C\windows\system32\mapisrvr exe

jeanpaul95 -  
Bonjour,

Lors d'une analyse norton de détection de problème un message me dit : C\WINDOWS\system32\MAPISRVR EXE ne peut pas acceder à un fichier requis. "gapi32dll."
j'aimerais corriger ce problème et serais heureux de receuillir de bons conseils.
merci d'avance.
Configuration: Windows XP
Internet Explorer 6.0
norton antivirus

9 réponses

  1. lance_yien Contributeur
    bonjour jeanpaul,

    clic ici: http://pccool.aliceblogs.fr/blog/_WebPages/Utilitaires.html

    et coisis hijackthis pour l'installer et poster un rapport

    a+
    0
    1. jeanpaul95 Auteur
      Bonjour lance_yien et merci de ton aide

      voila le scan, si la suite est aussi simple je serais à la hauteur !

      Logfile of HijackThis v1.99.1
      Scan saved at 09:20:37, on

      21/01/2007
      Platform: Windows XP SP2 (WinNT

      5.01.2600)
      MSIE: Internet Explorer v6.00 SP2

      (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers

      communs\Symantec

      Shared\SNDSrvc.exe
      C:\Program Files\Fichiers

      communs\Symantec

      Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Fichiers

      communs\Symantec

      Shared\ccSetMgr.exe
      C:\Program Files\Fichiers

      communs\Symantec

      Shared\ccEvtMgr.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Trust\Ami Mouse

      300 Dual Scroll\Amoumain.exe
      C:\Program

      Files\QuickTime\qttask.exe
      C:\WINDOWS\VdCap03C\StillMnt.exe
      C:\Program Files\Fichiers

      communs\Symantec Shared\ccApp.exe
      C:\Program Files\Fichiers

      communs\Real\Update_OB\realsched.e

      xe
      C:\program files\orange\player

      orange\Player Orange.exe
      C:\Program Files\Adobe\Photoshop

      Album Edition

      Découverte\3.0\Apps\apdproxy.exe
      C:\Program

      Files\Labtec\Desktop\V5.1\moffice.

      exe
      C:\Program

      Files\Labtec\Desktop\V5.1\kbdap32a

      .exe
      C:\PROGRA~1\Wanadoo\TaskBarIcon.ex

      e
      C:\PROGRA~1\Wanadoo\EspaceWanadoo.

      exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program

      Files\Labtec\Desktop\V5.1\MOUSE32A

      .EXE
      C:\WINDOWS\System32\FTRTSVC.exe
      C:\PROGRA~1\Wanadoo\ComComp.exe
      C:\Program

      Files\Ahead\InCD\InCDsrv.exe
      C:\PROGRA~1\Wanadoo\Toaster.exe
      C:\PROGRA~1\Wanadoo\Inactivity.exe
      C:\PROGRA~1\Wanadoo\PollingModule.

      exe
      C:\WINDOWS\System32\ALERTM~1\ALERT

      M~1.EXE
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\Norton

      AntiVirus\navapsvc.exe
      C:\Program Files\Norton

      AntiVirus\IWP\NPFMntor.exe
      C:\PROGRA~1\NORTON~1\NORTON~1\NPRO

      TECT.EXE
      C:\Program

      Files\Symantec\LiveUpdate\ALUSched

      ulerSvc.exe
      C:\PROGRA~1\NORTON~1\NORTON~1\SPEE

      DD~1\NOPDB.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers

      communs\Symantec

      Shared\CCPD-LC\symlcsvc.exe
      C:\PROGRA~1\Wanadoo\Watch.exe
      C:\WINDOWS\assembly\explorer.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers

      communs\Symantec Shared\Security

      Console\NSCSRVCE.EXE
      C:\WINDOWS\system32\notepad.exe
      C:\Program Files\Hijackthis

