Mon ordi est assailli de pub

Résolu
contempo Messages postés 10 Date d'inscription   Statut Membre -  
^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   -
Bonjour à toutes et à tous,

Cela fait un moment que j'ai sollicité l'aide de ce forum en ce qui concerne ce raport ci-dessous, mais malheureuresement je n'ai pas encore reçu des réponses. Veuillez m'aider s'ils vous plait, mon ordi est assailli de pub intempésptive et qu'il est devenu trés lourd.

Merci d'avance pour votre aide.

Logfile of HijackThis v1.99.1
Scan saved at 18:08:26, on 31/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
Configuration: Windows XP
Internet Explorer 7.0

9 réponses

  1. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Bonjour,

    Peux tu me définir ton anti-virus et ton pare-feu ??

    On va començer avec ce log pour les pubs

    Télécharge Blacklight(de F-Secure) a l’une des 2 adresses :
    https://www.f-secure.com/en
    https://www.f-secure.com/en

    et sauvegarde le sur ton Bureau.

    Double-clique blbeta.exeet accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie/colle le rapport

    Bon courage

    A++

    0
  2. contempo Messages postés 10 Date d'inscription   Statut Membre
     
    Merci Marie,

    L'anti-virus est AVGfree edition, et le pare-feu est Windows.

    les deux fichiers sont:

    rebonjour#2007 01 15%2015%3A48%3A5701/15/07 16:19:49 [Info]: BlackLight Engine 1.0.55 initialized
    01/15/07 16:19:49 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    01/15/07 16:19:49 [Note]: 7019 4
    01/15/07 16:19:49 [Note]: 7005 0
    01/15/07 16:19:49 [Note]: 7006 0
    01/15/07 16:20:02 [Note]: 7011 1976
    01/15/07 16:20:02 [Note]: 8001 2
    01/15/07 16:20:06 [Note]: FSRAW library version 1.7.1021

    01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
    01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    01/15/07 16:17:35 [Note]: 7019 4
    01/15/07 16:17:35 [Note]: 7005 0
    01/15/07 16:17:35 [Note]: 7006 0
    01/15/07 16:17:36 [Note]: 7011 1976
    01/15/07 16:17:36 [Note]: 7026 0
    01/15/07 16:17:36 [Note]: 7026 0
    01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
    01/15/07 16:20:02 [Note]: 7007 0
    0
  3. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Ok

    Faut installer un pare-feu.
    Le pare-feu windows n'est pas efficace
    Faut trouver un pare-feu qui s'associe avec ton anti-viru

    Ensuite

    C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis.zip\HijackThis.exe
    Il est mal placé, faudra le refaire aussi.

    Fait le nettoyage qui suit

    Télécharge (sauf si tu les as) et colle les 3 rapports dans l’ordre

    A - ad-aware version 1.06
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo
    http://pageperso.aol.fr/balltrap34/adwseflash.zip

    B - spybot version 1.4
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo d utilisation
    http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

    C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
    Télécharge ici :
    https://www.ccleaner.com/ccleaner/download
    Tutorial ici:
    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
    et
    http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

    D – Ewido – AVG
    AVG Anti-Spyware :
    https://www.avg.com/en-ww/free-antivirus-download
    Tu l'installes.
    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente!

    Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    /!\ Si un fichier est infecté en fin d'analyse /!\
    choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
    Enregistre ce fichier texte sur ton bureau.
    Copie/colle le rapport

    E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
    https://assiste.com/404_La_page_demandee_n_existe_pas.php
    http://www.bitdefender.fr/scan8/ie.html
    TUTO
    http://pageperso.aol.fr/rginformatique/mapage/defender.htm
    Copie/COLLE le rapport entier

    F - Hijackthis - Outil de diagnostic et réparation
    lire démo
    http://pageperso.aol.fr/balltrap34/Hijenr.gif
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    Télécharge version française ici
    http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
    Copie/colle le rapport

    Bon courage

    A++
    0
    1. contempo Messages postés 10 Date d'inscription   Statut Membre
       
      Bonsoir Marie,

      Je n'ai pas encore trouvé un autre pare-feu pour changer celui de pas éfficace de Windows.

      Concernant les différents rapports, je pense ,aprés avoir passé toute la journée sur les analyses, que je me perds!

      En éffet, j'ai suivé la procédure comme tu me l'as clairement éxpliqué, mais franchement, je suis.

      Pour Adware.
      *** Installation Started 01/15/2007 16:58 ***
      Title: Ad-Aware SE Personal
      Source: C:\Documents and Settings\Seemi\Bureau\aawsepersonal.exe
      Display Text: Uninstall complete.
      Made Dir: C:\Program Files\Lavasoft
      Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: Ad-Aware SE Personal
      RegDB Name: DisplayName
      RegDB Root: 2
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
      RegDB Name: UninstallString
      RegDB Root: 2
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\alert.wav
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref
      Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask
      Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Plugins
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\license.txt
      Made Dir: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Lang
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Lang\default.awl
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\manual.chm
      File Copy: C:\Program Files\Lavasoft\Ad-Aware SE Personal\unregaaw.exe
      Shell Link: C:\Documents and Settings\All Users\Bureau\Ad-Aware SE Personal.lnk
      Made Dir: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal
      Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Ad-Aware SE Personal.lnk
      Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Ad-Aware SE Manual.lnk
      Shell Link: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Lavasoft Ad-Aware SE Personal\Uninstall Ad-Aware SE Personal.lnk
      Shell Link: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk
      Shell Link: C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk
      File Tree: C:\Documents and Settings\Seemi\Application Data\Lavasoft\Ad-Aware
      RegDB TREE: SOFTWARE\Lavasoft\Ad-Aware SE
      RegDB Root: 1
      RegDB TREE: SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ad-Aware
      RegDB Root: 2
      RegDB TREE: SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ad-Watch
      RegDB Root: 2
      RegDB TREE: SOFTWARE\Classes\Drive\shell\Scan with Ad-Aware
      RegDB Root: 1
      RegDB TREE: SOFTWARE\Classes\Directory\shell\Scan with Ad-Aware
      RegDB Root: 1
      RegDB TREE: SYSTEM\CurrentControlSet\Services\Eventlog\Application\Adwatch
      RegDB Root: 1
      File Tree: C:\Documents and Settings\Seemi\Application Data\Lavasoft\Ad-Aware
      File Tree: C:\PROGRA~1\Lavasoft\AD-AWA~1
      Execute Program: C:\PROGRA~1\Lavasoft\AD-AWA~1\unregaaw.exe
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: https://www.adaware.com/
      RegDB Name: HelpLink
      RegDB Root: 2
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: Lavasoft
      RegDB Name: Publisher
      RegDB Root: 2
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe,-0
      RegDB Name: DisplayIcon
      RegDB Root: 2
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: https://www.adaware.com/
      RegDB Name: URLInfoAbout
      RegDB Root: 2
      RegDB Key: Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Aware SE Personal
      RegDB Val: 1.06
      RegDB Name: DisplayVersion
      RegDB Root: 2
      User Rights: Admin



