Scvhost.exe

Résolu

marcus2a Messages postés 41 Statut Membre -
marcus2a Messages postés 41 Statut Membre - 14 déc. 2006 à 11:00

Bonjour à tous

merci pour votre aide: mon problème(scvhost.exe) s'est résolu en telechargeant spybot ( merci sathy91)et en faisant le ménage.

Je joins quand même un hijackthis pour les connaisseurs(lance-yien ou bleup!!) qui verront
peut être quelque chose de pas bon!!

Logfile of HijackThis v1.99.1
Scan saved at 17:03:50, on 09/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\eoRezo\EoEngine.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: Shell=Explorer.exe scvhost.exe
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: XBTB04715 - {A8B0BDED-64A5-495b-97DA-42C0301E229B} - (no file)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - (no file)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
O17 - HKLM\System\CCS\Services\Tcpip\..\{B6D2285F-90F1-40AD-B570-EF8D7AFBB57F}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F32DA218-94E4-4B5C-88F1-69C4954DCE72}: NameServer = 80.10.246.1 80.10.246.132
O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Afficher la suite

7 réponses

Réponse 1 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

bonjour marcus,

je t'avais proposé ça: scvhost exe#3

je te répète que ton pc est infecté si tu veux le désinfecter commences maintenant.
a+
0
1. marcus2a Messages postés 41 Statut Membre
  
  Salut lance-yien,
  
  J'ai fait ce que tu m'as dit et je te joins les 3 rapports.
  
  Je n'avais pas compris dés le départ!!
  
  a plus
  
  ---------------------------------------------------------
  AVG Anti-Spyware - Rapport d'analyse
  ---------------------------------------------------------
  
  + Créé à: 10:17:06 10/12/2006
  
  + Résultat de l'analyse:
  
  C:\Documents and Settings\Amadori\Mes documents\Downloads\Programs\Setup.exe -> Adware.180Solutions : Aucune action entreprise.
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP215\A0059238.exe -> Backdoor.VB.aym : Aucune action entreprise.
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP239\A0082195.exe -> Backdoor.VB.aym : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\Kick.txt -> Backdoor.Zapchast.NY : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\flooding.txt -> Backdoor.Zapchast.NY : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\operator.ini -> Backdoor.Zapchast.NY : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\updater.ini -> Backdoor.Zapchast.NY : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\updater1.ini -> Backdoor.Zapchast.NY : Aucune action entreprise.
  :mozilla.66:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.67:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.68:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.69:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.70:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.71:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.72:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.73:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
  :mozilla.101:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.18:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.6:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.7:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.8:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.9:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  C:\Documents and Settings\Amadori\Cookies\amadori@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
  :mozilla.74:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
  :mozilla.64:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
  :mozilla.78:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
  C:\Documents and Settings\Amadori\Cookies\amadori@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
  :mozilla.48:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
  :mozilla.12:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Sextracker : Aucune action entreprise.
  :mozilla.58:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Sextracker : Aucune action entreprise.
  :mozilla.108:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
  :mozilla.109:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
  :mozilla.110:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
  C:\Documents and Settings\Amadori\Cookies\amadori@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
  :mozilla.24:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.25:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.26:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.27:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.32:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.33:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Targetnet : Aucune action entreprise.
  :mozilla.79:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
  :mozilla.98:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
  :mozilla.19:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
  :mozilla.20:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
  :mozilla.21:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
  :mozilla.22:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
  :mozilla.23:C:\Documents and Settings\Amadori\Application Data\Mozilla\Firefox\Profiles\tl9yo267.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
  C:\WINDOWS\passview.dll -> Trojan.IcqSmiley.e : Aucune action entreprise.
  C:\WINDOWS\system32\drivers\etc\hosts -> Trojan.Qhosts : Aucune action entreprise.
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SHAR0PAJ\teller2[1].htm -> Trojan.Small : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\ident.txt -> Trojan.Zapchast.p : Aucune action entreprise.
  C:\WINDOWS\system32\dxdll\nick_vechi.txt -> Trojan.Zapchast.p : Aucune action entreprise.
  