      Version Française\hijackthis

      vf.exe
      C:\WINDOWS\system32\notepad.exe
      C:\Program

      Files\Messenger\msmsgs.exe

      R0 -

      HKCU\Software\Microsoft\Internet

      Explorer\Main,Start Page =

      http://securityresponse.symantec.c

      om/avcenter/fix_homepage
      R1 -

      HKCU\Software\Microsoft\Internet

      Explorer\Main,Window Title =

      Wanadoo
      R0 -

      HKCU\Software\Microsoft\Internet

      Explorer\Toolbar,LinksFolderName =

      Liens
      R3 - URLSearchHook: Search Class -

      {08C06D61-F1F3-4799-86F8-BE1A89362

      C85} -

      C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      R3 - URLSearchHook: Share

      Accelerator Toolbar -

      {f5c93451-2609-4723-a053-5c19516be

      1a8} - C:\Program

      Files\Share_Accelerator\tbShar.dll
      O2 - BHO: (no name) -

      {00000010-6F7D-442C-93E3-4A4827C2E

      4C8} - (no file)
      O2 - BHO: Adobe PDF Reader Link

      Helper -

      {06849E9F-C8D7-4D59-B87D-784B7D6BE

      0B3} - C:\Program

      Files\Adobe\Acrobat

      7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: BitComet Toolbar Helper

      -

      {6A373B7E-496E-424f-A9BE-486A5E9AB

      018} - C:\Program Files\BitComet

      Toolbar\v2.0.0.1\BitComet_Toolbar.

      dll
      O2 - BHO: (no name) -

      {8F4E5661-F99E-4B3E-8D85-0EA71C074

      8E4} - (no file)
      O2 - BHO: ST -

      {9394EDE7-C8B5-483E-8773-474BF36AF

      6E4} - C:\Program Files\MSN

      Apps\ST\01.03.0000.1005\en-xu\stma

      in.dll
      O2 - BHO: NAV Helper -

      {A8F38D8D-E480-4D52-B7A2-731BB6995

      FDD} - C:\Program Files\Norton

      AntiVirus\NavShExt.dll
      O2 - BHO: Google Toolbar Helper -

      {AA58ED58-01DD-4d91-8333-CF1057747

      3F7} - c:\program

      files\google\googletoolbar1.dll
      O2 - BHO: MSNToolBandBHO -

      {BDBD1DAD-C946-4A17-ADC1-64B5B4FF5

      5D0} - C:\Program Files\MSN

      Apps\MSN Toolbar\MSN

      Toolbar\01.02.5000.1021\fr\msntb.d

      ll
      O2 - BHO: (no name) -

      {FFFFFEF0-5B30-21D4-945D-000000000

      000} -

      C:\PROGRA~1\STARDO~1\SDIEInt.dll
      O3 - Toolbar: BitComet Toolbar -

      {2E608F70-C430-4bc5-96F6-608E02EBA

      5B2} - C:\Program Files\BitComet

      Toolbar\v2.0.0.1\BitComet_Toolbar.

      dll
      O3 - Toolbar: MSN -

      {BDAD1DAD-C946-4A17-ADC1-64B5B4FF5

      5D0} - C:\Program Files\MSN

      Apps\MSN Toolbar\MSN

      Toolbar\01.02.5000.1021\fr\msntb.d

      ll
      O3 - Toolbar: Norton AntiVirus -

      {C4069E3A-68F1-403E-B40E-200666963

      54B} - C:\Program Files\Norton

      AntiVirus\NavShExt.dll
      O3 - Toolbar: &Google -

      {2318C2B1-4965-11d4-9B18-009027A5C

      D4F} - c:\program

      files\google\googletoolbar1.dll
      O3 - Toolbar: Share Accelerator

      Toolbar -

      {f5c93451-2609-4723-a053-5c19516be

      1a8} - C:\Program

      Files\Share_Accelerator\tbShar.dll
      O4 - HKLM\..\Run: [NvCplDaemon]

      RUNDLL32.EXE

      C:\WINDOWS\system32\NvCpl.dll,NvSt

      artup
      O4 - HKLM\..\Run: [WheelMouse]

      C:\Program Files\Trust\Ami Mouse

      300 Dual Scroll\Amoumain.exe
      O4 - HKLM\..\Run: [QuickTime Task]

      "C:\Program

      Files\QuickTime\qttask.exe"