      Pour Spybot:

      Pour Ccleaner:

      v1.36.430
      - Fixed bug with Hotfix and logfile cleaning.
      - Added Office 2007 cleaning.
      - Minor tweaks and optimizations.

      v1.35.424
      - Fixed IE7 Autocomplete form data cleaning.
      - Updated Vista detection routines.
      - Added code signing to program executable.
      - Fixed bug in Temporary folder detection.
      - Fixed some IE7 cookie handling issues.
      - Added additional error checking to folder routines.
      - Added Paint Shop Pro XI cleaning.
      - Updated French translation.
      - Minor display fixes.

      --------------------------------------------
      www.ccleaner.com

      Pour AVG:
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 19:14:17 15/01/2007

      + Résultat de l'analyse:



      C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056773.dll -> Adware.Minibug : Nettoyé et sauvegardé (mise en quarantaine).
      C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056775.exe -> Dropper.DollarR.b : Nettoyé et sauvegardé (mise en quarantaine).
      C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP388\A0056774.exe -> Dropper.Small : Nettoyé et sauvegardé (mise en quarantaine).


      Fin du rapport


      Pour Bitdeffender:





      #
      # An unexpected error has been detected by HotSpot Virtual Machine:
      #
      # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9110f3, pid=2192, tid=2884
      #
      # Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode, sharing)
      # Problematic frame:
      # C [ntdll.dll+0x10f3]
      #

      --------------- T H R E A D ---------------

      Current thread (0x003377a0): JavaThread "AWT-EventQueue-17" [_thread_in_native, id=2884]

      siginfo: ExceptionCode=0xc0000005, writing address 0x0b7ecf74

      Registers:
      EAX=0x00000000, EBX=0x2b3462c8, ECX=0x0484f6b4, EDX=0x0b7ecf6c
      ESP=0x0484f6c4, EBP=0x0484f6fc, ESI=0x0b7ecf58, EDI=0x0b7ecf6c
      EIP=0x7c9110f3, EFLAGS=0x00010246

      Top of Stack: (sp=0x0484f6c4)
      0x0484f6c4: 6d0d7ce2 0b7ecf6c 003377a0 00337860
      0x0484f6d4: 6d0c80a3 003377a0 2aaf1ec0 2b3462c8
      0x0484f6e4: 21a60ab8 00000000 0484f6d8 0484fbe4
      0x0484f6f4: 6d0f34d0 00000000 0484f730 081e899c
      0x0484f704: 00337860 0484f740 00000011 21a60ab8
      0x0484f714: 0484f70c 00000000 0484f740 2b347238
      0x0484f724: 00000000 2b3462c8 0484f740 0484f760
      0x0484f734: 081e2923 00000000 081e6449 21a60ab8

      Instructions: (pc=0x7c9110f3)
      0x7c9110e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
      0x7c9110f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04


      Stack: [0x04750000,0x04850000), sp=0x0484f6c4, free space=1021k
      Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
      C [ntdll.dll+0x10f3]
      j sun.awt.windows.WComponentPeer._dispose()V+0
      j sun.awt.windows.WComponentPeer.disposeImpl()V+23
      j sun.awt.windows.WObjectPeer.dispose()V+42
      j java.awt.Component.removeNotify()V+211
      j java.awt.Container.removeNotify()V+67
      j java.awt.Container.removeAll()V+82
      j sun.plugin.viewer.frame.IExplorerEmbeddedFrame.windowClosing(Ljava/awt/event/WindowEvent;)V+18
      j java.awt.Window.processWindowEvent(Ljava/awt/event/WindowEvent;)V+68
      j java.awt.Window.processEvent(Ljava/awt/AWTEvent;)V+69
      j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+477
      j java.awt.Container.dispatchEventImpl(Ljava/awt/AWTEvent;)V+42
      j java.awt.Window.dispatchEventImpl(Ljava/awt/AWTEvent;)V+19
      j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
      j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
      j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
      J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
      v ~RuntimeStub::alignment_frame_return Runtime1 stub
      j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
      j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
      j java.awt.EventDispatchThread.run()V+9
      v ~StubRoutines::call_stub
      V [jvm.dll+0x845a9]
      V [jvm.dll+0xd9317]
      V [jvm.dll+0x8447a]
      V [jvm.dll+0x841d7]
      V [jvm.dll+0x9ed69]
      V [jvm.dll+0x109fe3]
      V [jvm.dll+0x109fb1]
      C [msvcrt.dll+0x2a3b0]
      C [kernel32.dll+0xb50b]

      Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
      j sun.awt.windows.WComponentPeer._dispose()V+0
      j sun.awt.windows.WComponentPeer.disposeImpl()V+23
      j sun.awt.windows.WObjectPeer.dispose()V+42
      j java.awt.Component.removeNotify()V+211
      j java.awt.Container.removeNotify()V+67
      j java.awt.Container.removeAll()V+82
      j sun.plugin.viewer.frame.IExplorerEmbeddedFrame.windowClosing(Ljava/awt/event/WindowEvent;)V+18
      j java.awt.Window.processWindowEvent(Ljava/awt/event/WindowEvent;)V+68
      j java.awt.Window.processEvent(Ljava/awt/AWTEvent;)V+69
      j java.awt.Component.dispatchEventImpl(Ljava/awt/AWTEvent;)V+477
      j java.awt.Container.dispatchEventImpl(Ljava/awt/AWTEvent;)V+42
      j java.awt.Window.dispatchEventImpl(Ljava/awt/AWTEvent;)V+19
      j java.awt.Component.dispatchEvent(Ljava/awt/AWTEvent;)V+2
      j java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V+46
      j java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z+233
      J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
      v ~RuntimeStub::alignment_frame_return Runtime1 stub
      j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
      j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
      j java.awt.EventDispatchThread.run()V+9
      v ~StubRoutines::call_stub

      --------------- P R O C E S S ---------------

      Java Threads: ( => current thread )
      0x074352b8 JavaThread "Thread-133" [_thread_blocked, id=3996]
      0x07558a38 JavaThread "Keep-Alive-Timer" daemon [_thread_blocked, id=2492]
      0x075db3f0 JavaThread "Thread-125" [_thread_in_native, id=2864]
      =>0x003377a0 JavaThread "AWT-EventQueue-17" [_thread_in_native, id=2884]
      0x0b7aac20 JavaThread "thread applet-ChatApplet.class" [_thread_blocked, id=3376]
      0x04257a48 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3288]
      0x0b710448 JavaThread "AWT-Shutdown" [_thread_blocked, id=3688]
      0x075447f8 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=2568]
      0x075b3008 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=2472]
      0x075a7e70 JavaThread "AWT-Windows" daemon [_thread_in_native, id=2224]
      0x07582e60 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=228]
      0x07530100 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3948]
      0x07531bd8 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2828]
      0x07530fa0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3676]
      0x07490248 JavaThread "Finalizer" daemon [_thread_blocked, id=2356]
      0x07490a10 JavaThread "Reference Handler" daemon [_thread_blocked, id=272]
      0x07454a20 JavaThread "main" [_thread_in_native, id=488]

      Other Threads:
      0x0742e540 VMThread [id=1220]
      0x0742e5e8 WatcherThread [id=592]

      VM state:not at safepoint (normal execution)

      VM Mutex/Monitor currently owned by a thread: None

      Heap
      def new generation total 1280K, used 975K [0x20a70000, 0x20bd0000, 0x211d0000)
      eden space 1152K, 83% used [0x20a70000, 0x20b61dd8, 0x20b90000)
      from space 128K, 5% used [0x20bb0000, 0x20bb1e60, 0x20bd0000)
      to space 128K, 0% used [0x20b90000, 0x20b90000, 0x20bb0000)
      tenured generation total 15656K, used 11883K [0x211d0000, 0x2211a000, 0x26a70000)
      the space 15656K, 75% used [0x211d0000, 0x21d6afa0, 0x21d6b000, 0x2211a000)
      compacting perm gen total 8192K, used 2218K [0x26a70000, 0x27270000, 0x2aa70000)
      the space 8192K, 27% used [0x26a70000, 0x26c9a8a0, 0x26c9aa00, 0x27270000)
      ro space 8192K, 63% used [0x2aa70000, 0x2af7b178, 0x2af7b200, 0x2b270000)
      rw space 12288K, 46% used [0x2b270000, 0x2b809fa8, 0x2b80a000, 0x2be70000)