  Fin du rapport
  
  BitDefender Online Scanner
  
  Scan report generated at: Sun, Dec 10, 2006 - 11:36:49
  
  Scan path: C:\;D:\;E:\;
  
  Statistics
  
  Time
  01:17:22
  
  Files
  609006
  
  Folders
  2953
  
  Boot Sectors
  3
  
  Archives
  16982
  
  Packed Files
  89616
  
  Results
  
  Identified Viruses
  7
  
  Infected Files
  14
  
  Suspect Files
  1
  
  Warnings
  0
  
  Disinfected
  0
  
  Deleted Files
  15
  
  Engines Info
  
  Virus Definitions
  328352
  
  Engine build
  AVCORE v1.0 (build 2368) (i386) (Nov 16 2006 11:31:19)
  
  Scan plugins
  14
  
  Archive plugins
  38
  
  Unpack plugins
  6
  
  E-mail plugins
  6
  
  System plugins
  1
  
  Scan Settings
  
  First Action
  Disinfect
  
  Second Action
  Delete
  
  Heuristics
  Yes
  
  Enable Warnings
  Yes
  
  Scanned Extensions
  *;
  
  Exclude Extensions
  
  Scan Emails
  Yes
  
  Scan Archives
  Yes
  
  Scan Packed
  Yes
  
  Scan Files
  Yes
  
  Scan Boot
  Yes
  
  Scanned File
  Status
  
  C:\Documents and Settings\Amadori\Application Data\Thunderbird\Profiles\lkgbngpb.default\Mail\Local Folders\Inbox=>(message 2166)=>[Subject: Please Update your account][Date: Fri, 15 Sep 2006 17:19:09 -0400]=>(message body)
  Infected with: Trojan.HTLM.BayFraud.A
  
  C:\Documents and Settings\Amadori\Application Data\Thunderbird\Profiles\lkgbngpb.default\Mail\Local Folders\Inbox=>(message 2166)=>[Subject: Please Update your account][Date: Fri, 15 Sep 2006 17:19:09 -0400]=>(message body)
  Disinfection failed
  
  C:\Documents and Settings\Amadori\Application Data\Thunderbird\Profiles\lkgbngpb.default\Mail\Local Folders\Inbox=>(message 2166)=>[Subject: Please Update your account][Date: Fri, 15 Sep 2006 17:19:09 -0400]=>(message body)
  Deleted
  
  C:\Documents and Settings\Amadori\Application Data\Thunderbird\Profiles\lkgbngpb.default\Mail\Local Folders\Inbox=>(message 2166)
  Updated
  
  C:\Documents and Settings\Amadori\Application Data\Thunderbird\Profiles\lkgbngpb.default\Mail\Local Folders\Inbox
  Update failed
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\G1ARGH6F\applyc1[1].gif
  Infected with: MemScan:Trojan.Obfuscator.A
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\G1ARGH6F\applyc1[1].gif
  Disinfection failed
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\G1ARGH6F\applyc1[1].gif
  Deleted
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KP67KHEF\Veracruz[1].exe
  Infected with: Trojan.Dropper.Vb.KK
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KP67KHEF\Veracruz[1].exe
  Disinfection failed
  
  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KP67KHEF\Veracruz[1].exe
  Deleted
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filAE510F01.dat=>(gzip)
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filAE510F01.dat=>(gzip)
  Disinfection failed
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filAE510F01.dat=>(gzip)
  Deleted
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filAE510F01.dat
  Update failed
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filBA9617D9.dat=>(gzip)
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filBA9617D9.dat=>(gzip)
  Disinfection failed
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filBA9617D9.dat=>(gzip)
  Deleted
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filBA9617D9.dat
  Update failed
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filE587E064.dat=>(gzip)
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filE587E064.dat=>(gzip)
  Disinfection failed
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filE587E064.dat=>(gzip)
  Deleted
  