      -atboottime
      O4 - HKLM\..\Run: [StillMnt]

      WCamRmv.exe /StartStillMnt
      O4 - HKLM\..\Run: [WOOWATCH]

      C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON]

      C:\PROGRA~1\Wanadoo\GestMaj.exe

      TaskBarIcon.exe
      O4 - HKLM\..\Run:

      [KernelFaultCheck]

      %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [ccApp]

      "C:\Program Files\Fichiers

      communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [TkBellExe]

      "C:\Program Files\Fichiers

      communs\Real\Update_OB\realsched.e

      xe" -osboot
      O4 - HKLM\..\Run: [OrangePlayer]

      c:\program files\orange\player

      orange\Player Orange.exe /systray
      O4 - HKLM\..\Run: [Adobe Photo

      Downloader] "C:\Program

      Files\Adobe\Photoshop Album

      Edition

      Découverte\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run:

      [FLMOFFICE4DMOUSE] C:\Program

      Files\Labtec\Desktop\V5.1\moffice.

      exe
      O4 - HKLM\..\Run: [OFFICEKB]

      C:\Program

      Files\Labtec\Desktop\V5.1\kbdap32a

      .exe
      O4 - HKCU\..\Run: [WOOKIT]

      C:\PROGRA~1\Wanadoo\GestMaj.exe

      EspaceWanadoo.exe
      O4 - HKCU\..\Run: [IncrediMail]

      C:\Program

      Files\IncrediMail\bin\IncMail.exe

      /c
      O4 - HKCU\..\Run: [ctfmon.exe]

      C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [updateMgr]

      "C:\Program Files\Adobe\Acrobat

      7.0\Reader\AdobeUpdateManager.exe"

      AcRdB7_0_8 -reboot 1
      O4 - Global Startup: Lancement

      rapide d'Adobe Reader.lnk =

      C:\Program Files\Adobe\Acrobat

      7.0\Reader\reader_sl.exe
      O4 - Global Startup: Microsoft

      Office.lnk = C:\Program

      Files\Microsoft

      Office\Office\OSA9.EXE
      O6 -

      HKCU\Software\Policies\Microsoft\I

      nternet Explorer\Control Panel

      present
      O8 - Extra context menu item:

      &Recherche AOL Toolbar -

      res://C:\Program Files\AOL

      Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item:

      E&xport to Microsoft Excel -

      res://C:\PROGRA~1\MICROS~2\OFFICE1

      2\EXCEL.EXE/3000
      O8 - Extra context menu item:

      E&xporter vers Microsoft Excel -

      res://C:\PROGRA~1\MICROS~2\Office1

      0\EXCEL.EXE/3000
      O8 - Extra context menu item:

      Rechercher avec Voila -

      file://C:\Program

      Files\WANADOO_TOOLBAR\Cache\Select

      edContextSearch.htm
      O8 - Extra context menu item:

      Télécharger avec Star Downloader -

      C:\Program Files\Star

      Downloader\sdie.htm
      O9 - Extra button: Real.com -

      {CD67F990-D8E9-11d2-98FE-00C0F0318

      AFE} -

      C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: Messager

      Wanadoo -

      {FB5F1910-F110-11d2-BB9E-00C04F795

      683} -

      C:\PROGRA~1\WANADO~1\Wanadoo

      Messager.exe
      O9 - Extra 'Tools' menuitem:

      Messager Wanadoo -

      {FB5F1910-F110-11d2-BB9E-00C04F795

      683} -

      C:\PROGRA~1\WANADO~1\Wanadoo

      Messager.exe
      O9 - Extra button: Wanadoo -

      {1462651F-F4BA-4C76-A001-C4284D0FE

      16E} - https://www.orange.fr/portail (file

      missing) (HKCU)
      O16 - DPF:

      {2EF3FB47-7B1E-4536-BA4D-51427BD45

      DFA} (PIXACO Drag and Drop upload

      plugin) -

      https://www.snapfish.fr/2/home

      ad/pixacodndupload.cab
      O16 - DPF:

