[Ecran noir] Peut-être du à un trojan

Question

Bonjour à tous,

voici mon souci.
Hier apparaît sur mon ordi un avis Symantec au sujet d'un Trojan nommé Kibik!Inf. (peut-être est-ce du au fait que j'utilise Azureus?)

Je ne sais pas s'il y a un rapport ou pas mais, aujourd'hui, en voulant redémarrer mon ordi, tout se passe bien jusqu'à l'ouverture de session avec saisie du code et ensuite les icônes du bureau ne s'affichent pas... 

Je peux par exemple passer par le gestionnaire des tâches pour lancer des applications mais je n'ai plus d'interface windows en quelque sorte. Plus de barre en bas, plus de menu démarrer, plus d'icônes...

Pouvant lancer des applications via le gestionnaire, je suis en mesure de vous envoyer mon rapport Hijack que voici:
>
>
>

Logfile of HijackThis v1.99.1
Scan saved at 15:00:05, on 27/01/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\system32	askmgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\e-schwebel\Bureau\ANTI VIRUS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yourstartingpage.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ctdf1c37] RUNDLL32.EXE w107df78.dll,n 005f1c320000000a107df78
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [taskdir] C:\WINDOWS\System32	askdir.exe
O4 - HKCU\..\Run: ["neobebackup.exe"] C:\Program Files
eobe Backup
eobebackup.exe -min
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Bloquer ce serveur... - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Bloquer cette publicité... - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir tous les liens de la page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Rechercher avec Google... - C:\Program Files\Avant Browser\Search.htm
O8 - Extra context menu item: Surligner - C:\Program Files\Avant Browser\Highlight.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.em-lyon.net
O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version8/Applet/vchatsign.cab
O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt1_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5CE7A7AF-8C5E-48CF-AE30-8FC6F01C27E3} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_4fr.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://antu.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28578.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\Software\..\Telephony: DomainName = education.em-lyon.priv
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O18 - Protocol: bw+0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7D715A5E-0D30-405C-9EED-4C56036A78E9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Pascal · Answer

Bonsoir blazdelire. Nous allons voir sa :) . Premièrement je vais te dire quoi cocher dans hijackthis .::

:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yourstartingpage.com 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.fr/ 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank 
O4 - HKLM\..\Run: [ctdf1c37] RUNDLL32.EXE w107df78.dll,n 005f1c320000000a107df78 
O4 - HKCU\..\Run: ["neobebackup.exe"] C:\Program Files
eobe Backup
eobebackup.exe -min 


Supprimer toutes les lignes 018... 
SAUF! la suivante qui est saine (elle ce distingue par ces 4 lignes et par C: program files): 

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 

Ensuite cliquez sur Fix Cheked. Ensuite , http://www.pandasoftware.com/products/activescan . Clique sur Scan your Pc. Clique sur Chek Now . Entre tes informations et clique sur Scan Now . Si c'est la première fois le load va être long . Ensuite choisi My Computer ou Mon ordinateur ou s'il n'y sont pas choisi Poste de Travail . À la fin du scan , Clique sur See report et ensuite save log et copie colle le rapport ici.



Voila:)

blazdelire · Answer

Le problème persiste toujours (pas de menu démarrer et d'icônes). Je fais un redémarrage rapide tout de même.



Voici mon rapport Activescan:


Incident                                                                        Status                        Location                                                                                                                                                                                                                                                        

