[Internet] Mon internet est rendu lent

death_axe444 -  
Salut tout le monde.

J'ai un gros problème d'internet (comme le montre le topic).
Mon internet est rendu lent à un point tel qu mon ancien Pentium 2 avec une connexion Dial-up allait plus vite que ça. Mon fournisseur d'internet, de cable et de téléphone est Vidéotron. Alors ma question est, pour ce qui est de l'internet (le téléphone chie aussi de temps en temps), est-ce que c'est le fournisseur d'internet ou bien c'est mon ordi avec ses 9 svchost qui foire?

Merci d'avance...
--
To avoid innuendo, the Wii should be called the Perfect nintendo entertainement system, or PNES for short... 
Configuration: Windows XP
Internet Explorer 6.0

10 réponses

  1. Utilisateur anonyme
    Salut

    Ton problème est survenu il y a peu ou c'est depuis le début comme ça ?

    Qu'as-tu comme pare-feu, anti-virus et anti-spywares ?
    0
    1. death_axe444 Auteur
      Ça doit faire bien quelques mois que c'est comme ça. Mais mon ordi, je l'ai depuis au moins 4 ou 5 ans minimum.

      Pour mes protections, j'ai windows defender (qui marche très mal en passant) et antivir. C'est malheureusement tout parce que mon père ne veut rien d'autre (on a eu une mauvaise expérience avec une dizaine d'antivirus, d'anti-spyware et de firewall).
      0
  2. Utilisateur anonyme
    Peut-être le problème est dû à une bestiole, fait ceci pour vérifier

    Télécharge HijackThis :
    ---> http://www.infos-du-net.com/telecharger/HijackThis,0301-454.html
    Installe le dans son propre dossier :
    - clic droit sur le bureau, tu choisis "nouveau dossier" puis installe-le à l'intérieur.
    Double-clic sur HijackThis.
    Clic sur "do a system scan and save logfile"
    Puis copie et colle le rapport ici stp
    0
    1. death_axe444 Auteur
      Voilà

      Logfile of HijackThis v1.99.1
      Scan saved at 16:52:58, on 2007-03-16
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
      C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Documents and Settings\user\Mes documents\Arnaud\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~2\COPERN~1.DLL
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O4 - HKLM\..\Run: [Windows Compliant] szxqyq.exe
      O4 - HKLM\..\Run: [internet service] syscfg32.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
      O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
      O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\RunServices: [Windows Compliant] szxqyq.exe
      O4 - HKLM\..\RunServices: [internet service] syscfg32.exe
      O4 - HKCU\..\Run: [Windows Compliant] szxqyq.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.0.6.5.cab
      O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
      O16 - DPF: {5CB1506E-1DEA-4E63-89A7-E40E52AEA1FD} (OnagerCtrl Class) - http://fulfillment.puretracks.com/onager.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
      O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
      O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

      Si quelqu'un pourrait me dire le (ou plus les) problèmes que j'ai, ça me serait grandement utile. Merci d'avance
      0
  3. Utilisateur anonyme
    Salut

    Tu es infecté.
    Fait ceci

    Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2(en haut) va se mettre à clignoter, clique dessus et choisit "accepter l'active X" pour faire fonctionner le scan anti-virus.
    Une fois qu'il a terminé colle le rapport ici stp

    ---> https://www.kaspersky.fr/downloads

    - Kaspersky Online Scanner
    - Accept
    0
    1. death_axe444 Auteur
      KASPERSKY ONLINE SCANNER REPORT
      Friday, March 16, 2007 6:44:48 PM
      Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
      Kaspersky Online Scanner version: 5.0.83.0
      Kaspersky Anti-Virus database last update: 16/03/2007
      Kaspersky Anti-Virus database records: 266482

      Scan Settings
      Scan using the following antivirus database standard
      Scan Archives true
      Scan Mail Bases true

      Scan Target My Computer
      C:\
      E:\
      F:\
      G:\

      Scan Statistics
      Total number of scanned objects 85775
      Number of viruses found 5
      Number of infected objects 6 / 0
      Number of suspicious objects 0
      Duration of the scan process 01:04:42

      Infected Object Name Virus Name Last Action
      C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

      C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped

      C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped

      C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped

      C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

      C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

      C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

      C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

      C:\WINDOWS\system32\config\DEFAULT Object is locked skipped

      C:\WINDOWS\system32\config\SECURITY Object is locked skipped

      C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped

      C:\WINDOWS\system32\config\SYSTEM Object is locked skipped

      C:\WINDOWS\system32\config\SAM Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