      {4A3CF76B-EC7A-405D-A67D-8DC6B52AB

      35B} (QDiagAOLCCUpdateObj Class) -

      http://aolcc.aol.fr/computerchecku

      p/qdiagcc.cab
      O16 - DPF:

      {6414512B-B978-451D-A0D8-FCFDF33E8

      33C} (WUWebControl Class) -

      http://v5.windowsupdate.microsoft.

      com/v5consumer/V5Controls/en/x86/c

      lient/wuweb_site.cab?1104147893653
      O16 - DPF:

      {6E5E167B-1566-4316-B27F-0DDAB3484

      CF7} (Image Uploader Control) -

      http://www.mypixmania.com/fr/fr/im

      porter/MypixUploader.cab
      O16 - DPF:

      {7DA181BB-EF8D-4A7E-8C53-7BFC718EF

      71D} (Upload Class) -

      http://photos.wanadoo.fr/al/presen

      tation/pc/resources/activex/Ephoto

      .cab
      O16 - DPF:

      {917623D1-D8E5-11D2-BE8B-00104B06B

      DE3} (CamImage Class) -

      https://www.118712.fr/sortir/75_paris/sortir/

      tivex/AxisCamControl.cab
      O16 - DPF:

      {A18962F6-E6ED-40B1-97C9-1FB36F38B

      FA8} (Aurigma Image Uploader 3.5

      Control) -

      http://www.extrafilm.fr/NET/Import

      /ImageUploader3.cab
      O16 - DPF:

      {B38870E4-7ECB-40DA-8C6A-595F0A551

      9FF}

      (MsnMessengerSetupDownloadControl

      Class) -

      http://messenger.msn.com/download/

      MsnMessengerSetupDownloader.cab
      O16 - DPF:

      {DF780F87-FF2B-4DF8-92D0-73DB16A15

      43A} (PopCapLoader Object) -

      https://www.ea.com/ea-studios/popcap

      loader_v6.cab
      O17 -

      HKLM\System\CCS\Services\Tcpip\..\

      {CE115972-C7F0-42D1-B84B-C9BE12234

      E8E}: NameServer = 80.10.246.1

      80.10.246.132
      O18 - Protocol: msnim -

      {828030A1-22C1-4009-854F-8E3052023

      13F} -

      "C:\PROGRA~1\MSNMES~1\msgrapp.dll"

      (file missing)
      O21 - SSODL: WPDShServiceObj -

      {AAA288BA-9A4C-45B0-95D7-94D524869

      DB5} -

      C:\WINDOWS\system32\WPDShServiceOb

      j.dll
      O23 - Service: Adobe LM Service -

      Unknown owner - C:\Program

      Files\Fichiers communs\Adobe

      Systems

      Shared\Service\Adobelmsvc.exe
      O23 - Service: Symantec Event

      Manager (ccEvtMgr) - Symantec

      Corporation - C:\Program

      Files\Fichiers communs\Symantec

      Shared\ccEvtMgr.exe
      O23 - Service: Symantec Settings

      Manager (ccSetMgr) - Symantec

      Corporation - C:\Program

      Files\Fichiers communs\Symantec

      Shared\ccSetMgr.exe
      O23 - Service: DirectX Service

      (DirectSysc) - Unknown owner -

      C:\WINDOWS\system32\directx.exe
      O23 - Service: France Telecom

      Routing Table Service (FTRTSVC) -

      France Telecom -

      C:\WINDOWS\System32\FTRTSVC.exe
      O23 - Service: InstallDriver Table

      Manager (IDriverT) - Macrovision

      Corporation - C:\Program

      Files\Fichiers

      communs\InstallShield\Driver\11\In

      tel 32\IDriverT.exe
      O23 - Service: InCD File System

      Service (InCDsrv) - AHEAD Software

      - C:\Program

      Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LiveUpdate -

      Symantec Corporation -

      C:\PROGRA~1\Symantec\LIVEUP~1\LUCO

      MS~1.EXE
      O23 - Service: Service Norton

      AntiVirus Auto-Protect (navapsvc)

