[trojan horse] infecté par série de chiffres

Résolu
suntsu -  
 Utilisateur anonyme -
Bonjour,
toutes les 5 minutes, j'ai 1 message d'alerte de norton anti-virus (et mon system d'exploitation est windows xp pack2):

Evénement: Menace trouvée!
Menace: Trojan Horse
Fichier: C:\WINDOWS\System32\{8B0EC3F4-0879-4E34-BEE4-DCB951743F78}.exe
Emplacement: Quarantaine
...
Opération: Quarantaine - réussite: Accès refusé

Et toutes les 5 minutes, il s'agit d'un fichier différent:
{836E27A6-2B32-448A-9B8A-5E3CAD478D9F}.exe
etc...

MERCI DE VOTRE AIDE !

2 réponses

  1. Utilisateur anonyme
     
    Salut,

    fait ça pour verifier, tu dois avoir un joli vers :D

    Télécharge HijackThis:
    Téléchargement de HijackThis

    Installe le dans son propre dossier:
    -clic droit sur le bureau, choisis "nouveau dossier" puis installe le dedans.
    Lance le, clic sur "do a system scan and save logfile"
    Puis copie et colle le rapport ici stp
    0
    1. suntsu95
       
      bonjour!
      là, tout va très mal, mon ordinateur démarre systématiquement avec l'écran bleu...
      j'ai pu faire ce que tu m'as demandé en mode sans échec; voici le rapport (merci!) :

