probléme avec la messagerie de orange Fermé

Question

Bonsoir,

depuis un mois je suis infectée d'emails avec un objet en anglais et une adresse e-mail du style    	 Leopold Costa  	 beige right-handed et j'en reçois une dizaine par jour je les bloque directement en liste rouge mais de nouveaux arrivent

je ne sais plus quoi faire

merci de m'aider BONNE SOIREE

valou8080

^^Marie^^ · Answer

Bonsoir,

Fais ce qui suit


F -  Hijackthis - Outil de diagnostic et réparation 
lire démo 
http://pageperso.aol.fr/balltrap34/Hijenr.gif 
http://pageperso.aol.fr/balltrap34/demohijack.htm 
Télécharge version française ici 
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html 
Copie/colle le rapport 

Bon courage 

A++

VALOU8080 · Answer

voila le rapport

voila le rapport merci beaucoup
>
>
> Logfile of HijackThis v1.99.1
> Scan saved at 21:03:34, on 21/10/2006
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\system32\spoolsv.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.e

> xe
> C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.
> exe
> C:\WINDOWS\system32\ZoneLabs\vsmon.exe
> C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.ex

> e
> C:\WINDOWS\system32\wscntfy.exe
> C:\WINDOWS\system32\ctfmon.exe
> C:\WINDOWS\AGRSMMSG.exe
> C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
> C:\WINDOWS\system32\ZoomingHook.exe
> C:\WINDOWS\system32\TCtrlIOHook.exe
> C:\WINDOWS\system32\TPSMain.exe
> C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
> C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
> C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
> C:\WINDOWS\system32\dla	fswctrl.exe
> C:\WINDOWS\system32\igfxtray.exe
> C:\WINDOWS\system32\hkcmd.exe
> C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
> C:\Program Files\eTrust Internet Security Suite\caissdt.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyw
> are\PPActiveDetection.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.38

> 0.0\QOELoader.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray
> .exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.

> exe
> C:\Program Files\eTrust Internet Security Suite\eTrust Personal Firewall\ca
> .exe
> C:\Program Files\MSN Messenger\msnmsgr.exe
> C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
> C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
> C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
> C:\WINDOWS\system32\TPSBattM.exe
> C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
> C:\PROGRA~1\INCRED~1\bin\IMApp.exe
> C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
> C:\WINDOWS\system32\wuauclt.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Mozilla Firefox\firefox.exe
> C:\Program Files\Hijackthis Version Fran=C3
A7aise\VERSION TRADUITE ORIGINA
> LE.EXE
>
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page 
3D http://
> fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page 
3D http://s
> tart.incredimail.com/french
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL 
3D ht
> tp://fr.yahoo.com
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL 
3D 
> http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://fr.search.yah=
> oo.com
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page 
3D http://
> fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page 
3D http://f
> r.yahoo.com
> R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) 
3D http
> ://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://fr.search.yahoo.c=
> om
> R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext 
3D http:
> //192.168.3.1/ServicesAcces.html
> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName 
3D 
> Liens
> O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:

> \Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
> O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\W
> INDOWS\system32\dla	fswshx.dll
> O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
> O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
> O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
> O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
> O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
> O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom 

> TOSHIBA\SmoothView.exe
> O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
> O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
> O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
> O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symant
> ec Shared\Security Center\UsrPrmpt.exe
> O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
> O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
> O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
> O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suit

> e\caissdt.exe"
> O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security S
> uite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
> O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\eTrust Internet Security Su

> ite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
> O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\eTrust Internet Security Sui
> te\eTrust EZ Antivirus\CAVTray.exe"
> O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\eTrust Internet Security Suite

> \eTrust EZ Antivirus\CAVRID.exe"
> O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\eTrust Internet Secu
> rity Suite\eTrust Personal Firewall\ca.exe"
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMe

> ssenger.exe" -quiet
> O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /b
> ackground
> O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.ex=
> e /c
> O4 - Startup: OpenOffice.org 2.0.lnk 
3D C:\Program Files\OpenOffice.org 2.
> 0\program\quickstart.exe
> O4 - Startup: Stardock ObjectDock.lnk 
3D C:\WINDOWS\BricoPacks\Vista Inspi
> rat\ObjectDock\ObjectDock.exe
> O4 - Global Startup: Microsoft Office.lnk 
3D C:\Program Files\Microsoft Of
> fice\Office10\OSA.EXE
> O4 - Global Startup: Utilitaire r=C3
A9seau pour SAGEM Wi-Fi 11g USB adapte
> r.lnk 
3D ?
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\
> Program Files\Java\jre1.5.0\bin
pjpi150.dll
> O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-

> 00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
> O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\
> PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
> O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00

> 010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
> O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\
> PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\

> Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0
> 0C04F795683} - C:\Program Files\Messenger\msmsgs.exe
> O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http:/

> /messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
> O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:
> \Program Files\Yahoo!\Common\yinsthelper.dll
> O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Cla

> ss) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.ca
> b
> O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROG

