Ouverture d'une page cscjpg

Bonjour
j'ai une page cscjpg qui s'ouvre a chaque lancement d'un programme, le ficchier se trouve dans windows/system32
je le supprime mais revient automatiquement
j'ai windows xp pro sp2
si d'autres personnes ont eu ce probleme!
merci d'avance

18 réponses

  1. Salut,

    Télécharge HijackThis:
    http://www.infos-du-net.com/telecharger/HijackThis.html

    Installe le dans son propre dossier:
    -clic droit sur le bureau, choisis "nouveau dossier" puis installe le dedans.
    Lance le, clic sur "do a system scan and save logfile"
    Puis copie et colle le rapport ici stp
    0
    1. Logfile of HijackThis v1.99.1
      Scan saved at 06:56:12, on 02/10/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      D:\WINDOWS\System32\smss.exe
      D:\WINDOWS\SYSTEM32\winlogon.exe
      D:\WINDOWS\system32\services.exe
      D:\WINDOWS\system32\lsass.exe
      D:\WINDOWS\system32\Ati2evxx.exe
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\System32\svchost.exe
      D:\WINDOWS\SYSTEM32\Ati2evxx.exe
      D:\WINDOWS\system32\spoolsv.exe
      D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      D:\WINDOWS\system32\drivers\CDAC11BA.EXE
      D:\WINDOWS\system32\svchost.exe
      D:\WINDOWS\System32\svchost.exe
      D:\WINDOWS\system32\WgaTray.exe
      D:\WINDOWS\Explorer.EXE
      D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      D:\WINDOWS\SOUNDMAN.EXE
      D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
      D:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
      D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      D:\WINDOWS\system32\rundll32.exe
      D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      D:\Program Files\AOL 9.0b\aoltray.exe
      D:\WINDOWS\system32\svchost.exe
      D:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
      D:\Program Files\AOL 9.0b\waol.exe
      D:\Program Files\AOL 9.0b\shellmon.exe
      D:\Program Files\Fichiers communs\Aol\aoltpspd.exe
      D:\DOCUME~1\ADMINI~1.000\LOCALS~1\Temp\NI.UWAS6V_0001_N91M2208\setup.exe
      D:\Program Files\WinAntiSpyware 2006 Scanner\was6.exe
      D:\Program Files\telechargement\hijackthis_199\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - Default URLSearchHook is missing
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
      O2 - BHO: (no name) - {363C7D4D-0988-479E-864F-7C27E222F4BC} - D:\WINDOWS\system32\tsbyuv32.dll
      O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - D:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - D:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - D:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
      O4 - HKLM\..\Run: [AOLSAV] D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
      O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
      O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [AOLDialer] D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
      O4 - HKLM\..\Run: [WinAntiSpyware 2006 Scanner] D:\Program Files\WinAntiSpyware 2006 Scanner\was6.exe
      O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGACCESS4_1066.dll,InstantAccess
      O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:\Program Files\AOL 9.0b\aoltray.exe
      O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://D:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
      O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
      O8 - Extra context menu item: Easy-WebPrint Imprimer - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
      O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
      O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
      O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - a840.g.akamai.net
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id

      2&version


      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
      O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
      O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1066_XP.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{B475AB4F-A4D1-4DCA-ABAA-9DC1F00D1FE9}: NameServer = 205.188.146.145
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\SYSTEM32\ati2sgag.exe
      O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - D:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

      merci a toi
      0
      1. alors,

        télécharge SysProtect
        http://www.atribune.org/ccount/click.php?id=10

        puis clic sur "remove now"