      Dynamic libraries:
      0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
      0x7c910000 - 0x7c9c7000 C:\WINDOWS\system32\ntdll.dll
      0x7c800000 - 0x7c904000 C:\WINDOWS\system32\kernel32.dll
      0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
      0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
      0x77ef0000 - 0x77f37000 C:\WINDOWS\system32\GDI32.dll
      0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
      0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
      0x77e50000 - 0x77ee1000 C:\WINDOWS\system32\RPCRT4.dll
      0x77720000 - 0x7788c000 C:\WINDOWS\system32\SHDOCVW.dll
      0x779e0000 - 0x77a76000 C:\WINDOWS\system32\CRYPT32.dll
      0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
      0x76610000 - 0x76694000 C:\WINDOWS\system32\CRYPTUI.dll
      0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\WINTRUST.dll
      0x76c40000 - 0x76c68000 C:\WINDOWS\system32\IMAGEHLP.dll
      0x770e0000 - 0x7716c000 C:\WINDOWS\system32\OLEAUT32.dll
      0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
      0x6fee0000 - 0x6ff34000 C:\WINDOWS\system32\NETAPI32.dll
      0x77aa0000 - 0x77b47000 C:\WINDOWS\system32\WININET.dll
      0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
      0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
      0x77390000 - 0x77492000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
      0x7c9d0000 - 0x7d1f3000 C:\WINDOWS\system32\SHELL32.dll
      0x58b50000 - 0x58be7000 C:\WINDOWS\system32\comctl32.dll
      0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
      0x63000000 - 0x63014000 C:\WINDOWS\system32\SynTPFcs.dll
      0x74690000 - 0x746db000 C:\WINDOWS\system32\MSCTF.dll
      0x10000000 - 0x10008000 C:\WINDOWS\system32\TWVMHK.DLL
      0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
      0x75f10000 - 0x7600d000 C:\WINDOWS\system32\BROWSEUI.dll
      0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
      0x77b50000 - 0x77b72000 C:\WINDOWS\system32\appHelp.dll
      0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
      0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
      0x77170000 - 0x7720e000 C:\WINDOWS\system32\urlmon.dll
      0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
      0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
      0x01cf0000 - 0x01e1d000 c:\program files\google\googletoolbar1.dll
      0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\WSOCK32.dll
      0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
      0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
      0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
      0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
      0x5d3f0000 - 0x5d491000 C:\WINDOWS\system32\DBGHELP.DLL
      0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.DLL
      0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
      0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
      0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
      0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
      0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
      0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
      0x76960000 - 0x76a15000 C:\WINDOWS\system32\USERENV.dll
      0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
      0x76930000 - 0x76956000 C:\WINDOWS\system32\ntshrui.dll
      0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
      0x71a60000 - 0x71a72000 C:\WINDOWS\system32\MPR.dll
      0x75ef0000 - 0x75ef7000 C:\WINDOWS\System32\drprov.dll
      0x71b70000 - 0x71b7e000 C:\WINDOWS\System32\ntlanman.dll
      0x71c30000 - 0x71c47000 C:\WINDOWS\System32\NETUI0.dll
      0x71bf0000 - 0x71c30000 C:\WINDOWS\System32\NETUI1.dll
      0x71be0000 - 0x71be7000 C:\WINDOWS\System32\NETRAP.dll
      0x71b50000 - 0x71b63000 C:\WINDOWS\System32\SAMLIB.dll
      0x75f00000 - 0x75f09000 C:\WINDOWS\System32\davclnt.dll
      0x02080000 - 0x0212d000 C:\PROGRA~1\Crawler\ctbr.dll
      0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
      0x01e40000 - 0x01e4e000 C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
      0x02490000 - 0x0276a000 C:\WINDOWS\system32\xpsp2res.dll
      0x02970000 - 0x02c36000 C:\WINDOWS\system32\msi.dll
      0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
      0x01ed0000 - 0x01ede000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
      0x01ef0000 - 0x01f37000 C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
      0x7d4c0000 - 0x7d7a6000 C:\WINDOWS\system32\Mshtml.dll
      0x74630000 - 0x74657000 C:\WINDOWS\system32\msls31.dll
      0x032d0000 - 0x032ee000 C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
      0x03300000 - 0x0331c000 C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
      0x77650000 - 0x77671000 C:\WINDOWS\system32\NTMARTA.DLL
      0x03360000 - 0x0337f000 C:\WINDOWS\system32\dla\tfswshx.dll
      0x03380000 - 0x0338f000 C:\WINDOWS\system32\tfswapi.dll
      0x03390000 - 0x0342b000 C:\WINDOWS\system32\dla\tfswcres.dll
      0x6d600000 - 0x6d62d000 C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      0x5f140000 - 0x5f157000 C:\WINDOWS\system32\OLEPRO32.DLL
      0x03470000 - 0x034c4000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
      0x03710000 - 0x0379e000 C:\WINDOWS\system32\shdoclc.dll
      0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\mlang.dll
      0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
      0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
      0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
      0x037b0000 - 0x037ba000 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
      0x037c0000 - 0x037d9000 c:\progra~1\mcafee.com\vso\McVSSkt.dll
      0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\DNSAPI.dll
      0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
      0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
      0x325c0000 - 0x325d2000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
      0x75be0000 - 0x75c4e000 C:\WINDOWS\system32\jscript.dll
      0x73250000 - 0x732b7000 C:\WINDOWS\system32\vbscript.dll
      0x73d20000 - 0x73e1e000 C:\WINDOWS\system32\MFC42.DLL
      0x61d70000 - 0x61d7e000 C:\WINDOWS\system32\MFC42LOC.DLL
      0x72c70000 - 0x72c79000 C:\WINDOWS\system32\wdmaud.drv
      0x72c60000 - 0x72c68000 C:\WINDOWS\system32\msacm32.drv
      0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
      0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
      0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
      0x736b0000 - 0x736f9000 C:\WINDOWS\system32\DDRAW.dll
      0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
      0x761c0000 - 0x76231000 C:\WINDOWS\system32\mshtmled.dll
      0x71ca0000 - 0x71cbc000 C:\WINDOWS\system32\actxprxy.dll
      0x08190000 - 0x081a2000 C:\Program Files\Dell\QuickSet\dadkeyb.dll
      0x6d590000 - 0x6d5a2000 C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
      0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_06\bin\jpiexp32.dll
      0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
      0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_06\bin\jpishare.dll
      0x6d670000 - 0x6d804000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\client\jvm.dll
      0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\hpi.dll
      0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\PSAPI.DLL
      0x6d640000 - 0x6d64c000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\verify.dll
      0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\java.dll
      0x6d660000 - 0x6d66f000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\zip.dll
      0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_06\bin\awt.dll
      0x73890000 - 0x73960000 C:\WINDOWS\system32\D3DIM700.DLL
      0x6d240000 - 0x6d27d000 C:\Program Files\Java\jre1.5.0_06\bin\fontmanager.dll
      0x6d1f0000 - 0x6d203000 C:\Program Files\Java\jre1.5.0_06\bin\deploy.dll
      0x6d5d0000 - 0x6d5ef000 C:\Program Files\Java\jre1.5.0_06\bin\RegUtils.dll
      0x6d3e0000 - 0x6d3f5000 C:\Program Files\Java\jre1.5.0_06\bin\jpicom32.dll
      0x6d4c0000 - 0x6d4d3000 C:\Program Files\Java\jre1.5.0_06\bin\net.dll
      0x6d1c0000 - 0x6d1e3000 C:\Program Files\Java\jre1.5.0_06\bin\dcpr.dll
      0x6d4e0000 - 0x6d4e9000 C:\Program Files\Java\jre1.5.0_06\bin\nio.dll

      VM Arguments:
      jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
      java_command: <unknown>
      Launcher Type: generic

      Environment Variables:
      PATH=C:\PROGRA~1\Java\JRE15~2.0_0\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;.
      USERNAME=Seemi
      OS=Windows_NT
      PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 6, GenuineIntel



      --------------- S Y S T E M ---------------

      OS: Windows XP Build 2600 Service Pack 2

      CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse, sse2

      Memory: 4k page, physical 515452k(229432k free), swap 1259452k(814520k free)

      vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0



      #
      # An unexpected error has been detected by HotSpot Virtual Machine:
      #
      # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9110f3, pid=300, tid=3852
      #
      # Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode)
      # Problematic frame:
      # C [ntdll.dll+0x10f3]
      #