> RA~1\MSNMES~1\MSGRAP~1.DLL
> O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~
> 1\MSNMES~1\MSGRAP~1.DLL
> O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
> O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
> O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Progr

> am Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
> O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Progr
> am Files\TOSHIBA\ConfigFree\CFSvcs.exe
> O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corpora

> tion - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\I
> DriverT.exe
> O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\b

> in\iPodService.exe
> O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program 
> Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
> O23 - Service: VET Message Service (VETMSGNT) - Computer Associates Interna

> tional, Inc. - C:\Program Files\eTrust Internet Security Suite\eTrust EZ An
> tivirus\VetMsg.exe
> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WI=
> NDOWS\system32\ZoneLabs\vsmon.exe
>
>
>
> > Message du 21/10/06 20:45
> > De : "Forums CCM" <forums@commentcamarche.com>
> > A : lacoudre.valerie@wanadoo.fr
> > Copie =C3=A0 :=20
> > Objet : =3D?ISO-8859-1?Q?Forum virus/s=3DE9curit=3DE9 - probl
3DE9me avec
>  la messagerie de orange - r=3DE9po=3D  nse de ^^Marie^^  ?=3D
> >=20
> > Bonjour,
> >=20
> > Vous avez demand=C3=A9 =C3=A0 recevoir les r=C3
A9ponses au message de VA
> LOU8080 intitul=C3=A9 =C2=AB probl=C3=A9me avec la messagerie de orange 
C2
> =BB datant du 21 octobre 2006 =C3=A0 20h31 post=C3=A9 dans =C2
AB Forum vir
> us/s=C3=A9curit=C3=A9 =C2=BB. Ce message vient de recevoir la r=C3
A9ponse 
> suivante de ^^Marie^^ :
> >=20

VALOU8080 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 18:11:19, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\eTrust Internet Security Suite\caissdt.exe
C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
C:\Program Files\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.3.1/ServicesAcces.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

MERCI D'avance

^^Marie^^ · Answer

Salut,

Fais ce qui suit
Stp
Merci

Télécharge ceci: (merci a S!RI pour ce programme). 
http://siri.urz.free.fr/Fix/SmitfraudFix.zip 
TUTO :: http://siri.urz.free.fr/Fix/SmitfraudFix.php

Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapport 
Copie/colle le sur le poste stp. 
---------------------------------------------------------------------------- 
Démarre en mode sans échec : 
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter 
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! 
(Si F8 ne marche pas utilise la touche F5). 
---------------------------------------------------------------------------- 
Relance le programme Smitfraud, 
Cette fois choisit l’option 2, répond oui a tous ; 
Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum

========================================
Refais un Hitjackthis

A++

> xe > C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe > C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.

> 0.0\QOELoader.exe > C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray

> exe > C:\Program Files\eTrust Internet Security Suite\eTrust Personal Firewall\ca

A7aise\VERSION TRADUITE ORIGINA

3D http://

3D http://s

3D ht

3D

3D http://

3D http://f

3D http

3D http:

3D

> \Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll > O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\W

> TOSHIBA\SmoothView.exe > O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe > O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe > O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe > O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symant

> e\caissdt.exe" > O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security S

> ite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe" > O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\eTrust Internet Security Sui

> \eTrust EZ Antivirus\CAVRID.exe" > O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\eTrust Internet Secu

> ssenger.exe" -quiet > O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /b

3D C:\Program Files\OpenOffice.org 2.

3D C:\WINDOWS\BricoPacks\Vista Inspi

3D C:\Program Files\Microsoft Of

A9seau pour SAGEM Wi-Fi 11g USB adapte

3D ? > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\

> 00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll > O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\

> 010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll > O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\

> Program Files\Messenger\msmsgs.exe > O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0

> /messenger.zone.msn.com/binary/msgrchkr.cab31267.cab > O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:

> ss) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.ca

> RA~1\MSNMES~1\MSGRAP~1.DLL > O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~

> am Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe > O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Progr

> tion - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\I

> in\iPodService.exe > O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program

> tional, Inc. - C:\Program Files\eTrust Internet Security Suite\eTrust EZ An

3DE9me avec

A9ponses au message de VA

C2

AB Forum vir

A9ponse

Discussions similaires

> xe
> C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.

> 0.0\QOELoader.exe
> C:\Program Files\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray

> exe
> C:\Program Files\eTrust Internet Security Suite\eTrust Personal Firewall\ca

> \Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
> O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\W

> TOSHIBA\SmoothView.exe
> O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
> O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
> O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
> O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symant

> e\caissdt.exe"
> O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security S

> ite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
> O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\eTrust Internet Security Sui

> \eTrust EZ Antivirus\CAVRID.exe"
> O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\eTrust Internet Secu

> ssenger.exe" -quiet
> O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /b

3D ?
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\

> 00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
> O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\

> 010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
> O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\

> Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0

> /messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
> O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:

> RA~1\MSNMES~1\MSGRAP~1.DLL
> O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~

> am Files\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
> O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Progr

> in\iPodService.exe
> O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program