      Logfile of HijackThis v1.99.1
      Scan saved at 11:22:26, on 28/08/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\savedump.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      d:\MSN Messenger\msnmsgr.exe
      N:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = HTTP=proxy.club-internet.fr:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {551B12D4-F3FE-5F1C-154C-42EF2BF0A0CC} - xwiz.dll (file missing)
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - d:\Microsoft Money\System\mnyside.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - d:\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\google\googletoolbar2.dll
      O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\google\googletoolbar2.dll
      O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\MSN Toolbar\01.01.2607.0\fr\msntb.dll
      O4 - HKLM\..\Run: [QuickTime Task] "D:\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [SSBkgdUpdate] "D:\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
      O4 - HKLM\..\Run: [PaperPort PTD] D:\ScanSoft\PaperPort\pptd40nt.exe
      O4 - HKLM\..\Run: [IndexSearch] D:\ScanSoft\PaperPort\IndexSearch.exe
      O4 - HKLM\..\Run: [SetDefPrt] D:\Brother\Brmfl04a\BrStDvPt.exe
      O4 - HKLM\..\Run: [ControlCenter2.0] D:\Brother\ControlCenter2\brctrcen.exe /autorun
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [SunJavaUpdateSched] d:\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SpywareTerminator] "D:\Spyware Terminator\SpywareTerminatorShield.exe"
      O4 - HKLM\..\Run: [tehmk.exe] C:\WINDOWS\system32\tehmk.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Microsoft ActiveSync\WCESCOMM.EXE"
      O4 - HKCU\..\Run: [msnmsgr] "D:\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [ccleaner] "D:\CCleaner\ccleaner.exe" /AUTO
      O4 - Startup: Aide mémoire.lnk = ?
      O4 - Startup: HotSync Manager.lnk = D:\Sony Handheld\HOTSYNC.EXE
      O4 - Global Startup: SATARaid.lnk = D:\Silicon Image\SiISATARaid\SATARaid.exe
      O4 - Global Startup: Status Monitor.lnk = D:\Brother\Brmfcmon\BrMfcWnd.exe
      O8 - Extra context menu item: &Google Search - res://d:\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://d:\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://d:\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://d:\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Conversion CLIÉ - D:\Sony\Image Converter\menu.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://d:\MI1933~1\Office10\EXCEL.EXE/3000
      O8 - Extra context menu item: Similar Pages - res://d:\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://d:\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - d:\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - d:\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Microsoft ActiveSync\inetrepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Microsoft ActiveSync\inetrepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Microsoft ActiveSync\inetrepl.dll
      O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - d:\Microsoft Money\System\mnyside.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Messenger\msmsgs.exe
      O15 - Trusted Zone: *.registration.sonystyle-europe.com (HKLM)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{059B1C4A-C7B3-448C-ADA1-43FB100D1842}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{09594CEF-CD63-4FF5-BB33-A07DFE44F860}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{096AC6DA-E717-41B9-BA88-D3415994A99F}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{10219452-D6A6-42EB-AC8C-7C022CD23C43}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{1F2498FF-0330-4853-A3D5-37354B39D0FD}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{281A3EF8-A03D-4C35-BBFF-11AA6769813F}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{45920049-07BA-4D69-A8C3-B265C6619AFC}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{4D49F7A8-94C2-4652-A365-F3137B5A9942}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{5571FE65-1F45-448B-AA73-88D768B952AA}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{56B0B122-AA4F-47EF-8A0D-EE2688CED15D}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{67F41CB2-E97F-4BF1-B59C-D1BC1F442034}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{70DFE923-9711-44F4-9C1A-91F64DAF7D79}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{75A076CF-8840-4045-949F-CE5B0A532745}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{83216F9E-BBC3-479F-9A35-D3AA869AD23D}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{93189237-3F6A-400F-A977-5A7FE611AD3C}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{9C67E844-34A1-4324-BC93-292FDC8B8E4F}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A3071FCA-77BC-4A82-ADB1-D77B2A27478C}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{A64DD09C-BB7F-456E-BB82-ED734F181656}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{C5495D85-C64F-4E34-BF2E-5075BC8DE4BB}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{C8B614C6-15BD-428D-A0EE-19E45A5D2CAF}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{C942C700-A0EF-457F-A779-FDE7FCF66E18}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{CBA0CA0D-E56F-4EB8-BB61-C440E7FF2120}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{CFA6ED7B-AAF7-4B5D-AFC3-617DE86180FE}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D4CA0DDF-331A-4E24-AB0E-53E11BD9679E}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D52D1B2C-FDB5-4D03-985A-DCE769DEA596}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{E26189C3-1C87-46A2-B953-0AFF8FFA9405}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\..\{E57DB48D-F241-4E6D-9AE3-DAFDBD247014}: NameServer = 85.255.114.4,85.255.112.137
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.4 85.255.112.137
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - d:\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - d:\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - D:\Belkin\Belkin Wireless Network Utility\WLService.exe
      O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
      O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - d:\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - d:\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - d:\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\Kg\command.exe (file missing)
      O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - d:\Symantec AntiVirus\DefWatch.exe
      O23 - Service: DHRJSSGJ - Unknown owner - d:\Temp\DHRJSSGJ.exe (file missing)
      O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - D:\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Network Monitor - Unknown owner - D:\Network Monitor\netmon.exe
      O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - D:\Netropa\Multimedia Keyboard\nhksrv.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: SAVRoam (SavRoam) - symantec - d:\Symantec AntiVirus\SavRoam.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - d:\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec AntiVirus - Symantec Corporation - d:\Symantec AntiVirus\Rtvscan.exe
      0
      1. Utilisateur anonyme > suntsu95
         
        Salut,
        Note l'erreur de cet écran bleu ça nous aidera!


        Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"