      - Symantec Corporation -

      C:\Program Files\Norton

      AntiVirus\navapsvc.exe
      O23 - Service: Norton AntiVirus

      Firewall Monitor Service

      (NPFMntor) - Symantec Corporation

      - C:\Program Files\Norton

      AntiVirus\IWP\NPFMntor.exe
      O23 - Service: Norton UnErase

      Protection (NProtectService) -

      Symantec Corporation -

      C:\PROGRA~1\NORTON~1\NORTON~1\NPRO

      TECT.EXE
      O23 - Service: Norton Protection

      Center Service (NSCService) -

      Symantec Corporation - C:\Program

      Files\Fichiers communs\Symantec

      Shared\Security

      Console\NSCSRVCE.EXE
      O23 - Service: NVIDIA Display

      Driver Service (NVSvc) - NVIDIA

      Corporation -

      C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Planificateur

      LiveUpdate automatique - Symantec

      Corporation - C:\Program

      Files\Symantec\LiveUpdate\ALUSched

      ulerSvc.exe
      O23 - Service: Remote Packet

      Capture Protocol v.0

      (experimental) (rpcapd) - Unknown

      owner -

      %ProgramFiles%\WinPcap\rpcapd.exe"

      -d -f

      "%ProgramFiles%\WinPcap\rpcapd.ini

      (file missing)
      O23 - Service: Symantec AVScan

      (SAVScan) - Symantec Corporation -

      C:\Program Files\Norton

      AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network

      Drivers Service (SNDSrvc) -

      Symantec Corporation - C:\Program

      Files\Fichiers communs\Symantec

      Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc

      (SPBBCSvc) - Symantec Corporation

      - C:\Program Files\Fichiers

      communs\Symantec

      Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Speed Disk service

      - Symantec Corporation -

      C:\PROGRA~1\NORTON~1\NORTON~1\SPEE

      DD~1\NOPDB.EXE
      O23 - Service: Symantec Core LC -

      Symantec Corporation - C:\Program

      Files\Fichiers communs\Symantec

      Shared\CCPD-LC\symlcsvc.exe
      0
      1. lance_yien Contributeur
        re,

        là, il me faut une couturière pour recoller les morceaux :)
        visiblement tu as eu un pb de copier/ coller
        peux-tu recommencer stp?
        tu retrouves le rapport texte dans le dossier "hijackthis" et là tu l'as télécharger il y a l'explication pour le poster

        a+
        0
        1. jeanpaul95 Auteur
          Bon excuses-moi que veux tu quand on n'est pas doué ce sont des choses qui arrivent. j'ai recommencé bien suivi les instructions mot à mot j'espère que c'est bon.

          Logfile of HijackThis v1.99.1
          Scan saved at 10:15:08, on 21/01/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
          C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\WINDOWS\VdCap03C\StillMnt.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\program files\orange\player orange\Player Orange.exe
          C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
          C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
          C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
          C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Labtec\Desktop\V5.1\MOUSE32A.EXE
          C:\WINDOWS\System32\FTRTSVC.exe
          C:\PROGRA~1\Wanadoo\ComComp.exe
          C:\Program Files\Ahead\InCD\InCDsrv.exe
          C:\PROGRA~1\Wanadoo\Toaster.exe
          C:\PROGRA~1\Wanadoo\Inactivity.exe
          C:\PROGRA~1\Wanadoo\PollingModule.exe
          C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\Program Files\Norton AntiVirus\navapsvc.exe
          C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
          C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
          C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
          C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          C:\PROGRA~1\Wanadoo\Watch.exe
          C:\WINDOWS\assembly\explorer.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
          C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
          C:\Program Files\IncrediMail\bin\IncMail.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
          R3 - URLSearchHook: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
          O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
          O2 - BHO: (no name) - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - (no file)
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
          O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
          O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [StillMnt] WCamRmv.exe /StartStillMnt
          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [OrangePlayer] c:\program files\orange\player orange\Player Orange.exe /systray
          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
          O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
          O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
          O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
          O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
          O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
          O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
          O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
          O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
          O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
          O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1104147893653
          O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
          O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.wanadoo.fr/al/presentation/pc/resources/activex/Ephoto.cab
          O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - https://www.118712.fr/sortir/75_paris/sortir/
          O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
          O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://www.ea.com/ea-studios/popcap
          O17 - HKLM\System\CCS\Services\Tcpip\..\{CE115972-C7F0-42D1-B84B-C9BE12234E8E}: NameServer = 80.10.246.1 80.10.246.132
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
          O23 - Service: DirectX Service (DirectSysc) - Unknown owner - C:\WINDOWS\system32\directx.exe
          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
          O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
          O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
          O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
          O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
          O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
          O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
          O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
          O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
          O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
          O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
          O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          0
          2. lance_yien Contributeur
            re,