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\filE587E064.dat
  Update failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP242\A0082824.exe=>(Embedded EXE 2o)
  Infected with: BehavesLike:Win32.ExplorerHijack
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP242\A0082824.exe=>(Embedded EXE 2o)
  Disinfection failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP242\A0082824.exe=>(Embedded EXE 2o)
  Deleted
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP242\A0082824.exe
  Update failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084056.dll
  Infected with: MemScan:Trojan.PWS.Iqsmile.A
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084056.dll
  Disinfection failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084056.dll
  Deleted
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084057.ini
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084057.ini
  Disinfection failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084057.ini
  Deleted
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084058.ini
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084058.ini
  Disinfection failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084058.ini
  Deleted
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084059.ini
  Infected with: Backdoor.IRC.Zapchast.NY
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084059.ini
  Disinfection failed
  
  C:\System Volume Information\_restore{3EBF6CDC-FE4D-495E-AD57-18C35177B13B}\RP246\A0084059.ini
  Deleted
  
  C:\usbwx.exe
  Infected with: MemScan:Trojan.Obfuscator.A
  
  C:\usbwx.exe
  Disinfection failed
  
  C:\usbwx.exe
  Deleted
  
  C:\WINDOWS\system32\dxdll\away.txt
  Infected with: Win32.Worm.IRC.Tedeto.A
  
  C:\WINDOWS\system32\dxdll\away.txt
  Deleted
  
  C:\WINDOWS\system32\dxdll\fullname.txt
  Suspected of: Backdoor.IRC.Zapchast.NY
  
  C:\WINDOWS\system32\dxdll\fullname.txt
  Disinfection failed
  
  C:\WINDOWS\system32\dxdll\fullname.txt
  Deleted
  
  C:\WINDOWS\system32\dxdll\injuraturi.txt
  Infected with: Win32.Worm.IRC.Tedeto.A
  
  C:\WINDOWS\system32\dxdll\injuraturi.txt
  Deleted
  
  Logfile of HijackThis v1.99.1
  Scan saved at 14:20:46, on 10/12/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
  C:\Program Files\VIAudioi\SBADeck\ADeck.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
  C:\Program Files\eoRezo\EoEngine.exe
  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
  C:\Program Files\Internet Download Manager\IDMan.exe
  C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
  C:\PROGRA~1\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\PROGRA~1\Wanadoo\Watch.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
  C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  F2 - REG:system.ini: Shell=Explorer.exe
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
  O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
  O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
  O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
  O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
  O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
  O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
  O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
  O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
  O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
  O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CCS\Services\Tcpip\..\{B6D2285F-90F1-40AD-B570-EF8D7AFBB57F}: NameServer = 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\..\{F32DA218-94E4-4B5C-88F1-69C4954DCE72}: NameServer = 80.10.246.130 80.10.246.3
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  
  Merci
  
  0
Réponse 2 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

re,

note très importante:
1°) ce qui suit doit être imprimé ou enregistré dans un fichier texte sur le bureau pour utilisation en "mode sans échec (donc forum inaccessible)
2°) les utilitaires indiqués doivent être téléchargés, installés et mis à jour en "mode normal" avant toute utilisation.3°) démarrer en mode sans échec et utiliser les utilitaires dans l'ordre.

** télécharges et installes « CCleaner » si tu ne l’as pas déjà: https://www.clubic.com/telecharger-fiche14492-ccleaner.html
- ouvres le dossier « prefetch » qui se trouve ici: c:\windows\prefetch sélectionnes tout son contenu et clic sur « supprimer les... », confirmes, et fermes tout à la fin.
lances-le « ccleaner »
Clic sur « Options » > « Avancé » et décoches la case « Effacer uniquement ...que 48 heures ».
clic sur « erreurs » (à gauche) coches toutes les cases (sauf la dernière), puis
clic sur « chercher des erreurs » une fois fini,
clic sur « réparer les erreurs »
au message pour sauvegarder la base de registre clic « oui »
dans la fenêtre qui apparaît clic sur « corriger toutes les erreurs » puis sur « ok »
recommencer jusqu’a ce qu’il n’y aie plus d’erreurs.
dans la colonne de gauche clic sur « nettoyeur »puis « analyse ».
attendre la fin et clic sur « lancer le nettoyage » autant de fois que nécessaire.