      C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

      C:\WINDOWS\system32\gmsys32.exe/data0003 Infected: DoS.Win32.Sima skipped

      C:\WINDOWS\system32\gmsys32.exe/data0005 Infected: Backdoor.IRC.Zcrew skipped

      C:\WINDOWS\system32\gmsys32.exe/data0006 Infected: DoS.Win32.SynFlood.b skipped

      C:\WINDOWS\system32\gmsys32.exe/data0011 Infected: Backdoor.IRC.Zapchast skipped

      C:\WINDOWS\system32\gmsys32.exe/data0013 Infected: Exploit.Win32.DCom.b skipped

      C:\WINDOWS\system32\gmsys32.exe Astrum: infected - 5 skipped

      C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

      C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

      C:\WINDOWS\system32\h323log.txt Object is locked skipped

      C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped

      C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

      C:\WINDOWS\Sti_Trace.log Object is locked skipped

      C:\WINDOWS\wiaservc.log Object is locked skipped

      C:\WINDOWS\wiadebug.log Object is locked skipped

      C:\WINDOWS\SchedLgU.Txt Object is locked skipped

      C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

      C:\WINDOWS\SoftwareDistribution\EventCache\{C0932A2D-6C65-4290-9094-C63F3E349AA3}.bin Object is locked skipped

      C:\WINDOWS\WindowsUpdate.log Object is locked skipped

      C:\WINDOWS\CSC\00000001 Object is locked skipped

      C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

      C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

      C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

      C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

      C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

      C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

      C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

      C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

      C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

      C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Temp\hpodvd09.log Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Temp\~DFD4DE.tmp Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Historique\History.IE5\MSHist012007031620070317\index.dat Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.f314eb97.ini.inuse Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped

      C:\Documents and Settings\user\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped

      C:\Documents and Settings\user\Cookies\index.dat Object is locked skipped

      C:\Documents and Settings\user\ntuser.dat.LOG Object is locked skipped

      C:\Documents and Settings\user\ntuser.dat Object is locked skipped

      C:\System Volume Information\_restore{A554B478-4E26-4827-8A29-4D0137B6F266}\RP653\change.log Object is locked skipped

      Scan process completed.

      Alors ça prouve qu'on peut avoir des virus de merde sans qu'on le sache avant de se renseigner et que y a pas mal d'antivirus qui ne trouvent jamais rien.

      À présent, il faut que je m'en débarasse... Est-ce que je peux me débarasser des fichiers infectés manuellement ou est-ce que je dois les enlever avec un autre logiciel?
      0
  4. Utilisateur anonyme
    Est oui on peut avoir des virus !

    ¤ Clic sur démarrer, rechercher, tous les fichiers et dossiers, cherche et supprime :

    - gmsys32.exe
    - syscfg32.exe
    - szxqyq.exe

    **Si un fichier/dossier persiste lors de la suppression fait ceci:
    - Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..
    Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.

    ¤ Désactive le pare-feu de Windows (SP2) il ne sert à rien puis installe celui-ci pour plus de sécurité

    Kerio (pare-feu) : reste gratuit après la période d'essai en français
    ----> http://www.infos-du-net.com/telecharger/Firewall-Kerio-Personal,0301-390.html

    Regarde ce tutoriel si tu as besoin d'aide pour l'installation, la configuration et compréhension de Kerio
    --> http://kerio.probb.fr/Systemesd-exploitation-c1/Logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/Tutoriel-pour-Kerio-43635-t248.htm

    Plus d'info :
    ->https://kerio.probb.fr/

    ¤ Télécharge et installe AVG anti-spyware :
    Tu fais un scan complet de ton système, dès qu'il a fini.
    Si il te trouve des espions, supprime les. Enregistre le rapport et colle le ici stp

    AVG anti-spyware : reste gratuit après la période d'essai en français
    ---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html

    Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
    --> http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
    0
    2. death_axe444 Auteur
      Bon pour ce qui est de gmsys32.exe, j'ai trouvé un programme inconnu donc je l'ai supprimé.

      Mais pour ce qui est de syscfg32.exe, je n'ai absolument rien trouvé.

      Enfin, le seul résultat que j'ai obtenu pour szxqyq.exe est un fichier texte du type bloc-note de 4ko. J'ignore si c'était le virus mais je l'ai supprimé.

      Oh et j'ai refait un rapport hijackthis au cas ou tu en aurais besoin...