            merci de m'avoir facilité la tache :)
            0
            1. jeanpaul95 Auteur
              Bonjour,
              Je n'étais pas perdu me revoila.
              donc :
              Logfile of HijackThis v1.99.1
              Scan saved at 17:58:15, on 23/01/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
              C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
              C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\WINDOWS\VdCap03C\StillMnt.exe
              C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
              C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\program files\orange\player orange\Player Orange.exe
              C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
              C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
              C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Labtec\Desktop\V5.1\MOUSE32A.EXE
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\WINDOWS\System32\FTRTSVC.exe
              C:\Program Files\Ahead\InCD\InCDsrv.exe
              C:\Program Files\Norton AntiVirus\navapsvc.exe
              C:\PROGRA~1\INCRED~1\bin\IMApp.exe
              C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
              C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
              C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
              C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
              C:\WINDOWS\System32\svchost.exe
              C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
              C:\PROGRA~1\Wanadoo\ComComp.exe
              C:\PROGRA~1\Wanadoo\Toaster.exe
              C:\PROGRA~1\Wanadoo\Inactivity.exe
              C:\PROGRA~1\Wanadoo\PollingModule.exe
              C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
              C:\PROGRA~1\Wanadoo\Watch.exe
              C:\Program Files\IncrediMail\bin\IncMail.exe
              C:\WINDOWS\system32\notepad.exe
              C:\WINDOWS\notepad.exe
              C:\Program Files\IncrediMail\bin\IncMail.exe
              C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
              R3 - URLSearchHook: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
              O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
              O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
              O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
              O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
              O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
              O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
              O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [StillMnt] WCamRmv.exe /StartStillMnt
              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
              O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
              O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
              O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [OrangePlayer] c:\program files\orange\player orange\Player Orange.exe /systray
              O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
              O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
              O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
              O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
              O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
              O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
              O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
              O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
              O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
              O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
              O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
              O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
              O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
              O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
              O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1104147893653
              O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
              O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.wanadoo.fr/al/presentation/pc/resources/activex/Ephoto.cab
              O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - https://www.118712.fr/sortir/75_paris/sortir/
              O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
              O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
              O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://www.ea.com/ea-studios/popcap
              O17 - HKLM\System\CCS\Services\Tcpip\..\{CE115972-C7F0-42D1-B84B-C9BE12234E8E}: NameServer = 80.10.246.130 80.10.246.3
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
              O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
              O23 - Service: DirectX Service (DirectSysc) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
              O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
              O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
              O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
              O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
              O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
              O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
              O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
              O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
              O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
              O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
              O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
              0
              1. lance_yien Contributeur
                bonjour,

                >> tu as bien fait le nettoyage?

                >> et le rapport de "smitfraudfix" demandé au 2°) ?
                je l'attends pendant que j'analyse celui-ci

                >> pas de changement?

                a+

                EDIT: me revoilou :)

                relances hijackthis et supprimes ces lignes:

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
                R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                R3 - URLSearchHook: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
                O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
                O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbShar.dll
                O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
                O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
                O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
                O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
                O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/windowsupdate/v6/default.aspx
                O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
                O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.wanadoo.fr/al/presentation/pc/resources/activex/Ephoto.cab
                O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - https://www.118712.fr/sortir/75_paris/sortir/
                O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
                O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - https://www.ea.com/ea-studios/popcap

                ((au besoin réfères-toi au lien de téléchargement))

                a+
                0
                1. jeanpaul95 Auteur
                  bonjour,