** télécharges « spybot » si tu ne l’as pas déjà: https://www.clubic.com/telecharger-fiche10965-spybot-search-and-destroy.html
lances le apres install. >
dans « langue » choisis « fr » (si besoin est)
dans « mode » choisir « mode avancé »
clic sur « réglages » (à gauche) >> « modules add. », coches toutes les cases sauf la dernière (traceur...)
reviens sur l'onglet "spybot-S&D" (à gauche) cliques sur "vérif tout"
quand c'est fini supprimes tt ce q’il trouve en cliquant sur "corriger..."
(s'il te propose de redémarrer le pc pour finir le nettoyage acceptes et laisses-le faire, (mais dès que c'est fini redémarres en mode sans echec et continues les étapes)
utilises la rubrique "aide" si nécssaire

** télécharges "AVG Anti-Spyware" (pour WinXP et 2000) si tu ne l’as pas déjà:
https://www.avg.com/en-ww/free-antivirus-download
Cliques sur "mise à jour " puis clic sur "Analyse" > "Paramètres" > "Comment réagir"
dans le menu déroulant choisir "Supprimer"
à la fin:clic sur "Appliquer toutes les Actions".
Tuto ici : https://www.malekal.com/tutorial-et-guide-ewido-v4/
Et ici: https://www.pcparadise.fr ((merci kevlar))

** redémarres en "mode normal" vérifies s'il n'y a pas d'anomalies constatées et supprimes les anciens points de restauration:
clic droit sur "poste de travail" > "propriétés" > "restau
système" > coches la case "désacticer..." > "appl."
quand c'est près décoches cette même case > "ok"
> fermes tout et redémarres ton pc.

** au retour lances "hijackthis" > "faire un scan et sauvegarder le log"
à la fin un fichier texte s'ouvre copies/ colles, ici, son contenu complet avec tes commentaires

a+
0
1. marcus2a Messages postés 41 Statut Membre
  
  Bonjour,
  
  c'est chose faite.
  
  voci le scan hijackthis
  
  Merci
  
  Logfile of HijackThis v1.99.1
  Scan saved at 19:00:15, on 10/12/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
  C:\Program Files\VIAudioi\SBADeck\ADeck.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
  C:\Program Files\eoRezo\EoEngine.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
  C:\Program Files\Internet Download Manager\IDMan.exe
  C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\PROGRA~1\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\WINDOWS\system32\wuauclt.exe
  C:\PROGRA~1\Wanadoo\Watch.exe
  C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  F2 - REG:system.ini: Shell=Explorer.exe
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
  O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
  O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
  O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
  O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
  O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
  O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
  O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
  O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
  O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
  O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CCS\Services\Tcpip\..\{B6D2285F-90F1-40AD-B570-EF8D7AFBB57F}: NameServer = 192.168.1.1
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  
  a plus
  
  0
Réponse 3 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

bonjour marcus2a,

c'est une impression ou est-ce que tu as zapé "spybot" au post <3>
dans le doute repasses-le comme expliqué et envoies un nouveau hijackthis
a+
0
1. marcus2a Messages postés 41 Statut Membre
  
  Re Lance_yien,
  
  j'ai refait skybot mais il n'a rien trouvé.
  
  voici hijackthis
  
  Logfile of HijackThis v1.99.1
  Scan saved at 15:10:44, on 11/12/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
  C:\Program Files\VIAudioi\SBADeck\ADeck.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
  C:\Program Files\eoRezo\EoEngine.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
  C:\Program Files\Internet Download Manager\IDMan.exe
  C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  F2 - REG:system.ini: Shell=Explorer.exe
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
  O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
  O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
  O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
  O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
  O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
  O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
  O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
  O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
  O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
  O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CCS\Services\Tcpip\..\{B6D2285F-90F1-40AD-B570-EF8D7AFBB57F}: NameServer = 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\..\{F32DA218-94E4-4B5C-88F1-69C4954DCE72}: NameServer = 80.10.246.130 80.10.246.3
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  
  a plus
  
  0
Réponse 4 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

bonjour marcus2a,

Télécharges: http://www.cexx.org/LSPFix.exe

Lance LSPFix
Déconnectes-toi d'Internet et fermes toutes les fenêtres d'Internet Explorer.
Coches la case "I know what I'm doing"
Sélectionnes tout ce qui contient: idmmbc.dll
(si rien fermes LSPfix)
et fais les glisser du panneau de gauche "keep" au panneau de droite "Remove".
Cliques sur le bouton "Finish" et redémarres ton pc
0
1. marcus2a Messages postés 41 Statut Membre
  
