[Scan] HijackThis

Djib -  
Salut à tous! Alors voila mon scan HijackThis merci de m'aider je crois avoir compris que mon pc n'est pas en tres bon etat...

Logfile of HijackThis v1.99.1
Scan saved at 12:43:57, on 24/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\csrss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
H:\AVG\AVG Anti-Spyware 7.5\guard.exe
F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
F:\WINDOWS\System32\FTRTSVC.exe
F:\WINDOWS\System32\nvsvc32.exe
F:\WINDOWS\system32\pctspk.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\wdfmgr.exe
F:\WINDOWS\System32\UAService7.exe
F:\Program Files\Inventel\Gateway\wlancfg.exe
F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
F:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
F:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
F:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
F:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
F:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
F:\WINDOWS\System32\taskdir.exe
F:\WINDOWS\inet20000\wpcem.exe
F:\Program Files\MSN Messenger\msnmsgr.exe
F:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
F:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
F:\WINDOWS\explorer.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - F:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2499A589-012C-4A99-87F4-6EC0DC55360B} - F:\WINDOWS\System32\jaig.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - F:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Djib\Free Download Manager\iefdmcks.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - (no file)
O4 - HKLM\..\Run: [MSConfig] F:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
O4 - HKLM\..\Run: [Microsoft WPCEmail] F:\WINDOWS\inet20000\svchost.exe
O4 - HKCU\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
O4 - HKCU\..\Run: [taskdir] F:\WINDOWS\System32\taskdir.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://H:\Djib\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://H:\Djib\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://H:\Djib\Free Download Manager\dllink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - http://contacts.wanadoo.fr/wfr_webab/VoxsyncX.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2739b1d29a132535ad17/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/180solutions/ie/bridge-c266.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{3F80BBEC-8070-4029-A464-C317BC2BC4FD}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{516F8295-E569-4DAD-898B-B436D0AC657D}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{651BB814-7BA9-4003-BCEC-D2415EF6E2B9}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD8D1BF8-7A80-4862-8EAE-375076D1E1A2}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{DEF27E68-4490-4024-9B58-7DC6815F935D}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE785966-5BB8-482D-B1C1-97F83EBEA499}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16
O17 - HKLM\System\CS4\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CS5\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16
O17 - HKLM\System\CS5\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Filter: text/html - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
O18 - Filter: text/plain - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
O20 - Winlogon Notify: obbn13t - obbn13t.dll (file missing)
O20 - Winlogon Notify: psksds - psksds.dll (file missing)
O20 - Winlogon Notify: WB - F:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll
O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - H:\AVG\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: EpsonBidirectionalService - Unknown owner - F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - F:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - F:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - F:\WINDOWS\system32\pctspk.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - F:\WINDOWS\System32\UAService7.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - F:\Program Files\Inventel\Gateway\wlancfg.exe
Configuration: Windows XP
Internet Explorer 6.0

8 réponses

  1.  ^^Marie^^
    Salut

    Commençe par ça

    017 è NAME SERVER

    Télécharge Fixwareout à partir d'un des deux sites sur ton bureau :
    http://downloads.subratam.org/Fixwareout.exe
    http://swandog46.geekstogo.com/Fixwareout.exe

    Lance le fix : clique sur "Next" -> "Install" et assure toi que "Run fixit" est activé puis clique sur "Finish".
    Le fix va alors commencer - suis les messages à l'écran.
    Il te sera demandé de redémarrer ton ordinateur, fais le.
    Ton système mettra un peu plus de temps au démarrage, c'est normal.

    Quand ton système aura redémarré, suis les invites des messages. Ensuite, lance HijackThis, puis clique sur “Do a system scan only” et coche ces lignes puis clique sur "Fix checked":

    …/…

    À la fin du fix, tu auras peut-être encore besoin de redémarrer le PC.

    Au final, copie/colle le contenu du rapport qui va s'afficher à l'écran (report.txt) avec un nouveau rapport HijackThis.