      --------------- T H R E A D ---------------

      Current thread (0x0a12e308): JavaThread "thread applet-EIRC" [_thread_in_native, id=3852]

      siginfo: ExceptionCode=0xc0000005, writing address 0x0a019bcc

      Registers:
      EAX=0x00000000, EBX=0x161ac7a0, ECX=0x0a56f670, EDX=0x0a019bc4
      ESP=0x0a56f680, EBP=0x0a56f6b8, ESI=0x0a019bb0, EDI=0x0a019bc4
      EIP=0x7c9110f3, EFLAGS=0x00010246

      Top of Stack: (sp=0x0a56f680)
      0x0a56f680: 6d0d7ce2 0a019bc4 0a12e308 0a12e3c8
      0x0a56f690: 6d0c80a3 0a12e308 161ac7a0 161ac7a0
      0x0a56f6a0: 11878bd0 00000000 0a56f694 0a56fae4
      0x0a56f6b0: 6d0f34d0 00000000 0a56f6ec 06e8899c
      0x0a56f6c0: 0a12e3c8 0a56f6fc 00000001 11878bd0
      0x0a56f6d0: 0a56f6c8 00000000 0a56f6fc 161aee98
      0x0a56f6e0: 00000000 161ac7a0 0a56f6fc 0a56f71c
      0x0a56f6f0: 06e82923 00000000 06e86449 11878bd0

      Instructions: (pc=0x7c9110f3)
      0x7c9110e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
      0x7c9110f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04


      Stack: [0x0a470000,0x0a570000), sp=0x0a56f680, free space=1021k
      Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
      C [ntdll.dll+0x10f3]
      j sun.awt.windows.WComponentPeer._dispose()V+0
      j sun.awt.windows.WComponentPeer.disposeImpl()V+23
      j sun.awt.windows.WObjectPeer.dispose()V+42
      j java.awt.Component.removeNotify()V+211
      j java.awt.Container.removeNotify()V+67
      j java.awt.Container.removeNotify()V+38
      j java.awt.Container.remove(I)V+43
      j java.awt.Container.remove(Ljava/awt/Component;)V+45
      j c.if(Ljava/lang/String;)V+46
      j EIRC.a(Lb/a/a/e/a/a;)V+15
      j b.a.a.e.f.a()V+22
      j b.a.a.e.f.int()V+14
      j EIRC.stop()V+26
      j sun.applet.AppletPanel.run()V+447
      j java.lang.Thread.run()V+11
      v ~StubRoutines::call_stub
      V [jvm.dll+0x845a9]
      V [jvm.dll+0xd9317]
      V [jvm.dll+0x8447a]
      V [jvm.dll+0x841d7]
      V [jvm.dll+0x9ed69]
      V [jvm.dll+0x109fe3]
      V [jvm.dll+0x109fb1]
      C [msvcrt.dll+0x2a3b0]
      C [kernel32.dll+0xb50b]

      Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
      j sun.awt.windows.WComponentPeer._dispose()V+0
      j sun.awt.windows.WComponentPeer.disposeImpl()V+23
      j sun.awt.windows.WObjectPeer.dispose()V+42
      j java.awt.Component.removeNotify()V+211
      j java.awt.Container.removeNotify()V+67
      j java.awt.Container.removeNotify()V+38
      j java.awt.Container.remove(I)V+43
      j java.awt.Container.remove(Ljava/awt/Component;)V+45
      j c.if(Ljava/lang/String;)V+46
      j EIRC.a(Lb/a/a/e/a/a;)V+15
      j b.a.a.e.f.a()V+22
      j b.a.a.e.f.int()V+14
      j EIRC.stop()V+26
      j sun.applet.AppletPanel.run()V+447
      j java.lang.Thread.run()V+11
      v ~StubRoutines::call_stub

      --------------- P R O C E S S ---------------

      Java Threads: ( => current thread )
      0x0b3d08a8 JavaThread "Thread-21" [_thread_blocked, id=2452]
      0x0552cbb8 JavaThread "Thread-9" [_thread_in_native, id=3008]
      0x05679de8 JavaThread "Image Animator 0" daemon [_thread_blocked, id=3288]
      0x04aea9f0 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=1220]
      0x056446a8 JavaThread "AWT-EventQueue-2" [_thread_blocked, id=3144]
      =>0x0a12e308 JavaThread "thread applet-EIRC" [_thread_in_native, id=3852]
      0x05577288 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=1240]
      0x05597c78 JavaThread "AWT-Shutdown" [_thread_blocked, id=456]
      0x055804f0 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3752]
      0x055776a8 JavaThread "AWT-Windows" daemon [_thread_in_native, id=220]
      0x055717f8 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=188]
      0x04a3f9c8 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=1884]
      0x04a63620 JavaThread "CompilerThread0" daemon [_thread_blocked, id=3304]
      0x04aa27c0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3256]
      0x05520e18 JavaThread "Finalizer" daemon [_thread_blocked, id=2692]
      0x04a39198 JavaThread "Reference Handler" daemon [_thread_blocked, id=4088]
      0x04a2c538 JavaThread "main" [_thread_blocked, id=916]

      Other Threads:
      0x04a18d48 VMThread [id=3528]
      0x04a47ba8 WatcherThread [id=2632]

      VM state:not at safepoint (normal execution)

      VM Mutex/Monitor currently owned by a thread: None

      Heap
      def new generation total 3136K, used 1288K [0x10010000, 0x10370000, 0x10770000)
      eden space 2816K, 40% used [0x10010000, 0x1012b018, 0x102d0000)
      from space 320K, 48% used [0x102d0000, 0x102f7060, 0x10320000)
      to space 320K, 0% used [0x10320000, 0x10320000, 0x10370000)
      tenured generation total 40372K, used 39492K [0x10770000, 0x12edd000, 0x16010000)
      the space 40372K, 97% used [0x10770000, 0x12e010f0, 0x12e01200, 0x12edd000)
      compacting perm gen total 8448K, used 8328K [0x16010000, 0x16850000, 0x1a010000)
      the space 8448K, 98% used [0x16010000, 0x16832218, 0x16832400, 0x16850000)
      No shared spaces configured.