Adware:adware/ipinsight                                                         Not disinfected               c:\windows\inf\conscorr.inf                                                                                                                                                                                                                                     
Adware:adware/dollarrevenue                                                     Not disinfected               c:\windows	imessquare1.dat                                                                                                                                                                                                                                     
Adware:adware/windowenhancer                                                    Not disinfected               c:\windows\system32\SBUtils                                                                                                                                                                                                                                     
Virus:bck/haxdoor.fh                                                            Disinfected                   Operating system                                                                                                                                                                                                                                                
Adware:adware/commad                                                            Not disinfected               Windows Registry                                                                                                                                                                                                                                                
Adware:adware/downloadware                                                      Not disinfected               Windows Registry                                                                                                                                                                                                                                                
Adware:adware/ncase                                                             Not disinfected               Windows Registry                                                                                                                                                                                                                                                
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt                                                                                                                                                                                     
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.xiti.com/]                                                                                                                                         
Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.247realmedia.com/]                                                                                                                                 
Spyware:Cookie/Tradedoubler                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.tradedoubler.com/]                                                                                                                                 
Spyware:Cookie/Weborama                                                         Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.weborama.fr/]                                                                                                                                      
Spyware:Cookie/Bluestreak                                                       Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.bluestreak.com/]                                                                                                                                   
Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.atdmt.com/]                                                                                                                                        
Spyware:Cookie/Hbmediapro                                                       Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.adopt.hbmediapro.com/]                                                                                                                             
Spyware:Cookie/adultfriendfinder                                                Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.adultfriendfinder.com/]                                                                                                                            
Spyware:Cookie/Atwola                                                           Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.atwola.com/]                                                                                                                                       
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.drivecleaner.com/]                                                                                                                                 
Spyware:Cookie/MetriWeb                                                         Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.metriweb.be/]                                                                                                                                      
Spyware:Cookie/Toplist                                                          Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.toplist.cz/]                                                                                                                                       
Spyware:Cookie/Winantivirus                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[.winantivirus.com/]                                                                                                                                 
Spyware:Cookie/fe.lea.lycos                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[fe.lea.lycos.fr/]                                                                                                                                   
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[stats.drivecleaner.com/]                                                                                                                            
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[www.drivecleaner.com/]                                                                                                                              
Spyware:Cookie/Winantivirus                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Application Data\Mozilla\Firefox\Profiles\j2e4vby6.default\cookies.txt[www.winantivirus.com/]                                                                                                                              
Potentially unwanted tool:Application/Pskill.K                                  Not disinfected               C:\Documents and Settings\e-schwebel\Bureau\ANTI VIRUS\clean\pskill.exe                                                                                                                                                                                         
Spyware:Cookie/888                                                              Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@888[2].txt                                                                                                                                                                                              
Spyware:Cookie/Hbmediapro                                                       Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@adopt.hbmediapro[2].txt                                                                                                                                                                                 
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@drivecleaner[2].txt                                                                                                                                                                                     
Spyware:Cookie/Entrepreneur                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@entrepreneur[1].txt                                                                                                                                                                                     
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@stats.drivecleaner[2].txt                                                                                                                                                                               
Spyware:Cookie/Systemdoctor                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@systemdoctor[2].txt                                                                                                                                                                                     
Spyware:Cookie/DriveCleaner                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@www.drivecleaner[2].txt                                                                                                                                                                                 
Spyware:Cookie/Systemdoctor                                                     Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@www.systemdoctor[1].txt                                                                                                                                                                                 
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\e-schwebel\Cookies\e-schwebel@xiti[1].txt                                                                                                                                                                                             
Potentially unwanted tool:Application/Pskill.K                                  Not disinfected               C:\RECYCLER\S-1-5-21-1343024091-838170752-682003330-9589\Dc11.zip[clean/pskill.exe]                                                                                                                                                                             
Adware:Adware/CommAd                                                            Not disinfected               C:\WINDOWS\dXNlcg\xrh5w0.vbs                                                                                                                                                                                                                                    


>
>
>
>
>



Et mon nouveau rapport Hijack:



Logfile of HijackThis v1.99.1
Scan saved at 19:16:36, on 28/01/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32	askmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\e-schwebel\Bureau\ANTI VIRUS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [taskdir] C:\WINDOWS\System32	askdir.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Bloquer ce serveur... - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Bloquer cette publicité... - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir tous les liens de la page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Rechercher avec Google... - C:\Program Files\Avant Browser\Search.htm
O8 - Extra context menu item: Surligner - C:\Program Files\Avant Browser\Highlight.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin
pjpi150_06.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.em-lyon.net
O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version8/Applet/vchatsign.cab
O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt1_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5CE7A7AF-8C5E-48CF-AE30-8FC6F01C27E3} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_4fr.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://antu.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28578.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\Software\..\Telephony: DomainName = education.em-lyon.priv
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = education.em-lyon.priv
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)



>
>
>
>
>

blazdelire · Answer

J'aurais vraiment besoin d'aide svp...