        appuyes ensuite sur "ok" pour laisser le Pc redemarrer puis remet un rapport hijackthis stp
        0
        1. salut
          meLogfile of HijackThis v1.99.1
          Scan saved at 19:07:48, on 02/10/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          D:\WINDOWS\System32\smss.exe
          D:\WINDOWS\SYSTEM32\winlogon.exe
          D:\WINDOWS\system32\services.exe
          D:\WINDOWS\system32\lsass.exe
          D:\WINDOWS\system32\Ati2evxx.exe
          D:\WINDOWS\system32\svchost.exe
          D:\WINDOWS\System32\svchost.exe
          D:\WINDOWS\SYSTEM32\Ati2evxx.exe
          D:\WINDOWS\system32\spoolsv.exe
          D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
          D:\WINDOWS\system32\drivers\CDAC11BA.EXE
          D:\WINDOWS\system32\svchost.exe
          D:\WINDOWS\System32\svchost.exe
          D:\WINDOWS\system32\WgaTray.exe
          D:\WINDOWS\Explorer.EXE
          D:\WINDOWS\SOUNDMAN.EXE
          D:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          D:\Program Files\WinAntiSpyware 2006 Scanner\was6.exe
          D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
          D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
          D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
          D:\WINDOWS\system32\rundll32.exe
          D:\Program Files\AOL 9.0b\aoltray.exe
          D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
          D:\WINDOWS\system32\wuauclt.exe
          D:\Program Files\AOL 9.0b\waol.exe
          D:\Program Files\AOL 9.0b\shellmon.exe
          D:\Program Files\Fichiers communs\Aol\aoltpspd.exe
          D:\Program Files\telechargement\hijackthis_199\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
          R3 - Default URLSearchHook is missing
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
          O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
          O2 - BHO: (no name) - {363C7D4D-0988-479E-864F-7C27E222F4BC} - D:\WINDOWS\system32\tsbyuv32.dll
          O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - D:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - D:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - D:\Program Files\Canon\Easy-WebPrint\Toolband.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
          O4 - HKLM\..\Run: [AOLSAV] D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
          O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
          O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          O4 - HKLM\..\Run: [AOLDialer] D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
          O4 - HKLM\..\Run: [WinAntiSpyware 2006 Scanner] D:\Program Files\WinAntiSpyware 2006 Scanner\was6.exe
          O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGACCESS4_1066.dll,InstantAccess
          O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:\Program Files\AOL 9.0b\aoltray.exe
          O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
          O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
          O8 - Extra context menu item: &Recherche AOL Toolbar - res://D:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
          O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
          O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
          O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
          O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
          O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
          O8 - Extra context menu item: Easy-WebPrint Imprimer - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
          O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
          O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
          O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
          O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\system32\Shdocvw.dll
          O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
          O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
          O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - a840.g.akamai.net
          O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id

          2&version


          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
          O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
          O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1066_XP.cab
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
          O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\SYSTEM32\ati2sgag.exe
          O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - D:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

          merci encore de t'investir autant
          0
      2. Bon bah tu es infecté, je sais pas comment à réagit le programme que je t'avais donné, j'ai oublier de te le demander :-/

        Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
        O2 - BHO: (no name) - {363C7D4D-0988-479E-864F-7C27E222F4BC} - D:\WINDOWS\system32\tsbyuv32.dll
        O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - D:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
        O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        O4 - HKLM\..\Run: [WinAntiSpyware 2006 Scanner] D:\Program Files\WinAntiSpyware 2006 Scanner\was6.exe
        O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGACCESS4_1066.dll,InstantAccess
        O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
        O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
        O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
        O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
        O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - a840.g.akamai.net
        O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id
        2&version
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
        O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
        O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1066_XP.cab

        Clic sur démarrer, poste de travail, D:, program files et supprime ce dossier:

        MSN Apps

        Clic sur "demarrer", "executer", tape: services.msc ,cherche dans la liste cette ligne, fais un clic droit dessus choisis "propriétés" et régle la sur "désactivé"

        Boonty Games < sauf si tu utilises encore

        Fait ce nettoyage: (à faire réguliérement)

        ¤Telecharges et installes ceci:
        CCleaner:
        Ccleaner

        dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
        Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

        ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

        Ensuite, Redémarres le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) et tu choisis le mode sans échec)

        Désinstalle ce programme:

        Winantispyware 2006

        Il devrait te poser de la résistance donc, clic sur D: program files et supprime le dossier:

        Winantispyware

        Clic sur démarrer,rechercher et supprime ce fichier:

        EGACCESS4_1066.dll

        Refais un nettoyage complet avec Ccleaner toujours en mode sans echec, et dis moi comment tout ça c'est passé ;-)

        A++
        0
        1. bonsoir
          pour SysProtect j'ai redemarer le pc moi meme
          sinon j'ai fait le checkup que tu m'a dit , ma page cscjpg s'ouvre toujours mais d'autres problemes pubs intempestives et explorer
          ont a priori disparu
          je pense que comme d'habitude recuperer mes fichiers qui m'interesse et faire un bon vieux formatage qu'en penses tu
          merci et super forum
          0
          1. tu es sûr de vouloir formater ? ton rapport n'a rien d'alarmant, on a pas encore fini le nettoyage, mais si tu veux formater, tu es le seul maître des lieux..