      Logfile of HijackThis v1.99.1
      Scan saved at 20:14:34, on 2007-03-16
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
      C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\user\Mes documents\Arnaud\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~2\COPERN~1.DLL
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O4 - HKLM\..\Run: [Windows Compliant] szxqyq.exe
      O4 - HKLM\..\Run: [internet service] syscfg32.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
      O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
      O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\RunServices: [Windows Compliant] szxqyq.exe
      O4 - HKLM\..\RunServices: [internet service] syscfg32.exe
      O4 - HKCU\..\Run: [Windows Compliant] szxqyq.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.0.6.5.cab
      O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
      O16 - DPF: {5CB1506E-1DEA-4E63-89A7-E40E52AEA1FD} (OnagerCtrl Class) - http://fulfillment.puretracks.com/onager.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
      O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
      O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

      Merci de l'aide.
      0
      1. death_axe444 Auteur
        dsl pour le double post mais l'analyse de AVG a étée très longue. Enfin voici le rapport...

        ---------------------------------------------------------
        AVG Anti-Spyware - Rapport d'analyse
        ---------------------------------------------------------

        + Créé à: 23:08:02 2007-03-16

        + Résultat de l'analyse:

        HKU\S-1-5-21-1085031214-688789844-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.STI\OpenWithList -> Adware.AlfaCleaner : Aucune action entreprise.
        HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#PCI#VEN_13F6&DEV_0111&SUBSYS_011113F6&REV_10#4&172A2BDD&0&38F0#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#Wave\Device Parameters\Mixer\ 5\Controls\ 1\\Channel Count -> Adware.Ezula : Aucune action entreprise.
        HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Adware.WebSearch : Aucune action entreprise.
        C:\Program Files\Fichiers communs\BTLINK\btlink.dll -> Adware.Wintol : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@atdmt[3].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@com[1].txt -> TrackingCookie.Com : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
        C:\Documents and Settings\user\Cookies\user@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Aucune action entreprise.

        Fin du rapport
        0
        1. Utilisateur anonyme
          Salut

          Recommence le scan avec AVG car rien n'a été supprimé Aucune action entreprise

          ¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

          O4 - HKLM\..\Run: [Windows Compliant] szxqyq.exe
          O4 - HKLM\..\Run: [internet service] syscfg32.exe
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKLM\..\RunServices: [Windows Compliant] szxqyq.exe
          O4 - HKLM\..\RunServices: [internet service] syscfg32.exe
          O4 - HKCU\..\Run: [Windows Compliant] szxqyq.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

          ¤ Télécharge ComboScan sur ton Bureau.
          http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

          Ferme toutes les applications en cours. (important)
          Double-clique sur comboscan.exe pour lancer l'outil.
          A la fenêtre de prévention, clique sur OK.
          L'analyse peut prendre quelques minutes.
          A la fenêtre indiquant la fin de l'analyse, clique sur OK.
          Le rapport Comboscan.txt s'affichera, envoie ce rapport dans ta future réponse.

          Note : Désactive ton pare-feu ainsi que ton antivirus lors de l'exécution de ComboScan.

          http://www.techsupportforum.com/sectools/Deckard/comboscan.exe
          0
          1. death_axe444 Auteur
            Pour ce qui est de AVG, j'ai juste pris le mauvais rapport. Voici le vrai rapport :

            ---------------------------------------------------------
            AVG Anti-Spyware - Rapport d'analyse
            ---------------------------------------------------------

            + Créé à: 15:09:28 2007-03-18

            + Résultat de l'analyse:

            HKU\S-1-5-21-1085031214-688789844-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.STI\OpenWithList -> Adware.AlfaCleaner : Nettoyé.
            HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#PCI#VEN_13F6&DEV_0111&SUBSYS_011113F6&REV_10#4&172A2BDD&0&38F0#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#Wave\Device Parameters\Mixer\ 5\Controls\ 1\\Channel Count -> Adware.Ezula : Nettoyé.
            HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Adware.WebSearch : Nettoyé.
            C:\Program Files\Fichiers communs\BTLINK\btlink.dll -> Adware.Wintol : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@atdmt[3].txt -> TrackingCookie.Atdmt : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@com[1].txt -> TrackingCookie.Com : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
            C:\Documents and Settings\user\Cookies\user@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.

            Fin du rapport

            Et voici le rapport comboscan :

            ComboScan v20070306.20 run by user on 2007-03-18 at 15:03:29
            Computer is in Normal Mode.
            --------------------------------------------------------------------------------

            -- System Restore --------------------------------------------------------------

            Successfully created ComboScan Restore Point.