        O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
        O4 - HKLM\..\Run: [QuickTime Task] "D:\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SSBkgdUpdate] "D:\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
        O4 - HKLM\..\Run: [PaperPort PTD] D:\ScanSoft\PaperPort\pptd40nt.exe
        O4 - HKLM\..\Run: [IndexSearch] D:\ScanSoft\PaperPort\IndexSearch.exe
        O4 - HKLM\..\Run: [SetDefPrt] D:\Brother\Brmfl04a\BrStDvPt.exe
        O4 - HKLM\..\Run: [ControlCenter2.0] D:\Brother\ControlCenter2\brctrcen.exe /autorun
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
        O4 - HKLM\..\Run: [SunJavaUpdateSched] d:\Java\jre1.5.0_04\bin\jusched.exe
        O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [tehmk.exe] C:\WINDOWS\system32\tehmk.exe
        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O8 - Extra context menu item: &Google Search - res://d:\google\GoogleToolbar2.dll/cmsearch.html
        O8 - Extra context menu item: &Translate English Word - res://d:\google\GoogleToolbar2.dll/cmwordtrans.html
        O8 - Extra context menu item: Backward Links - res://d:\google\GoogleToolbar2.dll/cmbacklinks.html
        O8 - Extra context menu item: Cached Snapshot of Page - res://d:\google\GoogleToolbar2.dll/cmcache.html
        O8 - Extra context menu item: Similar Pages - res://d:\google\GoogleToolbar2.dll/cmsimilar.html
        O8 - Extra context menu item: Translate Page into English - res://d:\google\GoogleToolbar2.dll/cmtrans.html
        O17 - HKLM\System\CCS\Services\Tcpip\..\{059B1C4A-C7B3-448C-ADA1-43FB100D1842}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{09594CEF-CD63-4FF5-BB33-A07DFE44F860}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{096AC6DA-E717-41B9-BA88-D3415994A99F}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{10219452-D6A6-42EB-AC8C-7C022CD23C43}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{1F2498FF-0330-4853-A3D5-37354B39D0FD}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{281A3EF8-A03D-4C35-BBFF-11AA6769813F}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{45920049-07BA-4D69-A8C3-B265C6619AFC}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{4D49F7A8-94C2-4652-A365-F3137B5A9942}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{5571FE65-1F45-448B-AA73-88D768B952AA}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{56B0B122-AA4F-47EF-8A0D-EE2688CED15D}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{67F41CB2-E97F-4BF1-B59C-D1BC1F442034}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{70DFE923-9711-44F4-9C1A-91F64DAF7D79}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{75A076CF-8840-4045-949F-CE5B0A532745}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{83216F9E-BBC3-479F-9A35-D3AA869AD23D}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{93189237-3F6A-400F-A977-5A7FE611AD3C}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{9C67E844-34A1-4324-BC93-292FDC8B8E4F}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{A3071FCA-77BC-4A82-ADB1-D77B2A27478C}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{A64DD09C-BB7F-456E-BB82-ED734F181656}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{C5495D85-C64F-4E34-BF2E-5075BC8DE4BB}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{C8B614C6-15BD-428D-A0EE-19E45A5D2CAF}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{C942C700-A0EF-457F-A779-FDE7FCF66E18}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{CBA0CA0D-E56F-4EB8-BB61-C440E7FF2120}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{CFA6ED7B-AAF7-4B5D-AFC3-617DE86180FE}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{D4CA0DDF-331A-4E24-AB0E-53E11BD9679E}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{D52D1B2C-FDB5-4D03-985A-DCE769DEA596}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{E26189C3-1C87-46A2-B953-0AFF8FFA9405}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\..\{E57DB48D-F241-4E6D-9AE3-DAFDBD247014}: NameServer = 85.255.114.4,85.255.112.137
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.4 85.255.112.137


        Cherche et supprime ce fichier:

        tehmk.exe


        J'attend de tes nouvelles, ça ne sera pas finit

        A++
        0
  2. suntsu95
     
    Bonjour,

    je sais que ce n'est pas très constructif, mais je ne pouvais pas rester bloqué dans cette situation trop longtemps... Aussi, j'ai fait faire un "ghost" de mon disque dur (je ne sais pas si ça se dit comme ça...) pour retrouver la version initiale de mon système d'exploitation juste après sa première installation.

    Et ça a marché... tout a l'air d'être rentré dans l'ordre. Pourvu que ça dure...

    En tout cas MERCI BEAUCOUP, c'est rassurant de savoir qu'on peut compter sur des gens comme vous en cas de problème ! même si j'espère bien ne pas avoir à vous solliciter de nouveau...
    0
    1. Utilisateur anonyme
       
      Salut,

      pas grave, c'est compréhensible ;-) si besoin est, le forum est là!

      A++
      0