    Télécharge ceci pour récupérer ta connexion : au cas où ::

    http://babin.nelly.free.fr/WinsockFix.zip
    0
    1. Djib
      Excuse moi j'ai du louper un truc mais une fois le premier redemarrage de mon pc je lance HijackThis mais je coche quelles lignes?
      0
      1. ^^Marie^^
        Excuse j'ai oublié les lignes

        O17 - HKLM\System\CCS\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{3F80BBEC-8070-4029-A464-C317BC2BC4FD}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{516F8295-E569-4DAD-898B-B436D0AC657D}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{651BB814-7BA9-4003-BCEC-D2415EF6E2B9}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{DD8D1BF8-7A80-4862-8EAE-375076D1E1A2}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{DEF27E68-4490-4024-9B58-7DC6815F935D}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\..\{EE785966-5BB8-482D-B1C1-97F83EBEA499}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16
        O17 - HKLM\System\CS4\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CS5\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16
        O17 - HKLM\System\CS5\Services\Tcpip\..\{03C8C463-1664-446E-AAA4-77C0BD8C1083}: NameServer = 85.255.113.116,85.255.112.16
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.116 85.255.112.16

        LOL

        0
        1. Djib
          Voila les deux rapport :

          Logfile of HijackThis v1.99.1
          Scan saved at 14:46:06, on 24/12/2006
          Platform: Windows XP SP1 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

          Running processes:
          F:\WINDOWS\System32\smss.exe
          F:\WINDOWS\system32\winlogon.exe
          F:\WINDOWS\system32\services.exe
          F:\WINDOWS\system32\lsass.exe
          F:\WINDOWS\system32\svchost.exe
          F:\WINDOWS\System32\svchost.exe
          F:\WINDOWS\system32\spoolsv.exe
          F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
          H:\AVG\AVG Anti-Spyware 7.5\guard.exe
          F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
          F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
          F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
          F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
          F:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
          F:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
          F:\WINDOWS\System32\FTRTSVC.exe
          F:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
          F:\WINDOWS\System32\nvsvc32.exe
          F:\WINDOWS\system32\pctspk.exe
          F:\WINDOWS\System32\svchost.exe
          F:\WINDOWS\System32\UAService7.exe
          F:\WINDOWS\Explorer.EXE
          F:\Program Files\Inventel\Gateway\wlancfg.exe
          F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
          F:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
          F:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
          F:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
          F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
          F:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
          F:\WINDOWS\System32\taskdir.exe
          F:\Program Files\MSN Messenger\msnmsgr.exe
          F:\Program Files\Internet Explorer\IEXPLORE.EXE
          F:\HijackThis\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - F:\PROGRA~1\Wanadoo\SEARCH~1.DLL
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {2499A589-012C-4A99-87F4-6EC0DC55360B} - F:\WINDOWS\System32\jaig.dll (file missing)
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - F:\WINDOWS\system32\dla\tfswshx.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Djib\Free Download Manager\iefdmcks.dll
          O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
          O4 - HKLM\..\Run: [MSConfig] F:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
          O4 - HKLM\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
          O4 - HKLM\..\Run: [Microsoft WPCEmail] F:\WINDOWS\inet20000\svchost.exe
          O4 - HKCU\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
          O4 - HKCU\..\Run: [taskdir] F:\WINDOWS\System32\taskdir.exe
          O8 - Extra context menu item: Download all with Free Download Manager - file://H:\Djib\Free Download Manager\dlall.htm
          O8 - Extra context menu item: Download selected with Free Download Manager - file://H:\Djib\Free Download Manager\dlselected.htm
          O8 - Extra context menu item: Download with Free Download Manager - file://H:\Djib\Free Download Manager\dllink.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
          O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
          O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
          O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
          O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - http://contacts.wanadoo.fr/wfr_webab/VoxsyncX.cab
          O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2739b1d29a132535ad17/netzip/RdxIE601_fr.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/180solutions/ie/bridge-c266.cab
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O18 - Filter: text/html - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
          O18 - Filter: text/plain - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
          O20 - Winlogon Notify: obbn13t - obbn13t.dll (file missing)
          O20 - Winlogon Notify: psksds - psksds.dll (file missing)
          O20 - Winlogon Notify: WB - F:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll
          O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - H:\AVG\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
          O23 - Service: EpsonBidirectionalService - Unknown owner - F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
          O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
          O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
          O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - F:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
          O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
          O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
          O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
          O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\fswsclds.exe
          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - F:\WINDOWS\System32\FTRTSVC.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
          O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - F:\WINDOWS\system32\pctspk.exe
          O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - F:\WINDOWS\System32\UAService7.exe
          O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - F:\Program Files\Inventel\Gateway\wlancfg.exe

          Fixwareout
          Last edited 12/06/2006
          Post this report in the forums please
          ...
          Prerun check
          [HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "System"="csigl.exe"

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "dmptu.exe"="F:\\WINDOWS\\System32\\dmptu.exe"