                  Réponse tardive "excuse-my"
                  Le probleme persiste.
                  Merci pour la patience.
                  Voici le raport smifraudix et hijackthy apres supression des lignes sauf une impossible.
                  A+

                  SmitFraudFix v2.133

                  Rapport fait à 13:35:24,28, 27/01/2007
                  Executé à partir de C:\Smifraudfix\SmitfraudFix
                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                  Le type du système de fichiers est NTFS
                  Fix executé en mode normal

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\moi

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\moi\Application Data

                  »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\moi\Favoris

                  »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                  »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                  »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                  "Source"="About:Home"
                  "SubscribedURL"="About:Home"
                  "FriendlyName"="Ma page d'accueil"

                  »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "AppInit_DLLs"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                  "System"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                  »»»»»»»»»»»»»»»»»»»»»»»» Fin

                  Logfile of HijackThis v1.99.1
                  Scan saved at 13:40:24, on 27/01/2007
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
                  C:\Program Files\QuickTime\qttask.exe
                  C:\WINDOWS\VdCap03C\StillMnt.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                  C:\program files\orange\player orange\Player Orange.exe
                  C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
                  C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
                  C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
                  C:\Program Files\Labtec\Desktop\V5.1\MOUSE32A.EXE
                  C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  C:\WINDOWS\System32\FTRTSVC.exe
                  C:\Program Files\Ahead\InCD\InCDsrv.exe
                  C:\PROGRA~1\Wanadoo\ComComp.exe
                  C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                  C:\Program Files\Norton AntiVirus\navapsvc.exe
                  C:\PROGRA~1\Wanadoo\Toaster.exe
                  C:\PROGRA~1\Wanadoo\Inactivity.exe
                  C:\PROGRA~1\Wanadoo\PollingModule.exe
                  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
                  C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
                  C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
                  C:\PROGRA~1\Wanadoo\Watch.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\NOTEPAD.EXE
                  C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
                  C:\Program Files\IncrediMail\bin\IncMail.exe
                  C:\WINDOWS\system32\NOTEPAD.EXE
                  C:\WINDOWS\notepad.exe
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
                  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                  O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
                  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                  O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Trust\Ami Mouse 300 Dual Scroll\Amoumain.exe
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [StillMnt] WCamRmv.exe /StartStillMnt
                  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                  O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  O4 - HKLM\..\Run: [OrangePlayer] c:\program files\orange\player orange\Player Orange.exe /systray
                  O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
                  O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
                  O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
                  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                  O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
                  O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
                  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                  O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                  O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{CE115972-C7F0-42D1-B84B-C9BE12234E8E}: NameServer = 80.10.246.130 80.10.246.3
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                  O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                  O23 - Service: DirectX Service (DirectSysc) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)
                  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                  O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
                  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                  O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
                  O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
                  O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                  O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
                  O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
                  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                  O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                  O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                  O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                  0
                  1. lance_yien Contributeur
                    bonjour jeanpaul,

                    1°) fais "démarr" > "exécuter" > tapes: msconfig > ok
                    dans la fenêtre qui s'ouvre clic sur "service",
                    cherches les lignes qui correspondent à:
                    >> "France Telecom Routing Table Service (FTRTSVC) - France Telecom "
                    >> DirectX Service (DirectSysc) - Unknown owner - C:\WINDOWS\system32\directx.exe

                    et décoches les cases correspondantes.
                    > ok > redmarres.
                    au retour coches la case "ne plus afficher..." > ok.
                    supprimes les fichiers "FTRTSVC.exe" et "directx.exe" qui se trouvent ici (en gras):
                    C:\WINDOWS\System32\FTRTSVC.exe
                    C:\WINDOWS\system32\directx.exe

                    redémarres ton pc et si tout ok passes "ccleaner" pour les les "erreurs" et le "nettoyage"

                    2°) clic ici: http://pccool.aliceblogs.fr/blog/_WebPages/Utilitaires.html

                    fais le "scan avec bitdefender", et postes le rapport généré

                    a+
                    0