Virus et spyware au secours

marueck -  
 marueck -
bonjour a tous je suis pris d'assaut par les pub spyware- secur , navisearchet autre enplus bitdefender ma trouver le virus suivant backdoor skinyme agent a comment enlever tous ca svp merci
Configuration: Windows XP
Firefox 2.0.0.3

15 réponses

  1. marueck
     
    voila mon rapport hijackthis si vous pouvez me d'écrire se que cela veut dire merci
    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 15:15:24, on 28/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\tcpsvcs.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Antipub\antipub.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
    C:\PROGRA~1\SPYWAR~1\SPYWAR~1.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\SPYWAR~1\SPYWAR~1.EXE
    C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis_v2.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60308
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
    O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S92.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\E_S30.tmp" /EF "HKCU"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Crawler Search - tbr:iemenu
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
    O18 - Protocol: bw+0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Service SNMP (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
    O24 - Desktop Component 0: (no name) - http://perso.wanadoo.fr/christophe.giorg/bmwfonds2/fondbmw18small.jpg
    0
  2. Utilisateur anonyme
     
    Bonjour

    Commence par faire ceci :

    A² squared : gratuit en français (fait un scan rusé et colle le rapport ici stp)
    ----> http://www.infos-du-net.com/telecharger/a-squared,0301-1233.html

    Si tu as besoin d'aide avec A-squared regarde ce tutoriel :
    --> http://redir.fr/gell

    ET

    Télécharge et installe AVG anti-spyware : mets le à jour
    Tu fais un scan complet de ton système, dès qu'il a fini.
    Si il te trouve des espions,supprime les. Enregistre le rapport et colle le ici stp

    Téléchargeable et tutoriel sur cette page :
    --> http://redir.fr/gsel

    Si tu n'arrives pas à le mettre à jour prends ici les mises à jour
    http://downloads.ewido.net/avgas-signatures-full-current.exe
    0
    1. marueck
       
      voila mon rapport a-sguared
      Version - a-squared Free 2.1

      Réglages Scan:

      Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
      Scan archives: Marche
      Heuristiques: Marche
      Scan ADS: Marche

      Début du scan: 29/05/2007 21:21:41

      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@2o7[1].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@adserver.aol[2].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@adtech[2].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@bluestreak[2].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@tradedoubler[2].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[2].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@zedo[1].txt Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:14 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:15 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:16 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:17 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:74 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:76 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:78 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:79 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:82 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:83 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:84 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:92 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:94 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:98 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:105 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:106 Détecter: Trace.TrackingCookie
      C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:107 Détecter: Trace.TrackingCookie
      C:\WINDOWS\system32\Process.exe Détecter: Riskware.RiskTool.Win32.Processor.20
      C:\Program Files\Navilog1\Process.exe Détecter: Riskware.RiskTool.Win32.Processor.20

      Scanné

      Fichiers: 80972
      Traces: 116284
      Cookies: 200
      Processus: 40

      Trouver

      Fichiers: 2
      Traces: 0
      Cookies: 24
      Processus: 0
      Clés de Registre: 0

      Fin du Scan: 29/05/2007 21:43:55
      Temps du Scan: 00:22:14
      0
  3. marueck
     
    voila mon rapport avg merci pour l'aide
    AVG Anti-Spyware - Rapport d'analyse
    ---------------------------------------------------------

    + Créé à: 22:08:41 29/05/2007

    + Résultat de l'analyse:

    C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
    C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
    :mozilla.91:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
    :mozilla.92:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
    :mozilla.94:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
    :mozilla.33:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
    :mozilla.126:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
    :mozilla.90:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
    :mozilla.86:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
    :mozilla.21:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.22:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.23:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.24:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.25:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.26:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.27:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    :mozilla.28:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
    C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
    :mozilla.108:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
    :mozilla.111:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
    :mozilla.102:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
    :mozilla.103:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
    :mozilla.104:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
    :mozilla.105:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.

    Fin du rapport
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. Utilisateur anonyme
     
    Bien

    Clic sur démarrer, panneau de configuration ajouter/supprimer des programmes et désinstalle :

    - Desktop Messenger (inutile pour ta cam et suspect)

    ¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60308
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

    ¤ Clic sur "démarrer", "exécuter", tape: services.msc
    Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"

    - AVG Anti-Spyware Guard
    - NVIDIA Display Driver Service

    ¤ ¤ Fais ce nettoyage: à faire réguliérement

    *Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
    ---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html

    - Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
    Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problémes.

    - Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

    Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel :
    http://redir.fr/gmll

    ¤ Télécharges Blacklight et sauvegarde le sur ton bureau.
    https://www.f-secure.com/en
    Double cliques sur " blbeta.exe " et acceptes la licence; clic sur "Scan" puis "Next"

    Un rapport, va se créer sur ton bureau "fslb-....."
    Copies et colles le contenu de ce rapport ici.

    Ne touche à rien d'autre!
    0
  6. marueck
     
    voila j'ai fait tout comme tu ma dit et voila le rapport blacligt
    05/30/07 19:35:54 [Info]: BlackLight Engine 1.0.61 initialized
    05/30/07 19:35:54 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    05/30/07 19:35:54 [Note]: 7019 4
    05/30/07 19:35:54 [Note]: 7005 0
    05/30/07 19:35:54 [Note]: 7006 0
    05/30/07 19:35:55 [Note]: 7011 1744
    05/30/07 19:35:55 [Note]: 7026 0
    05/30/07 19:35:55 [Note]: 7026 0
    05/30/07 19:35:55 [Note]: 7024 3
    05/30/07 19:35:55 [Info]: Hidden process: C:\windows\system32\gsrvxyqul.exe
    05/30/07 19:35:57 [Note]: FSRAW library version 1.7.1021
    05/30/07 19:38:46 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul.dat
    05/30/07 19:38:46 [Note]: 10002 1
    05/30/07 19:38:46 [Info]: Hidden file: C:\windows\system32\gsrvxyqul.exe
    05/30/07 19:38:46 [Note]: 10002 1
    05/30/07 19:38:46 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul_nav.dat
    05/30/07 19:38:46 [Note]: 10002 1
    05/30/07 19:38:47 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul_navps.dat
    05/30/07 19:38:47 [Note]: 10002 1
    05/30/07 19:39:20 [Note]: 2000 1012
    05/30/07 19:39:20 [Note]: 7007 0
    0
  7. Utilisateur anonyme
     
    Télécharge Navipromo dans tes documents :
    http://perso.numericable.fr/~altshift/Info/Fichiers/Navipromo07.zip

    Télécharge C.C.M dans tes documents
    http://www.mediafire.com/?3xywdon0gt1
    ----

    Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..

    ----
    Décompresse Navipomo puis double clic sur Navipromo.bat Puis appuye sur la touche R pour lancer la recherche.
    Si il te trouve quelque chose appuye sur une touche pour continuer un rapport sera créé à la raine de C:\Navipromo.txt

    Ensuite double clic sur le dossier CCM pour le décompresser, tu devrais avoir les deux fichiers dans le même dossier.
    Double clic sur BFU.exe, clic sur le petit dossier jaune puis double clic sur EGDACCESS.bfu
    Coche la case "scriptfile to execute" puis clic sur "execute" et laisse-le faire son travail.
    Attends que "complete script execution" apparaisse puis clic sur Ok.

    Ensuite clic sur "save" et enregistre le rapport où tu le retrouveras facilement, redémarre ton PC en mode normal et colle ton rapport ici dès que c'est fait ;-)
    0
  8. marueck
     
    voila j'ai fait tou ce que tu ma dit et merci pour l'aide
    voila le rapport navipromo
    Rapport Navipromo.bat 0.71 effectué le 31/05/2007 à 18:39:55,01

    L'opération se déroule en mode sans échec sous le compte Compaq_Propri‚taire

    ** Recherche...

    1/ gsrvxyqul trouvé, recherche de gsrvxyqul*
    C:\WINDOWS\system32\gsrvxyqul.dat
    C:\WINDOWS\system32\gsrvxyqul.exe
    C:\WINDOWS\system32\gsrvxyqul_nav.dat
    C:\WINDOWS\system32\gsrvxyqul_navps.dat
    C:\WINDOWS\prefetch\GSRVXYQUL.EXE-1801E292.pf