          ...
          ...
          Reg Entries that were deleted
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}B5FEE7EB02F0-6FA8-64B4-AA0F-B4281121{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}E2A66753B4EC-07E8-0DF4-8699-E13CB312{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}AA2677CD5656-C009-9844-B0C8-3B174197{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}7D507C81DBBA-94F9-DA44-2634-4479D265{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}9359A82FF3DD-D4E8-7B44-B936-9BA520B4{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}99C2FF9B851D-5BA8-6034-D121-343D2945{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}4D16C5FAF06C-0ED8-19D4-208C-D734BA4B{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}63AFE32EA979-B1D8-8ED4-B1C6-46730A8E{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}215565DE456E-E83B-06D4-729F-948F2454{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}85FA9AC72780-99EA-C474-174F-ACDCCEEF{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}C0160C529759-2879-1C24-3BDE-7882ADEC{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}68BA0A5987EA-0CF8-2534-AD4E-666DB000{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}8A05105EDADD-CB3A-9C74-E662-210F0052{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}BDB73CC3B9B0-CC8A-5604-BF8E-CF0F3D24{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\utpmd
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}E6F32FAB4F1D-5F3A-57D4-33F8-EC82D5A8{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}E4674FE70FBD-2A18-BA84-59CF-BB08A610{
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\vqkmd
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\swen
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ogol
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eno
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llun
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\owt
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eerht
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ruof
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\evif
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\0mdm
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\1mdm
          ...

          Random Runs removed from HKLM
          "dmptu.exe"=-
          ...
          ...

          PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

          »»»»» Searching by size/names...

          »»»»»
          Search five digit cs, dm kd and jb files.
          This WILL/CAN also list Legit Files, Submit them at Virustotal
          F:\WINDOWS\SYSTEM32\DMKQV.EXE 61 023 2002-08-29

          Other suspects.
          F:\WINDOWS\System32\{000BD666-E4DA-4352-8FC0-AE7895A0AB86}.exe
          F:\WINDOWS\System32\{016A80BB-FC95-48AB-81A2-DBF07EF4764E}.exe
          F:\WINDOWS\System32\{42D3F0FC-E8FB-4065-A8CC-0B9B3CC37BDB}.exe

          »»»»» Misc files.
          F:\WINDOWS\System32\taskdir.exe

          »»»»» Checking for older varients covered by the Rem3 tool.
          ...
          Postrun check
          [HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "system"=""

          ...
          0
          2. ^^Marie^^
            On continue

            1°/ - Télécharge le logiciel SmitfraudFix ((crée par S!Ri J)
            http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le.

            En image :
            http://siri.urz.free.fr/Fix/SmitfraudFix.php

            tu le décompresses tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1
            cela vas générer un rapport.
            Copie/colle le rapport

            Redémarres le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) et tu choisis le mode sans échec)

            - Ouvre le dossier "SmitfraudFix" et double clic sur "Smitfraudfix.cmd", choisit l’option 2 et tu réponds oui à tout.

            Copie/colle le rapport sur le forum stp.

            Refais un hitjackthis
            0
            1. Djib
              Alors voila le premier rapport SmitFraudFix:
              SmitFraudFix v2.131

              Rapport fait à 15:05:34,09, 24/12/2006
              Executé à partir de H:\SmitfraudFix\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
              Le type du système de fichiers est NTFS
              Fix executé en mode sans echec

              »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

              GenericRenosFix by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

              F:\WINDOWS\system32\taskdir.exe supprimé
              F:\WINDOWS\system32\z11.exe supprimé
              F:\WINDOWS\system32\z12.exe supprimé
              F:\WINDOWS\system32\z13.exe supprimé
              F:\WINDOWS\system32\z14.exe supprimé
              F:\WINDOWS\system32\z15.exe supprimé
              F:\WINDOWS\system32\z16.exe supprimé
              F:\WINDOWS\system32\zlbw.dll supprimé

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
              "system"=""

              »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

              Nettoyage terminé.

              »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Fin

              Le deuxieme apres le passage en mode sans echec:
              SmitFraudFix v2.131

              Rapport fait à 15:05:34,09, 24/12/2006
              Executé à partir de H:\SmitfraudFix\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
              Le type du système de fichiers est NTFS
              Fix executé en mode sans echec

              »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

              GenericRenosFix by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

              F:\WINDOWS\system32\taskdir.exe supprimé
              F:\WINDOWS\system32\z11.exe supprimé
              F:\WINDOWS\system32\z12.exe supprimé
              F:\WINDOWS\system32\z13.exe supprimé
              F:\WINDOWS\system32\z14.exe supprimé
              F:\WINDOWS\system32\z15.exe supprimé
              F:\WINDOWS\system32\z16.exe supprimé
              F:\WINDOWS\system32\zlbw.dll supprimé

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
              "system"=""

              »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

              Nettoyage terminé.