            -- Last 5 Restore Point(s) --
            45: 2007-03-18 19:03:45 UTC - RP655 - ComboScan Restore Point
            44: 2007-03-17 01:47:30 UTC - RP654 - Installed Sunbelt Kerio Personal Firewall
            43: 2007-03-16 09:18:53 UTC - RP653 - Software Distribution Service 2.0
            42: 2007-03-15 02:33:09 UTC - RP652 - Point de vérification système
            41: 2007-03-14 00:47:05 UTC - RP651 - Point de vérification système

            -- First Restore Point --
            1: 2007-01-19 21:19:38 UTC - RP611 - Software Distribution Service 2.0

            Performed disk cleanup.

            -- HijackThis (run as user.exe) ------------------------------------------------

            Logfile of HijackThis v1.99.1
            Scan saved at 15:04:24, on 2007-03-18
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
            C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\System32\nvsvc32.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
            C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\HPZipm12.exe
            C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
            C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\KJO7C90X\comboscan[1].exe
            C:\DOCUME~1\user\MESDOC~1\Arnaud\user.exe
            C:\WINDOWS\system32\wscntfy.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~2\COPERN~1.DLL
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
            O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
            O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
            O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
            O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
            O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
            O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
            O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~2\COPERN~1.EXE
            O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
            O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.0.6.5.cab
            O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
            O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
            O16 - DPF: {5CB1506E-1DEA-4E63-89A7-E40E52AEA1FD} (OnagerCtrl Class) - http://fulfillment.puretracks.com/onager.cab
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
            O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
            O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
            O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
            O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
            O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
            O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
            O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

            -- HijackThis Fixed Entries (C:\DOCUME~1\user\MESDOC~1\Arnaud\backups\) --------

            backup-20070318-150051-868 O4 - HKLM\..\Run: [Windows Compliant] szxqyq.exe
            backup-20070318-150051-785 O4 - HKLM\..\Run: [internet service] syscfg32.exe
            backup-20070318-150051-565 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            backup-20070318-150051-960 O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            backup-20070318-150051-775 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            backup-20070318-150051-597 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
            backup-20070318-150051-192 O4 - HKLM\..\RunServices: [Windows Compliant] szxqyq.exe
            backup-20070318-150051-391 O4 - HKLM\..\RunServices: [internet service] syscfg32.exe
            backup-20070318-150051-808 O4 - HKCU\..\Run: [Windows Compliant] szxqyq.exe
            backup-20070318-150051-545 O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
            backup-20070318-150051-498 O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

            -- File Associations -----------------------------------------------------------

            .bat - batfile - "%1" %*
            .chm - chm.file - "C:\WINDOWS\hh.exe" %1
            .cmd - cmdfile - "%1" %*
            .com - comfile - "%1" %*
            .exe - exefile - "%1" %*
            .hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
            .inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
            .ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
            .js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
            .lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
            .pif - piffile - "%1" %*
            .reg - regfile - regedit.exe "%1"
            [COLOR=red].scr - AutoCADLTScriptFile - "C:\WINDOWS\notepad.exe" "%1"[/COLOR]
            .txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
            .vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*