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    gsrvxyqul REG_SZ c:\windows\system32\gsrvxyqul.exe gsrvxyqul

    ------------------
    Fin du rapport de recherche
    Adware Navipromo trouvé 1 fois avec cette méthode

    ################################################

    ** Nettoyage...

    1/ Déplacement de gsrvxyqul* vers C:\Navipromo\Backups...
    C:\WINDOWS\System32\gsrvxyqul* déplacé avec succès !
    C:\WINDOWS\prefetch\gsrvxyqul* déplacé avec succès

    ------------------
    * Suppression clés et valeurs de registre
    1 entrées de registre netttoyées

    * Backups :

    C:\Navipromo\Backups\ARPCache.reg
    C:\Navipromo\Backups\gsrvxyqul.dat
    C:\Navipromo\Backups\gsrvxyqul.exe
    C:\Navipromo\Backups\GSRVXYQUL.EXE-1801E292.pf
    C:\Navipromo\Backups\gsrvxyqul_nav.dat
    C:\Navipromo\Backups\gsrvxyqul_navps.dat
    C:\Navipromo\Backups\HKCURun.reg
    C:\Navipromo\Backups\HKLMRun.reg
    C:\Navipromo\Backups\Uninstall.reg

    Ajout d'extension .off aux backups

    ## Fin du rapport de Suppression

    -------------
    0
  9. marueck
     
    et voila le rapport ccm et merci encore
    BFU v1.00.9
    Windows XP SP2 (WinNT 5.01.2600 SP2)
    Script started at 18:50:12, on 31/05/2007

    Option Delete files to Recycle Bin: Yes
    Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|MC (key not found)
    Failed: RegDelValue HKCU\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0|ELECTRONIC GROUP (key not found)
    Failed: DllUnregister C:\WINDOWS\system32\MSWBM32.DLL|1 (file not found)
    Failed: DllUnregister C:\Program Files\MailSkinner\OESkinner.dll|1 (file not found)
    Failed: DllUnregister C:\WINDOWS\system32\HotTVPlayer.dll|1 (file not found)
    Failed: FolderDelete C:\Program Files\dialpass (folder not found)
    Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found)
    Failed: FolderDelete C:\Program Files\egroup (folder not found)
    Failed: FolderDelete C:\Program Files\Instant Access (folder not found)
    Failed: FolderDelete C:\Program Files\MailSkinner (folder not found)
    Failed: FolderDelete C:\Program Files\InternetGameBox (folder not found)
    Failed: FolderDelete C:\Program Files\GoRecord2 (folder not found)
    Failed: FolderDelete C:\Program Files\GoAstro (folder not found)
    Failed: FolderDelete C:\Program Files\SudoPlanet (folder not found)
    Failed: FolderDelete C:\Program Files\WebMediaPlayer (folder not found)
    Failed: FolderDelete C:\Program Files\MessengerSkinner (folder not found)
    Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found)
    Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found)
    Failed: FolderDelete C:\WINDOWS\mslagent (folder not found)
    Failed: FolderDelete C:\WINDOWS\navmpc (folder not found)
    Failed: FolderDelete C:\WINDOWS\msskinner (folder not found)
    Failed: FolderDelete C:\WINDOWS\wintrim (folder not found)
    Failed: FolderDelete C:\WINDOWS\wincomp (folder not found)
    Failed: FolderDelete C:\WINDOWS\winmgts (folder not found)
    Failed: FolderDelete C:\WINDOWS\simcss (folder not found)
    Failed: FolderDelete C:\WINDOWS\mc (folder not found)
    Failed: FileDelete C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4AEA.tmp (operation failed)
    Failed: FolderCreate C:\WINDOWS\system32\bfubackups (folder already exists)
    Script completed.
    0
  10. marueck
     
    salut j'aimerai savoir si c'est fini ou si ya des truc encore a faire car j'ai plus de nouvelle merci
    0
  11. Utilisateur anonyme
     
    Bonjour

    Tu peux supprimer ce dossier : C:\Navipromo\

    Comment va ton PC ?
    0
  12. marueck
     
    il va beaucoup mieux plus de pub qui apparait c'est nickel mais je c'est pas si c''est fini ou si il faut encore supprimer des truc cacher comme ta pu trouver merci en tou cas
    0