              »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Fin

              Et pour finir celui d'HijackThis:
              Logfile of HijackThis v1.99.1
              Scan saved at 15:11:14, on 24/12/2006
              Platform: Windows XP SP1 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

              Running processes:
              F:\WINDOWS\System32\smss.exe
              F:\WINDOWS\system32\winlogon.exe
              F:\WINDOWS\system32\services.exe
              F:\WINDOWS\system32\lsass.exe
              F:\WINDOWS\system32\svchost.exe
              F:\WINDOWS\System32\svchost.exe
              F:\WINDOWS\system32\spoolsv.exe
              F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
              H:\AVG\AVG Anti-Spyware 7.5\guard.exe
              F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
              F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
              F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
              F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
              F:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
              F:\WINDOWS\System32\FTRTSVC.exe
              F:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
              F:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
              F:\WINDOWS\System32\nvsvc32.exe
              F:\WINDOWS\system32\pctspk.exe
              F:\WINDOWS\System32\svchost.exe
              F:\WINDOWS\Explorer.EXE
              F:\WINDOWS\System32\UAService7.exe
              F:\Program Files\Inventel\Gateway\wlancfg.exe
              F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
              F:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
              F:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
              F:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
              F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
              F:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
              F:\HijackThis\HijackThis.exe
              F:\Program Files\Internet Explorer\IEXPLORE.EXE

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
              R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - F:\PROGRA~1\Wanadoo\SEARCH~1.DLL
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {2499A589-012C-4A99-87F4-6EC0DC55360B} - F:\WINDOWS\System32\jaig.dll (file missing)
              O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - F:\WINDOWS\system32\dla\tfswshx.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - H:\Djib\Free Download Manager\iefdmcks.dll
              O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
              O4 - HKLM\..\Run: [MSConfig] F:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
              O4 - HKLM\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
              O4 - HKLM\..\Run: [Microsoft WPCEmail] F:\WINDOWS\inet20000\svchost.exe
              O4 - HKCU\..\Run: [system spool] F:\WINDOWS\System32\syspools.exe
              O8 - Extra context menu item: Download all with Free Download Manager - file://H:\Djib\Free Download Manager\dlall.htm
              O8 - Extra context menu item: Download selected with Free Download Manager - file://H:\Djib\Free Download Manager\dlselected.htm
              O8 - Extra context menu item: Download with Free Download Manager - file://H:\Djib\Free Download Manager\dllink.htm
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
              O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - F:\WINDOWS\web\related.htm
              O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
              O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
              O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
              O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - http://contacts.wanadoo.fr/wfr_webab/VoxsyncX.cab
              O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2739b1d29a132535ad17/netzip/RdxIE601_fr.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/180solutions/ie/bridge-c266.cab
              O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
              O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
              O18 - Filter: text/html - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
              O18 - Filter: text/plain - {93F9BDDA-7098-453D-86E1-61A587196BA9} - F:\WINDOWS\System32\jaig.dll
              O20 - Winlogon Notify: obbn13t - obbn13t.dll (file missing)
              O20 - Winlogon Notify: psksds - psksds.dll (file missing)
              O20 - Winlogon Notify: WB - F:\Program Files\Stardock\Object Desktop\ThemeManager\fastload.dll
              O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - H:\AVG\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - F:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
              O23 - Service: EpsonBidirectionalService - Unknown owner - F:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
              O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - F:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
              O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - F:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
              O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
              O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
              O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
              O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - F:\Program Files\Securitoo\av_fw\fswsclds.exe
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - F:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
              O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - F:\WINDOWS\system32\pctspk.exe
              O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - F:\WINDOWS\System32\UAService7.exe
              O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - F:\Program Files\Inventel\Gateway\wlancfg.exe
              0
              1. ^^Marie^^
                Salut

                Le premier rapport smitfraud doit être fait en mode NORMAL
                Et le second en SANS ECHEC

                Refais le
                stp
                merci

                A++
                0
                1. Utilisateur anonyme
                  Lol Marie

                  "Fix executé en mode sans echec " :P

                  Pére noël n'a pas pensé au lunette :P
                  0

                  Discussions similaires

                  Scan manga m'a bloqué
                  Mia

                  5 réponses
                  Bloqué de scan manga
                  Am43768

                  1 réponse
                  IJ Scan utility
                  ministratif

                  3 réponses
                  Où sont stockés les QR codes sur android ?
                  zatox19

                  11 réponses
                  Problème lecture Scan manga
                  léa

                  14 réponses