            Si tu veux continuer..

            Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clic dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
            Une fois qu'il a terminé colle le rapport ici stp

            https://www.bitdefender.com/toolbox/

            Telecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système, supprime (delete) tout ce qu'il te trouve puis colle le rapport ici avec un nouveau rapport hijackthis
            Ewido: (reste gratuit après la période d'essai)
            Ewido

            A++
            0
            1. salut

              voila les 2 rapports a+ je vais bosser

              Logfile of HijackThis v1.99.1
              Scan saved at 07:14:31, on 03/10/2006
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

              Running processes:
              D:\WINDOWS\System32\smss.exe
              D:\WINDOWS\SYSTEM32\winlogon.exe
              D:\WINDOWS\system32\services.exe
              D:\WINDOWS\system32\lsass.exe
              D:\WINDOWS\system32\Ati2evxx.exe
              D:\WINDOWS\system32\svchost.exe
              D:\WINDOWS\System32\svchost.exe
              D:\WINDOWS\SYSTEM32\Ati2evxx.exe
              D:\WINDOWS\system32\spoolsv.exe
              D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
              D:\WINDOWS\system32\drivers\CDAC11BA.EXE
              D:\WINDOWS\system32\svchost.exe
              D:\WINDOWS\Explorer.EXE
              D:\WINDOWS\system32\WgaTray.exe
              D:\WINDOWS\SOUNDMAN.EXE
              D:\Program Files\ATI Technologies\ATI.ACE\cli.exe
              D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
              D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
              D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
              D:\Program Files\AOL 9.0b\aoltray.exe
              D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
              D:\WINDOWS\System32\svchost.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\Program Files\Winamp\Winamp.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\WINDOWS\system32\drwtsn32.exe
              D:\Program Files\AOL 9.0b\waol.exe
              D:\Program Files\AOL 9.0b\shellmon.exe
              D:\Program Files\Fichiers communs\Aol\aoltpspd.exe
              D:\Program Files\ewido anti-spyware 4.0\guard.exe
              D:\Program Files\ewido anti-spyware 4.0\ewido.exe
              D:\Program Files\telechargement\hijackthis_199\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
              R3 - Default URLSearchHook is missing
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
              O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
              O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - D:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
              O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
              O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - D:\Program Files\Canon\Easy-WebPrint\Toolband.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
              O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
              O4 - HKLM\..\Run: [AOLSAV] D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
              O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
              O4 - HKLM\..\Run: [AOLDialer] D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
              O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
              O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:\Program Files\AOL 9.0b\aoltray.exe
              O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
              O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
              O8 - Extra context menu item: &Recherche AOL Toolbar - res://D:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
              O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
              O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
              O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
              O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
              O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
              O8 - Extra context menu item: Easy-WebPrint Imprimer - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
              O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
              O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
              O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
              O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\system32\Shdocvw.dll
              O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{B475AB4F-A4D1-4DCA-ABAA-9DC1F00D1FE9}: NameServer = 205.188.146.145
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
              O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\SYSTEM32\ati2sgag.exe
              O23 - Service: C-DillaCdaC11BA - Macrovision - D:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
              O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

              ---------------------------------------------------------
              ewido anti-spyware - Scan Report
              ---------------------------------------------------------

              + Created at: 07:12:37 03/10/2006

              + Scan result:

              D:\Program Files\Web Offer -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\INSTALL.LOG -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\UNWISE.EXE -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\apev.exe -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\basisp.dst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\basisp.kwd -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\basisp.pu -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\basisp.rst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\gendis.ez -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\paramp.ez -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\rwdsp.rst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\upgradep.vrn -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\versionp.vrn -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Web Offer\wndbannnp.src -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\INSTALL.LOG -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Layer_Bottom.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Layer_Center.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Layer_Top.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Follow_Left.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Follow_Off.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Follow_On.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Follow_Right.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Follow_divider.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Top.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\PopUp_Top_Bottom.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Side_B.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Side_L.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Side_R.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\Side_Top.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\arrow1.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\arrow2.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\button_small.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\icon.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\new.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\Images\spacer.gif -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\UNWISE.EXE -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\basis.dst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\basis.kwd -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\basis.pu -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\basis.rst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\genun.ez -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\legend.lgn -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\mmod.exe -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\param.ez -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\rwds.rst -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\search.src -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\upgrade.vrn -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\version.vrn -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\eZula\wndbannn.src -> Adware.eZula : Cleaned with backup (quarantined).
              D:\Program Files\Internet Optimizer -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
              D:\Program Files\Internet Optimizer\update -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
              D:\Program Files\ISTbar -> Adware.ISTBar : Cleaned with backup (quarantined).
              D:\Program Files\ISTbar\imagemap_normal.bmp -> Adware.ISTBar : Cleaned with backup (quarantined).
              D:\Program Files\ISTbar\imagemap_over.bmp -> Adware.ISTBar : Cleaned with backup (quarantined).
              D:\Program Files\ISTbar\xml_istbar.xml -> Adware.ISTBar : Cleaned with backup (quarantined).
              D:\Program Files\ISTsvc -> Adware.ISTBar : Cleaned with backup (quarantined).
              D:\Program Files\Media Access -> Adware.MediaAccess : Cleaned with backup (quarantined).
              D:\Program Files\Media Access\Info.txt -> Adware.MediaAccess : Cleaned with backup (quarantined).
              D:\Program Files\Media Access\MediaAccC.dll -> Adware.MediaAccess : Cleaned with backup (quarantined).
              D:\Program Files\Media Access\MediaAccK.exe -> Adware.MediaAccess : Cleaned with backup (quarantined).
              D:\Program Files\Media Access\MediaAccess.exe -> Adware.MediaAccess : Cleaned with backup (quarantined).
              D:\Documents and Settings\Administrateur.TITANIUM.000\Menu Démarrer\Programmes\WhenU -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Documents and Settings\Administrateur.TITANIUM.000\Menu Démarrer\Programmes\WhenU\Uninstall.lnk -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\Save -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\Save\SaveUninst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\Save\save.db -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\Save\save.htm -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\Save\store.db -> Adware.SaveNow : Cleaned with backup (quarantined).
              D:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
              D:\Program Files\SurfAccuracy\License.lnk -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
              D:\Program Files\SurfAccuracy\SAcc.cfg -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
              D:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
              HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : Cleaned.
              HKU\S-1-5-21-1614895754-823518204-839522115-500\Software\egdhtml -> Dialer.Generic : Cleaned.
              D:\Program Files\telechargement\WinAntiSpyware2006FreeInstall_fr.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Ignored.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@boonty.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@banner.casinolasvegas[2].txt -> TrackingCookie.Casinolasvegas : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@casinolasvegas[1].txt -> TrackingCookie.Casinolasvegas : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@com[2].txt -> TrackingCookie.Com : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@estat[1].txt -> TrackingCookie.Estat : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@estat[1].txt -> TrackingCookie.Estat : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@media.fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@ehg-sonyprosolution.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@ehg.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@hg1.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@ehg-homeloancenter.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@linksynergy[2].txt -> TrackingCookie.Linksynergy : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@overture[2].txt -> TrackingCookie.Overture : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@vegasred[1].txt -> TrackingCookie.Vegasred : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@www.vegasred[1].txt -> TrackingCookie.Vegasred : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM.000\Cookies\administrateur@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
              D:\Documents and Settings\Administrateur.TITANIUM\Cookies\administrateur@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
              D:\Documents and Settings\Administrateur\Cookies\administrateur@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
              D:\Program Files\telechargement\hijackthis_199\backups\backup-20061002-193318-374.dll -> Trojan.BHO.b : Cleaned.

              ::Report end
              0
              1. Salut,

                maintenant, fait ça:

                Fait ce nettoyage: (à faire réguliérement)

                ¤Telecharges et installes ceci:
                CCleaner:
                Ccleaner

                dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
                Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

                ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

                Puis

                Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clic dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
                Une fois qu'il a terminé colle le rapport ici stp

                https://www.bitdefender.com/toolbox/

                A+++
                0
                1. slt

                  j'ai fait le scan bitdefender avant ccleaner,c'est grave docteur

                  voila les rapports

                  merci bien

                  Scanned File
                  Status

                  D:\Documents and Settings\Administrateur.TITANIUM.000\.housecall\Quarantine\cmctl.dll.bac_a02180=>(Quarantine-4)
                  Infected with: Trojan.Isbar.230