      Dynamic libraries:
      0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
      0x7c910000 - 0x7c9c7000 C:\WINDOWS\system32\ntdll.dll
      0x7c800000 - 0x7c904000 C:\WINDOWS\system32\kernel32.dll
      0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
      0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
      0x77ef0000 - 0x77f37000 C:\WINDOWS\system32\GDI32.dll
      0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
      0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
      0x77e50000 - 0x77ee1000 C:\WINDOWS\system32\RPCRT4.dll
      0x77720000 - 0x7788e000 C:\WINDOWS\system32\SHDOCVW.dll
      0x779e0000 - 0x77a76000 C:\WINDOWS\system32\CRYPT32.dll
      0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
      0x76610000 - 0x76694000 C:\WINDOWS\system32\CRYPTUI.dll
      0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\WINTRUST.dll
      0x76c40000 - 0x76c68000 C:\WINDOWS\system32\IMAGEHLP.dll
      0x770e0000 - 0x7716c000 C:\WINDOWS\system32\OLEAUT32.dll
      0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
      0x6fee0000 - 0x6ff34000 C:\WINDOWS\system32\NETAPI32.dll
      0x77aa0000 - 0x77b47000 C:\WINDOWS\system32\WININET.dll
      0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
      0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
      0x77390000 - 0x77492000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
      0x7c9d0000 - 0x7d1f3000 C:\WINDOWS\system32\SHELL32.dll
      0x58b50000 - 0x58be7000 C:\WINDOWS\system32\comctl32.dll
      0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
      0x651b0000 - 0x651d2000 C:\PROGRA~1\FICHIE~1\SYMANT~1\ANTISPAM\ASOEHOOK.DLL
      0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
      0x6af90000 - 0x6afee000 C:\Program Files\Fichiers communs\Symantec Shared\ccL40.dll
      0x7c3a0000 - 0x7c41b000 C:\WINDOWS\system32\MSVCP71.dll
      0x63000000 - 0x63014000 C:\WINDOWS\system32\SynTPFcs.dll
      0x74690000 - 0x746db000 C:\WINDOWS\system32\MSCTF.dll
      0x10000000 - 0x10008000 C:\WINDOWS\system32\TWVMHK.DLL
      0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
      0x75f10000 - 0x7600d000 C:\WINDOWS\system32\BROWSEUI.dll
      0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
      0x77b50000 - 0x77b72000 C:\WINDOWS\system32\appHelp.dll
      0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
      0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
      0x77170000 - 0x7720e000 C:\WINDOWS\system32\urlmon.dll
      0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
      0x765b0000 - 0x76606000 C:\WINDOWS\System32\cscui.dll
      0x76590000 - 0x765ad000 C:\WINDOWS\System32\CSCDLL.dll
      0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
      0x6a1f0000 - 0x6a212000 C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
      0x01ef0000 - 0x021ca000 C:\WINDOWS\system32\xpsp2res.dll
      0x76960000 - 0x76a15000 C:\WINDOWS\system32\userenv.dll
      0x023f0000 - 0x023fe000 C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
      0x02450000 - 0x02486000 C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
      0x024d0000 - 0x024de000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      0x024e0000 - 0x02527000 C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
      0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.DLL
      0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
      0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
      0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
      0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
      0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
      0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
      0x7d4c0000 - 0x7d7a6000 C:\WINDOWS\system32\Mshtml.dll
      0x74630000 - 0x74657000 C:\WINDOWS\system32\msls31.dll
      0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\wsock32.dll
      0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
      0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
      0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
      0x02c30000 - 0x02c4e000 C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
      0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
      0x02c70000 - 0x02c8c000 C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
      0x02cd0000 - 0x02cea000 C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
      0x02d10000 - 0x02d2f000 C:\WINDOWS\system32\dla\tfswshx.dll
      0x02d30000 - 0x02d3f000 C:\WINDOWS\system32\tfswapi.dll
      0x02d40000 - 0x02ddb000 C:\WINDOWS\system32\dla\tfswcres.dll
      0x6d600000 - 0x6d62d000 C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      0x5f140000 - 0x5f157000 C:\WINDOWS\system32\OLEPRO32.DLL
      0x66f70000 - 0x66f8a000 C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
      0x6b350000 - 0x6b367000 C:\Program Files\Fichiers communs\Symantec Shared\ccVrTrst.dll
      0x67160000 - 0x67163400 C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\SHEXTRES.DLL
      0x02e20000 - 0x02f49000 c:\program files\google\googletoolbar2.dll
      0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
      0x02f70000 - 0x03002000 C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      0x03030000 - 0x0306d000 C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\mtbres.dll
      0x748f0000 - 0x74a20000 C:\WINDOWS\system32\msxml3.dll
      0x4d5e0000 - 0x4d638000 C:\WINDOWS\system32\WINHTTP.dll
      0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\mlang.dll
      0x03980000 - 0x039d4000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
      0x039e0000 - 0x03a6e000 C:\WINDOWS\system32\shdoclc.dll
      0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
      0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
      0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
      0x03850000 - 0x0385a000 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
      0x04070000 - 0x04336000 C:\WINDOWS\system32\msi.dll
      0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\DNSAPI.dll
      0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
      0x74660000 - 0x7468a000 C:\WINDOWS\system32\msimtf.dll
      0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
      0x325c0000 - 0x325d2000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
      0x75be0000 - 0x75c4e000 C:\WINDOWS\system32\jscript.dll
      0x672b0000 - 0x672f0000 C:\WINDOWS\system32\iepeers.dll
      0x761c0000 - 0x76231000 C:\WINDOWS\system32\mshtmled.dll
      0x04f60000 - 0x04f72000 C:\Program Files\Dell\QuickSet\dadkeyb.dll
      0x72c70000 - 0x72c79000 C:\WINDOWS\system32\wdmaud.drv
      0x72c60000 - 0x72c68000 C:\WINDOWS\system32\msacm32.drv
      0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
      0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
      0x73250000 - 0x732b7000 C:\WINDOWS\system32\vbscript.dll
      0x73d20000 - 0x73e1e000 C:\WINDOWS\system32\MFC42.DLL
      0x61d70000 - 0x61d7e000 C:\WINDOWS\system32\MFC42LOC.DLL
      0x30000000 - 0x30222000 C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
      0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
      0x69000000 - 0x6900e000 C:\WINDOWS\system32\Macromed\Common\SwSupport.dll
      0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
      0x736b0000 - 0x736f9000 C:\WINDOWS\system32\DDRAW.dll
      0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
      0x5e430000 - 0x5e43d000 C:\WINDOWS\system32\PSTOREC.DLL
      0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
      0x71ca0000 - 0x71cbc000 C:\WINDOWS\system32\actxprxy.dll
      0x6d590000 - 0x6d5a2000 C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
      0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_06\bin\jpiexp32.dll
      0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
      0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_06\bin\jpishare.dll
      0x6d670000 - 0x6d804000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\client\jvm.dll
      0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\hpi.dll
      0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\PSAPI.DLL
      0x6d640000 - 0x6d64c000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\verify.dll
      0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\java.dll
      0x6d660000 - 0x6d66f000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\zip.dll
      0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_06\bin\awt.dll
      0x73890000 - 0x73960000 C:\WINDOWS\system32\D3DIM700.DLL