            -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

            1R AFS2K - C:\WINDOWS\system32\drivers\AFS2K.SYS
            2R ANIO (ANIO Service) - C:\WINDOWS\system32\ANIO.sys
            2R Aspi32 - C:\WINDOWS\system32\drivers\aspi32.sys
            1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
            1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys
            1R avgio - C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys
            3R avgntflt - C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys
            3R cmpci (C-Media PCI Audio Driver (WDM)) - C:\WINDOWS\system32\drivers\cmaudio.sys
            3R Eplpdx02 - C:\WINDOWS\system32\drivers\EPLPDX02.SYS
            3S f9b62e89-11c2-413c-b1e4-ab8e397fc9d2 - D:\CDS300\cds300.dll (not found)
            1R fwdrv (Firewall Driver) - C:\WINDOWS\system32\drivers\fwdrv.sys
            3R HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\HPZid412.sys
            3R HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
            3R HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
            1R intelppm (Pilote de processeur Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
            3R itchfltr (iTouch Keyboard Filter) - C:\WINDOWS\system32\drivers\itchfltr.sys
            1R khips (Kerio HIPS Driver) - C:\WINDOWS\system32\drivers\khips.sys
            3R ms_mpu401 (Pilote UART MIDI MPU-401 Microsoft) - C:\WINDOWS\system32\drivers\msmpu401.sys
            3R MxlW2k - C:\WINDOWS\system32\drivers\MxlW2k.sys
            1R NPPTNT2 - C:\WINDOWS\system32\npptNT2.sys
            3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
            3S nv4 - C:\WINDOWS\system32\drivers\nv4.sys
            3R pfc (Padus ASPI Shell) - C:\WINDOWS\system32\drivers\pfc.sys
            0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
            3S rt2500usb (DWL-G122(rev.B) USB Wireless LAN Driver) - C:\WINDOWS\system32\drivers\rt2500usb.sys
            3R rtl8029 (Pilote NT de carte Realtek PCI Ethernet à base RTL8029(AS)) - C:\WINDOWS\system32\drivers\RTL8029.sys
            1R sdcplh - C:\WINDOWS\system32\drivers\sdcplh.sys
            0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
            0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
            0R sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfvfs02.sys
            3R usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
            3R usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
            3R usbscan (Pilote de scanneur USB) - C:\WINDOWS\system32\drivers\usbscan.sys
            3S USBSTOR (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS
            3S WpdUsb - C:\WINDOWS\system32\drivers\wpdusb.sys
            1R WS2IFSL (Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
            0R WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
            3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys
            3S XTrapD12 - C:\WINDOWS\system32\XTrapD12.sys (not found)

            -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

            2S ANIWZCSdService (ANIWZCSd Service) - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
            2R AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
            2R AntiVirService (AntiVir PersonalEdition Classic Guard) - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
            3S aspnet_state (Service d'état ASP.NET) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
            2R AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            3S clr_optimization_v2.0.50727_32 (.NET Runtime Optimization Service v2.0.50727_X86) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
            2R KPF4 (Sunbelt Kerio Personal Firewall 4) - "C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe"
            2R NVSvc (NVIDIA Driver Helper Service) - C:\WINDOWS\System32\nvsvc32.exe
            2R Pml Driver HPZ12 - C:\WINDOWS\system32\HPZipm12.exe
            3S usprserv (User Privilege Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
            4S WinDefend (Windows Defender Service) - "C:\Program Files\Windows Defender\MsMpEng.exe"

            -- Scheduled Tasks -------------------------------------------------------------

            2007-03-18 15:02:02 362 --a------ C:\WINDOWS\Tasks\Symantec NetDetect.job<SYMANT~1.JOB>
            2007-03-14 22:05:02 258 --a------ C:\WINDOWS\Tasks\Nettoyage de disque.job<NETTOY~1.JOB>
            2007-02-11 01:51:04 330 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job<MPSCHE~1.JOB>

            -- Files created between 2007-02-18 and 2007-03-18 -----------------------------

            2007-03-16 21:50:02 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
            2007-03-16 21:49:59 0 d-------- C:\Program Files\Grisoft
            2007-03-16 21:47:34 0 d-------- C:\Program Files\Sunbelt Software<SUNBEL~1>
            2007-03-16 17:23:53 0 d-------- C:\WINDOWS\system32\Kaspersky Lab<KASPER~1>
            2007-03-09 11:04:02 0 d-------- C:\Documents and Settings\user\Application Data\Uniblue
            2007-03-08 06:20:41 0 d-------- C:\Program Files\MSECache
            2007-02-20 13:34:08 71088 --a------ C:\WINDOWS\system32\drivers\khips.sys
            2007-02-20 13:34:02 302000 --a------ C:\WINDOWS\system32\drivers\fwdrv.sys

            -- Find3M Report ---------------------------------------------------------------

            2007-01-29 03:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
            2006-12-19 16:49:48 135168 --a------ C:\WINDOWS\system32\shsvcs.dll
            2006-12-19 13:17:50 334336 --a------ C:\WINDOWS\system32\wiaservc.dll

            -- Registry Dump ---------------------------------------------------------------

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
            "Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
            "D-Link AirPlus G"="C:\\Program Files\\D-Link\\AirPlus G\\AirGCFG.exe"
            "ANIWZCS2Service"="C:\\Program Files\\ANI\\ANIWZCS2 Service\\WZCSLDR2.exe"
            "avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
            "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
            "Installed"="1"

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
            "NoChange"="1"
            "Installed"="1"