                  D:\Documents and Settings\Administrateur.TITANIUM.000\.housecall\Quarantine\cmctl.dll.bac_a02180=>(Quarantine-4)
                  Disinfection failed

                  D:\Documents and Settings\Administrateur.TITANIUM.000\.housecall\Quarantine\cmctl.dll.bac_a02180=>(Quarantine-4)
                  Deleted

                  D:\Program Files\telechargement\WinAntiSpyware2006FreeInstall_fr.exe
                  Infected with: Trojan.Downloader.Winfixer.O

                  D:\Program Files\telechargement\WinAntiSpyware2006FreeInstall_fr.exe
                  Disinfection failed

                  D:\Program Files\telechargement\WinAntiSpyware2006FreeInstall_fr.exe
                  Deleted

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0005776.DLL
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0005776.DLL
                  Disinfection failed

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0005776.DLL
                  Deleted

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0006775.dll
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0006775.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{12E98A9A-AED0-49D6-9DB3-4810775E2598}\RP29\A0006775.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0450681.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0450681.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0450681.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0452015.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0452015.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP228\A0452015.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP229\A0453036.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP229\A0453036.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP229\A0453036.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0454420.exe
                  Infected with: Trojan.Downloader.Agent.JJ

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0454420.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0454420.exe
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467202.exe
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467202.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467202.exe
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467298.exe
                  Infected with: Trojan.Downloader.Agent.JJ

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467298.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0467298.exe
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0469991.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0469991.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP230\A0469991.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP231\A0471437.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP231\A0471437.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP231\A0471437.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP234\A0475162.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP234\A0475162.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP234\A0475162.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP235\A0477129.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP235\A0477129.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP235\A0477129.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0478288.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0478288.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0478288.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0479833.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0479833.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP236\A0479833.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP237\A0480472.exe
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP237\A0480472.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP237\A0480472.exe
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0481390.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0481390.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0481390.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0485813.dll
                  Infected with: DeepScan:Generic.Dialer.399ED41B

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0485813.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0485813.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492691.dll
                  Infected with: Trojan.BHO.WebPrefix.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492691.dll
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492691.dll
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492985.exe
                  Infected with: Trojan.Downloader.Winfixer.O

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492985.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0492985.exe
                  Deleted

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0500688.exe
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0500688.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{3E251302-CD81-4AC7-94DB-36F51B43C592}\RP238\A0500688.exe
                  Deleted

                  D:\System Volume Information\_restore{E72EFFE1-59F5-4B19-BD42-9A34A9F54CE6}\RP20\A0003742.exe
                  Detected with: Adware.Weboffer.A

                  D:\System Volume Information\_restore{E72EFFE1-59F5-4B19-BD42-9A34A9F54CE6}\RP20\A0003742.exe
                  Disinfection failed

                  D:\System Volume Information\_restore{E72EFFE1-59F5-4B19-BD42-9A34A9F54CE6}\RP20\A0003742.exe
                  Deleted

                  Logfile of HijackThis v1.99.1
                  Scan saved at 17:15:32, on 03/10/2006
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  D:\WINDOWS\System32\smss.exe
                  D:\WINDOWS\SYSTEM32\winlogon.exe
                  D:\WINDOWS\system32\services.exe
                  D:\WINDOWS\system32\lsass.exe
                  D:\WINDOWS\system32\Ati2evxx.exe
                  D:\WINDOWS\system32\svchost.exe
                  D:\WINDOWS\System32\svchost.exe
                  D:\WINDOWS\SYSTEM32\Ati2evxx.exe
                  D:\WINDOWS\system32\spoolsv.exe
                  D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  D:\WINDOWS\system32\drivers\CDAC11BA.EXE
                  D:\WINDOWS\system32\svchost.exe
                  D:\WINDOWS\Explorer.EXE
                  D:\WINDOWS\system32\WgaTray.exe
                  D:\WINDOWS\SOUNDMAN.EXE
                  D:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                  D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
                  D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
                  D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
                  D:\Program Files\AOL 9.0b\aoltray.exe
                  D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                  D:\WINDOWS\System32\svchost.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\Program Files\Winamp\Winamp.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\WINDOWS\system32\drwtsn32.exe
                  D:\Program Files\ewido anti-spyware 4.0\guard.exe
                  D:\Program Files\ewido anti-spyware 4.0\ewido.exe
                  D:\Program Files\AOL 9.0b\waol.exe
                  D:\Program Files\AOL 9.0b\shellmon.exe
                  D:\Program Files\Fichiers communs\Aol\aoltpspd.exe
                  D:\WINDOWS\XW.exe
                  D:\Program Files\telechargement\hijackthis_199\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                  R3 - Default URLSearchHook is missing
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
                  O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
                  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - D:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
                  O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
                  O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - D:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - D:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
                  O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
                  O4 - HKLM\..\Run: [AOLSAV] D:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                  O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
                  O4 - HKLM\..\Run: [AOLDialer] D:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
                  O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
                  O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:\Program Files\AOL 9.0b\aoltray.exe
                  O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                  O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
                  O8 - Extra context menu item: &Recherche AOL Toolbar - res://D:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
                  O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
                  O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
                  O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
                  O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
                  O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
                  O8 - Extra context menu item: Easy-WebPrint Imprimer - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
                  O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://D:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
                  O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
                  O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
                  O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
                  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\system32\Shdocvw.dll
                  O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
                  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{B475AB4F-A4D1-4DCA-ABAA-9DC1F00D1FE9}: NameServer = 205.188.146.145
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
                  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
                  O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\SYSTEM32\ati2sgag.exe
                  O23 - Service: C-DillaCdaC11BA - Macrovision - D:\WINDOWS\system32\drivers\CDAC11BA.EXE
                  O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
                  O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
                  0
                  1. Salut,