      VM Arguments:
      jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
      java_command: <unknown>
      Launcher Type: generic

      Environment Variables:
      PATH=C:\PROGRA~1\Java\JRE15~2.0_0\bin;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;.
      USERNAME=Seemi
      OS=Windows_NT
      PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 6, GenuineIntel



      --------------- S Y S T E M ---------------

      OS: Windows XP Build 2600 Service Pack 2

      CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse, sse2

      Memory: 4k page, physical 515452k(129780k free), swap 1259452k(737504k free)

      vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0

      01/15/07 16:19:49 [Info]: BlackLight Engine 1.0.55 initialized
      01/15/07 16:19:49 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      01/15/07 16:19:49 [Note]: 7019 4
      01/15/07 16:19:49 [Note]: 7005 0
      01/15/07 16:19:49 [Note]: 7006 0
      01/15/07 16:20:02 [Note]: 7011 1976
      01/15/07 16:20:02 [Note]: 8001 2
      01/15/07 16:20:06 [Note]: FSRAW library version 1.7.1021
      01/15/07 16:30:55 [Note]: 7007 0


      01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
      01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      01/15/07 16:17:35 [Note]: 7019 4
      01/15/07 16:17:35 [Note]: 7005 0
      01/15/07 16:17:35 [Note]: 7006 0
      01/15/07 16:17:36 [Note]: 7011 1976
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
      01/15/07 16:20:02 [Note]: 7007 0


      rebonjour#2007 01 15%2015%3A48%3A57Logfile of HijackThis v1.99.1
      Scan saved at 16:07:49, on 15/01/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Dell\QuickSet\quickset.exe
      C:\WINDOWS\system32\WLTRAY.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
      C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
      C:\Program Files\BroadJump\Client Foundation\CFD.exe
      C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
      C:\WINDOWS\VM_STI.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
      C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Digital Line Detect\DLG.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
      C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
      C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
      C:\WINDOWS\System32\snmp.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
      C:\DOCUME~1\Seemi\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
      O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
      O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
      O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
      O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
      O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
      O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
      O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
      O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
      O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
      O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
      O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Digital Line Detect.lnk = ?
      O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
      O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
      O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
      O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
      O8 - Extra context menu item: Crawler Search - tbr:iemenu
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
      O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
      O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
      O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe



      01/15/07 16:17:34 [Info]: BlackLight Engine 1.0.55 initialized
      01/15/07 16:17:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      01/15/07 16:17:35 [Note]: 7019 4
      01/15/07 16:17:35 [Note]: 7005 0
      01/15/07 16:17:35 [Note]: 7006 0
      01/15/07 16:17:36 [Note]: 7011 1976
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:36 [Note]: 7026 0
      01/15/07 16:17:48 [Note]: FSRAW library version 1.7.1021
      01/15/07 16:20:02 [Note]: 7007 0
      0
  4. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Slt

    Refais moi le rapport Bitdefender (regarde bien la démo)

    Ouvre ce lien (merci a S!RI pour ce programme)
    http://siri.urz.free.fr/Fix/SmitfraudFix.php
    et télécharge SmitfraudFix.exe.

    Regarde le tuto

    Exécute le en choisissant l’option 1,
    il va générer un rapport
    Copie/colle le sur le poste stp.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. contempo Messages postés 10 Date d'inscription   Statut Membre
     
    Bonsoir Marie,

    Voilà le rapport de BitDeffender ( je n'arrive pas à le coupier/coller) :
    Temps: 01:24:48
    Objets:360285
    Repértoires:4804
    Secteurs Boot:3
    Archives:4544
    Fichiers en paquets:35659
    Aucun virus trouvé

    SmitFraudFix v2.132

    Rapport fait à 21:41:20,67, 16/01/2007
    Executé à partir de C:\WINDOWS\BDOSCAN8\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Seemi

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Seemi\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Seemi\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    Merci Marie.
    0
  7. contempo Messages postés 10 Date d'inscription   Statut Membre
     
    Désolé Marie, c'est là le rapport de BitDefender:
    BitDefender Online Scanner - Rapport virus en temps réel

    Généré à: Tue, Jan 16, 2007 - 22:00:17

    --------------------------------------------------------------------------------

    Info d'analyse

    Fichiers scannés
    360782

    Infectés Fichiers
    0

    Virus Détectés

    Aucun virus trouvé.

    --------------------------------------------------------------------------------

    Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

    Merci.
    0
    1. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
       
      Re,

      Démarre en mode sans échec :
      Pour cela, tu tapotes la touche F8 ((Si F8 ne marche pas utilise la touche F5)).
      dès le début de l’allumage du pc sans t’arrêter.
      Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
      Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
      ----------------------------------------------------------------------------
      Relance le programme Smitfraud,
      Cette fois choisit l’option 2,
      répond oui a tous ;
      Sauvegarde le rapport,
      Redémarre en mode normal,
      copie/colle le rapport sauvegardé sur le forum


      Et un rapport HT

      A++
      0
    2. contempo Messages postés 10 Date d'inscription   Statut Membre
       
      Salut Marie,

      Décidemment le flou de pub intempéstive ne veut toujours pas laisser tranquil mon pc!