  Bonjour Lance_yien,
  
  J'ai effectué les opérations que tu as precrites.
  
  je connais ces 2 programmes intenet download manager et druide.
  
  voici un nouveau log
  Logfile of HijackThis v1.99.1
  Scan saved at 09:44:48, on 13/12/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
  C:\Program Files\VIAudioi\SBADeck\ADeck.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
  C:\Program Files\eoRezo\EoEngine.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
  C:\Program Files\Internet Download Manager\IDMan.exe
  C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
  F2 - REG:system.ini: Shell=Explorer.exe
  O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
  O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
  O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
  O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
  O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
  O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
  O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
  O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
  O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
  O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
  O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CCS\Services\Tcpip\..\{F32DA218-94E4-4B5C-88F1-69C4954DCE72}: NameServer = 80.10.246.1 80.10.246.132
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  
  Le problème scvhost.exe a disparu et je t'en remercie bien.
  
  a plus
  
  0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

bonjour marcus2a,

avant de fermer le post:
comment ça s'est passé avec LSPFix?
as-tu trouver toutes les instances idmmbc.dll et quel en était le resultat?

si nécessaire refait la manip.
0
1. marcus2a Messages postés 41 Statut Membre
  
  Re Lance_yien,
  
  Lorsque j'ai supprimé idmmbc.dll avecLSPFIX, j'ai un message à l'ouverture:
  
  "l'intégration réseau d'IDM a été supprimée par une autre application.Voulez vous restaurer l'intégration réseau d'Internet Download Manager?"
  
  J'ai répondu non une première fois mais ce message réapparait à chaque démérrage.
  
  J'ai répondu oui et ce message a disparu.
  
  dois je le supprimer quand même ou annuler l'intégration avancée sur internet download manager?
  
  a plus
  
  0
2. marcus2a Messages postés 41 Statut Membre
  
  Ok Lance_yien,
  
  c'est fait; voici le dernier rapport.
  
  a plus
  
  Logfile of HijackThis v1.99.1
  Scan saved at 18:50:56, on 13/12/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
  C:\Program Files\VIAudioi\SBADeck\ADeck.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
  C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
  C:\Program Files\eoRezo\EoEngine.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
  C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
  C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Wanadoo\GestionnaireInternet.exe
  C:\Program Files\Wanadoo\ComComp.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Wanadoo\Watch.exe
  C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
  C:\Documents and Settings\Amadori\Bureau\NETTOYAGE\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  F2 - REG:system.ini: Shell=Explorer.exe
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
  O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
  O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
  O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
  O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
  O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
  O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
  O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
  O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
  O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
  O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
  O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
  O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
  O17 - HKLM\System\CCS\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CCS\Services\Tcpip\..\{F32DA218-94E4-4B5C-88F1-69C4954DCE72}: NameServer = 80.10.246.1 80.10.246.132
  O17 - HKLM\System\CS1\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O17 - HKLM\System\CS2\Services\Tcpip\..\{3286F393-E7FA-4856-A85A-0E8A8BF58BAA}: NameServer = 80.10.246.2,80.10.246.29
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
  O23 - Service: Windows Security Drivers (csrs) - Unknown owner - C:\WINDOWS\csrss.exe (file missing)
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  
  0
Réponse 6 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

re,

hé ben voilà!
ton pb vient "download manager":
désinstalles-le par "ajout &suppr des prog", supprimes tous les dossier le concernant au cas où il en laisse, passes ccleaner comme indiqué dans un post précédent,
passes LSPFix
et relance hijackthis pour "fixer les lignes indiquées au <9>
redémarres et post un nouveau rapport
a+
0
Réponse 7 / 7
lance_yien Messages postés 2771 Date d'inscription Statut Contributeur 257

re,

ça roule!
bien content pour toi
bonne chance
0
1. marcus2a Messages postés 41 Statut Membre
  
  Salut Lance_yien,
  
  merci pour ton aide et à bientôt!!
  
  0

Newsletters