50 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw50s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw60 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw60s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw70 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw70s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw80 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw80s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw90 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bw90s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwa0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwa0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwb0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwb0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwc0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwc0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwd0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwd0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwe0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwe0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwf0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwf0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwg0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwh0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwh0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwi0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwi0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwj0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwj0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwk0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwk0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwl0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwl0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwm0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwm0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwn0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwn0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwo0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwo0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwp0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwp0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwq0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwq0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwr0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwr0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bws0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bws0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwt0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwt0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwu0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwu0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwv0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwv0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bww0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bww0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwx0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwx0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwy0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwy0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwz0 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: bwz0s - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {BAAFDA04-1D6A-42E6-91E4-D213448C3DB9} - (no file)
O20 - AppInit_DLLs: ,wbsys.dll MsgPlusLoader.dll
O20 - Winlogon Notify: WB - C:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll
O23 - Service: Apache - Unknown owner - C:\Program Files\Apache Group\Apache\Apache.exe" --ntservice (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
Merci !
A voir également:
- [XP]Fermeture session/arret/reboot impossible
- Reboot pc - Guide
- Reboot system now - Guide
- Cle windows xp - Guide
- Forcer fermeture application windows - Guide
- Sytadin fermeture - Télécharger - Transports & Cartes
1 réponse
Malgré ton Norton tu es bien infesté d'au moins 7 spyware actifs. A commencer par les spywares de "Messenger plus". On n'a rien à foutre de ce programme qui rappelons-le n'est pas un produit de microsoft mais d'un canadien opportuniste qui vit grâce à ses quatre sponsors. Désinstalle-le ainsi que les toolbars idiots, netropia, qui ne te servent à rien. Si c'est un antipopup que tu cherches, il y en a un très bon et gratuit, il s'appelle : Firefox...
Vérifie que Norton soit bien à jour. Reboote et lance des antispyware de nettoyage : adaware et spybot. Mets-les aussi à jour en ligne et fais les tourner. Ensuite, si tu as une licence Xp tu pourras installer microsoft defender, si tu as autre chose, installe Superantispyware, un résident qui te protègera.
Une fois ce premier gros nettoyage opéré, après reboot, tu installeras ccleaner pour purger tes zones temporaire et nettoyer ta base de registre. Bonne chance.
_ç_§:
(.)#(.)
Vérifie que Norton soit bien à jour. Reboote et lance des antispyware de nettoyage : adaware et spybot. Mets-les aussi à jour en ligne et fais les tourner. Ensuite, si tu as une licence Xp tu pourras installer microsoft defender, si tu as autre chose, installe Superantispyware, un résident qui te protègera.
Une fois ce premier gros nettoyage opéré, après reboot, tu installeras ccleaner pour purger tes zones temporaire et nettoyer ta base de registre. Bonne chance.
_ç_§:
(.)#(.)