                    non, pas grave.

                    Alors ceci; D:\System Volume Information\_restore(voir rapport Bitdefender) indique que ta restauration du systeme etait infecté ou est infecté, pour être sûr, nous allons créer un point propre.

                    Clic sur "demarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du systeme"

                    ¤ coches la case "desactiver la Restauration du systéme sur tous les lecteurs", puis clic ur "appliquer"
                    ¤ decoches la case et clic sur "appliquer" puis "ok".

                    Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

                    Clic sur "demarrer", "tous les programmes", "accessoires", "outils système", "restauration du système", choisis "créer un point de restauration" nommes le " ccm" par exemple, cliques sur "créer" puis "ok".
                    Voilà, maintenant le point de restauration est créer si un jour tu décides tu pourra revenir en arriere à la date que tu l'as créer donc à ce jour; en fesant la marche arriére tu pourra remettre ton ordinateur à la date ou l'on à créer ce point de restauration mais tu perdra les modifications que tu aura faites entre deux.

                    dès que c'est fait installe un pare-feu

                    Désactive le pare-feu de Windows(SP2) il ne sert à rien puis installe celui ci pour plus de sécurité

                    Kerio: (pare-feu, qui reste gratuit après la periode d'essai!)
                    Kerio
                    -tutorial: pour configurer et comprendre l'utilisation de Kerio
                    https://kerio.probb.fr/

                    Clic sur démarrer, rechercher et supprime ce fichier:

                    XW.exe

                    *mode sans echec s'il persiste
                    0
                    1. genial!!!

                      plus de pubs , cette salopeirie de page a disparue et mon pc marche nickel

                      juste un truc chaque fois que je lance une application il me demade avec quoi l'ouvrir je lui met le fichier exe et impec ?

                      donc siça revient une simple restauration suffirait ?

                      Encore milles merci
                      0
                      1. Aie je n'arrive plus a lancer d'application a partir des icones je passe par demarrer executer

                        help!
                        0
                        1. si tu passes par démarrer, tous les programmes, <application> ça fonctionne ?
                          0
                          1. ça ne marche pas non plus

                            au debut j'avais l'option ouvrir dans proprietes icones j'ai fait reparer erreurs dans ccleaner depuis je n'ai pls l'option

                            A+
                            0
                            1. mouarf, essai de restaurer les fichiers nettoyé avec Ccleaner (sauvegarde)
                              ou essai de restaurer ton ordi à aujourd'hui ou hier au max :-)
                              0
                              1. comme je n'avais que qques erreurs je me suis dit pas besoin de sauvegarder

                                je ne sais pas comment faire une restauration a partir de la commande excuter (mode sans echecs peut etre ?)

                                les fichiers que m'a vire ccleaner etaient des clefs registre
                                a+
                                0
                                1. salut a toi

                                  j'ai reinstalle la cle HKEY CLASSES ROOT /.exe et tout remarche impec

                                  merci bien et a+
                                  0