      Here you are le rapport de SmitFraud aprés allumage sans échec ( quoi que je sens l'échec lol):

      SmitFraudFix v2.132

      Rapport fait à 13:27:58,39, 17/01/2007
      Executé à partir de C:\Documents and Settings\Seemi\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


      »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

      Nettoyage terminé.

      »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» Fin

      Merci pour ta patience.
      0
    3. contempo Messages postés 10 Date d'inscription   Statut Membre
       
      Revoilà me rattrapper,

      Si rapport HT est Highjackthis, ben le voilà lol :

      Logfile of HijackThis v1.99.1
      Scan saved at 14:05:37, on 17/01/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Dell\QuickSet\quickset.exe
      C:\WINDOWS\system32\WLTRAY.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
      C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
      C:\Program Files\BroadJump\Client Foundation\CFD.exe
      C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
      C:\WINDOWS\VM_STI.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
      C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Digital Line Detect\DLG.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
      C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
      C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
      C:\WINDOWS\System32\snmp.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
      C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
      O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
      O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
      O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
      O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
      O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
      O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
      O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
      O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
      O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
      O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
      O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
      O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Digital Line Detect.lnk = ?
      O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
      O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
      O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
      O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
      O8 - Extra context menu item: Crawler Search - tbr:iemenu
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?e766757d3726471688d1b0886357a388
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?e766757d3726471688d1b0886357a388
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
      O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
      O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
      O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
      O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
      O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

      Encore merci Marie.
      0
    4. Keruit > contempo Messages postés 10 Date d'inscription   Statut Membre
       
      Bonjour Contempo,

      Tu as deux barres de tâches qui ne sont pas signé par un copyright.

      Il faut que tu les supprimes.

      - Redémarre ton pc

      - Fixes ces lignes avec HIJACKTHIS :

      O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
      O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)

      - Ensuite désactive la RESTAURATION DU SYSTEME

      - Nettoie ton registre en profondeur avec CCLEANER

      - Règle ton pare-feu sur une sensibilité moyenne
      OU ALORS règle ton bouclier AVG sur "élevé"

      - Redémarre ton pc

      - Fais une analyse antivirus

      Et dis moi ici même quel virus est détecté (ces deux barres de navigation internet doivent être incrustées de trojans backdoor, ceux là même qui ouvre des portes dérobées dans lesquelles s'engouffrent des fenêtres intempestives, des pubs et d'autres virus)
      0
    5. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280 > contempo Messages postés 10 Date d'inscription   Statut Membre
       
      Cotempo,
      Je repasserai dans la sirée
      Tu as un blème avec MSN

      A++
      0
  8. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Bonjour,

    Méthode à suivre dans l'ordre...
    ----------------------------------------------------------------------------
    Télécharger ces logiciels (sauf si tu les as)
    A utiliser plus tard

    A - ad-aware version 1.06
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo
    http://pageperso.aol.fr/balltrap34/adwseflash.zip

    B - spybot version 1.4
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo d utilisation
    http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

    C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
    Télécharge ici :
    https://www.ccleaner.com/ccleaner/download
    Tutorial ici:
    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    D - Ewido
    https://www.malekal.com/tutorial-et-guide-ewido-v4/
    ----------------------------------------------------------------------------
    ¤Affiche tous les fichiers et dossiers :
    Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

    Coche « afficher les fichiers et dossiers cachés »

    Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

    Décoche « masquer les extensions dont le type est connu »
    Puis fais «Ok» pour valider les changements.

    Et appliquer !
    =================================
    Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
    O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
    O4 - HKLM\..\Run: [ONE MEMO PURE PLAN] C:\Documents and Settings\All Users\Application Data\BlueKindOneMemo\bonebend.exe
    O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/
    O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

    Supprime dans ajout / supp

    MSN SEARCH Toolbar
    Allocam Multi Vision

    Je dois vérifier
    O8 - Extra context menu item: Crawler Search - tbr:iemenu
    ============ ============================
    ¤Démarre en mode sans échec :
    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
    (Si F8 ne marche pas utilise la touche F5).
    ----------------------------------------------------------------------------
    ¤Vide tes fichiers temps et temporary internet file:

    Maintenant tu lances
    A/ Ad-Aware supprime quarantaine
    B/ Spybot Supprime quarantaine
    C/ Ccleaner Ewido Copier/coller le rapport
    D/
    ----------------------------------------------------------------------------
    ¤ Vide ta Corbeille.
    ----------------------------------------------------------------------------
    ¤ Redémarre en mode normal, relance Hijackthis et copie/colle un nouveau rapport sur le forum.

    Tiens nous au courant

    A+
    0
  9. contempo Messages postés 10 Date d'inscription   Statut Membre
     
    Bonjour Marie,

    j'ai suivé toutes la procédure, ce qui a permis de dégager une fois pour toute les charmants visages de telle ou tel éxpèrt des astres, de la roulette ou du bien roulée lol.

    Je tiens à te remercier pour le temps que tu m'as consacré, ton aide et ta patience. A travers toi, je remercie aussi le Ccm et tous ceux qui aident des nouvices du net comme moi.

    Here you are, le rapport:

    Logfile of HijackThis v1.99.1
    Scan saved at 12:45:53, on 20/01/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\WLTRAY.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
    C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
    C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
    C:\WINDOWS\VM_STI.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60107
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60107
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
    O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
    O4 - HKCU\..\Run: [deleteslow] C:\DOCUME~1\Seemi\APPLIC~1\CAMPIN~1\Regs the.exe
    O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
    O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
    O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://support.norton.com/sp/en/us/home/current/info
    O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://support.norton.com/sp/en/us/home/current/info
    O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
    O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586-jc.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

    Thanks so much Marie and Ccm.
    0
  10. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Bonne route

    A+
    0