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
            "Installed"="1"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
            "path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\HP Digital Imaging Monitor.lnk"
            "backup"="C:\\WINDOWS\\pss\\HP Digital Imaging Monitor.lnkCommon Startup"
            "location"="Common Startup"
            "command"="C:\\PROGRA~1\\HEWLET~1\\DIGITA~1\\bin\\hpqtra08.exe "
            "item"="HP Digital Imaging Monitor"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
            "path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\Microsoft Office.lnk"
            "backup"="C:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup"
            "location"="Common Startup"
            "command"="C:\\PROGRA~1\\MICROS~2\\Office\\OSA9.EXE -b -l"
            "item"="Microsoft Office"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]
            "path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\WinZip Quick Pick.lnk"
            "backup"="C:\\WINDOWS\\pss\\WinZip Quick Pick.lnkCommon Startup"
            "location"="Common Startup"
            "command"="C:\\PROGRA~1\\WinZip\\WZQKPICK.EXE "
            "item"="WinZip Quick Pick"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="Mixer"
            "hkey"="HKLM"
            "command"="Mixer.exe /startup"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="msmsgs"
            "hkey"="HKCU"
            "command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="MsnMsgr"
            "hkey"="HKCU"
            "command"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="NeroCheck"
            "hkey"="HKLM"
            "command"="C:\\WINDOWS\\System32\\\\NeroCheck.exe"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmapp]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="nmapp"
            "hkey"="HKLM"
            "command"="\"C:\\Program Files\\Pure Networks\\Network Magic\\nmapp.exe\" -autorun"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="NvCpl"
            "hkey"="HKLM"
            "command"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="nwiz"
            "hkey"="HKLM"
            "command"="nwiz.exe /install"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="qttask"
            "hkey"="HKLM"
            "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="hpgs2wnd"
            "hkey"="HKLM"
            "command"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysExplore]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="explorer32"
            "hkey"="HKLM"
            "command"="C:\\WINDOWS\\System32\\explorer32.exe"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="realsched"
            "hkey"="HKLM"
            "command"="C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe -osboot"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
            "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
            "item"="iTouch"
            "hkey"="HKLM"
            "command"="C:\\Program Files\\Logitech\\iTouch\\iTouch.exe"
            "inimapping"="0"

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
            "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
            "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
            "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

            [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
            "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
            "ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe"
            "Windows Compliant"="szxqyq.exe"

            [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
            "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
            "ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe"
            "Windows Compliant"="szxqyq.exe"

            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
            "DisableRegistryTools"=dword:00000000

            [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
            "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll"

            [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
            LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
            NetworkService REG_MULTI_SZ DnsCache\0\0
            rpcss REG_MULTI_SZ RpcSs\0\0
            imgsvc REG_MULTI_SZ StiSvc\0\0
            termsvcs REG_MULTI_SZ TermService\0\0
            HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
            DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
            WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0

            *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_AVGASCLN
            *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_FWDRV
            *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_KHIPS
            *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_KPF4

            -- End of ComboScan: finished at 2007-03-18 at 15:05:38 ------------------------

            Ça me prend déjà moins de temps pour me rendre sur CCM...
            0
            1. Utilisateur anonyme
              Bon ça semble pas très sale.

              ¤ Clic sur C:\DOCUMEnt and settings\user\Mes Documents \Arnaud et supprime :

              - backups

              ¤ Télécharge et double-clic sur ce fichier et accepte la fusion au registre
              http://www.mediafire.com/?fn0wnmuhljd

              ¤ Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
              ---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html

              - Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
              Les sauvegardes que tu aura faites, tu pourra les supprimer si ton ordinateur n'a plus de problémes.

              - Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

              Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel :
              https://kerio.probb.fr/t242-tuto-ccleaner-v-2

              ¤ Télécharge et installe ce logiciel
              jkdefrag
              Clic sur démarrer, tous les programmes, JkDefrag et laisse le travailler, fait ça deux fois de suite.
              0
              1. death_axe444 Auteur
                Désolé de ne pas avoir répondu plus rapidement mais j'avais des funérailles à Montréal et la défragmentation était assez longue ( environ 5-6 heures). Mais le plus important est que c'est fait.

                Le problème est que mon internet est encore lent pour les downloads (5 heures pour 422 Mo) et pour le surf. Même un de mes amis avec son portable de l'âge de pierre va plus vite que moi.

                Je crois que je devrais changer de fournisseur...
                0

                Discussions similaires

                FOTOSE (allemagne)
                lix

                13 réponses
                ATTENTION : escroquerie à la carte bleue !!
                dvrg

                80 réponses
                Info Free: Votre encours sur le service internet est supérieur à 10 €.
                Iphone4s

                22 réponses
                developement fotos!!
                dédé

                2 réponses