Merci d'avance!!!

blazdelire · Answer

Up à mon message (qui sombre vite dans les oubliettes)

Utilisateur anonyme · Answer

Bonjour


$$ Télécharge
SDFix sur ton bureau 
http://downloads.andymanchesta.com/RemovalTools/SDFix.zip 

clean.zip 
http://www.malekal.com/download/clean.zip 
Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean. 


$$ Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. 
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.


$$ Ouvre le dossier Clean qui se trouve sur ton bureau, et double-clic sur clean.cmd.
Choisis l'option 2
Enregistre le rapport une fois le scan terminé


$$ Fais un clic droit sur SDFix.zip et choisis "Extraire tout" 
Double-clique sur RunThis.bat 
Tape Y pour lancer le script. 
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire 
Presse une touche pour redémarrer 
Le PC va mettre du temps avant de démarrer, presse une touche lorsque "Finished" s'affiche 


Ouvre le dossier SDFix et copie/colle ici le contenu du fichier "Report.txt" avec le rapport qui se trouve ici C:\rapport_clean.txt  et un nouveau HijackThis.

Regis59 · Answer

Salut

J'ai eu connaissance de ton MP ;)

Comme j ai un peu de temps...

Essai ceci:

fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Cliques en haut à gauche sur fichiers et choisis "exécuter"
Tapes explorer et valides. Ton bureau réapparait?

A+

blazdelire · Answer

Impossible de loger en mode sans échec sur mon profil (il refuse on code...j'ai beau avoir essayé plusieurs fois)

alors j'ai fait clean en mode normal:

Script execute en mode normal 
Rapport clean par Malekal_morte - http://www.malekal.com 
Option 2, executee le 28/01/2007 a 22:05:22,93 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression de fichiers sur C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 


Et je n'ai pas pu lancer SD Fix qui refuse de marcher en mode normal



Que dois-je faire pour récupérer mes icônes?  :-)

blazdelire · Answer

regis, windows m'indique qu'il ne "trouve pas explorer..."

Que faire?

Regis59 · Answer

En mode sans echec, tu as tes icones et le reste?

A+

blazdelire · Answer

Impossible de me loger en mode sans échec.

Au moment de me connecter avec mon nom d'utilisateur et mon mot de passe, il me dit: "Le système n'a pu ouvrir de session. Assurez vous que le nom d'utilisateur et le domaine sont corrects, puis entrez de nouveua votre mot de passe"

Cela a toujours été comme ca. j'ai jamais réussi à me connecter en mode sans échec

Regis59 · Answer

Ok, essai ceci:

Télécharge ceci:
http://telechargement.zebulon.fr/233-zeb-restore.html

Execute le et choisis Bureau

A+

blazdelire · Answer

Ca n'a rien changé...

(pas besoin de redémarrer, si?)

Regis59 · Answer

Essaie de redemarrer.

A+

blazdelire · Answer

Je viens de redémarrer...

Pas de réel changement, enfin si, un minuscule:

Au lieu d'être noir, le fond d'écran est maintenant bleu. Le même bleu que le fond d'écran XP à l'ouverture de session.

Sinon rien n'a changé.

Merci en tout cas pour ton aide. En espérant que tu as d'autres idées! :-)

Regis59 · Answer

Tu as acces a  C:\WINDOWS\System32\?

blazdelire · Answer

oui

Regis59 · Answer

Essai ceci

Demarer < executer , tape msconfig
onglet demarrage, enleve C:\WINDOWS\System32	askdir.exe 

redemarre

et?

blazdelire · Answer

Rien de changé...

blazdelire · Answer

J' up mon message.

je pourrai mourrir pour de l'aide!

balltrap34 · Answer

salut

au pasage salut a tous et a toi regis
si tu as le cd xp
demarre avec celui ci et passe en mode console et tape ceci

chkdsk /r

sur ce je vous laisse il faut dormir sinon les client vont me trouver une drole de gueule demain lol

a++

blazdelire · Answer

je vais me coucher aussi, je tiens plus debout

merci à tous

Regis59 · Answer

Salut Balltrap et merci d'être passé ;)

lol 00:51:51 << tu fais du rab? lol

je pourrai mourrir pour de l'aide!

T'exagères quand meme...

[Ecran noir] Peut-être du à un trojan - Page 2

Discussions similaires

Newsletters