Probleme de fenêtre intempestives

wkY -  
Bonjour tout le monde :)

Voila depuis quelques jours, j'ai des fenêtres intempestives qui s'ouvrent et je n'arrive pas à regler le problème malgré mes recherches. Il y avait system doctor pendant un moment mais je crois avoir réussi à l'enlever mais il en reste encore :(

En voici un exemple : https://www.hiboox.com
Un autre ici : https://www.hiboox.com

PS : En fait je n ai pas réussi à enlever system docor :((

Merci de votre aide :)
Configuration: Windows XP
Firefox 2.0.0.4

23 réponses

Résumé de la discussion

Des fenêtres intempestives s'ouvrent et le problème persiste sur Windows XP avec le logiciel System Doctor, malgré des tentatives de suppression et de nettoyage dans Firefox 2.0.0.4. Plusieurs intervenants recommandent HiJackThis pour analyser l’infection, générer un rapport et, selon les instructions, renommer l’exécutable en Scanner.exe afin d’obtenir un log à partager. D'autres conseils préconisent de désinstaller Navilog1 via Ajout/Suppression et d'utiliser VundoFix pour scanner et supprimer les éléments suspectés, puis de partager les rapports HijackThis et vundofix pour analyse. Certains échanges évoquent Spybot comme outil complémentaire et soulignent la nécessité d’ouvrir un sujet dédié pour faciliter le traitement et éviter les confusions.

Bobot (l’IA à votre service)
  1. DARKILER
    Bonsoir !

    - Télécharge HiJackThis de Merijn sur ton bureau: https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
    - Renomme le fichier HiJackThis.exe en Scanner.exe pour cela, fais un clic droit sur le fichier HiJackThis.exe et choisis renommer dans la liste
    - Tape Scanner.exe et Appuye sur la touche Entrée.
    - Génère un rapport en suivant ces indications :
    - Double-clic sur Scanner.exe
    - Exécute le et clique sur Do a scan and save log file.
    - Le rapport s'ouvre sur le Bloc-Note
    - Colle le rapport ici, pour cela :
    - Menu Edition / Selectionner Tout
    - Menu Edition / copier
    - Ici dans un nouveau message : clic droit / coller
    1. ^^Marie^^
      OK

      1/ Désinstalle Navilog1 Via ajout/suppression des programmes --> Navilog1
      Ensuite supprime également ce dossier : C:\Program Files\navilog1
      puis vide ta corbeille

      2/Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
      http://www.atribune.org/ccount/click.php?id=4

      * Double-clique VundoFix.exe afin de le lancer.
      * Lorsque l'outil se lance à nouveau,
      * Clique sur le bouton Scan for Vundo.
      * Lorsque le scan est complété, clique sur le bouton Remove Vundo
      * Une invite te demandera si tu veux supprimer les fichiers, clique YES
      * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
      * Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK
      * Démarre ton PC à nouveau.
      * Copie/colle le contenu du rapport situé dans C:\vundofix.txt

      ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

      1. ^^Marie^^
        Fais un clic droit sur hijackthis, choisis "renommer" marque : abcde.exe
        Puis remet un rapport stp
        6. wkY Auteur
          Logfile of HijackThis v1.99.1
          Scan saved at 03:04:35, on 03/06/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Sygate\SPF\smc.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Gamers.IRC\mirc.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\Program Files\Steam\steam.exe
          C:\Program Files\Teamspeak\TeamSpeak.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Documents and Settings\Kévin\Bureau\hijackthis\Scanner.exe
          C:\Program Files\Mozilla Firefox\firefox.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: (no name) - {709AFF26-6BB0-4AD3-A3A3-1286592465D6} - C:\WINDOWS\system32\khffdee.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: (no name) - {8251F6D8-057A-4BFC-B860-367FB531E80A} - C:\WINDOWS\system32\jkkjg.dll
          O2 - BHO: (no name) - {8B2CA430-560F-4F30-A61F-AE00EB3DD835} - C:\WINDOWS\system32\jdwudbjt.dll
          O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\iclcegyt.dll
          O2 - BHO: (no name) - {D4AF5E3C-353B-4FAC-8BE0-E8BE7EF88053} - C:\WINDOWS\system32\jdwudbjt.dll
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
          O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [j6291334] rundll32 C:\WINDOWS\system32\j6291334.dll sook
          O4 - HKLM\..\Run: [Genuine] rundll32.exe "C:\WINDOWS\system32\ojxlffit.dll",realset
          O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
          O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
          O20 - Winlogon Notify: jkkjg - C:\WINDOWS\system32\jkkjg.dll
          O20 - Winlogon Notify: khffdee - C:\WINDOWS\SYSTEM32\khffdee.dll
          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
          O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
          1. mememad
            Bonjour,
            Subissant ce même désagrément + des fenêtres de "upfile", je suis très intéressée par la suite de vos commentaires...
            1. ^^Marie^^
              Bonjour mememad

              Il serait préférable que tu crées ton propre « topik » message personnel. Cela rendra le poste (ici) plus compréhensible, et nous pourrons traiter ton soucis avec plus d’efficacité.
              Donc
              Fais ce qui suit, SVP
              Merci
              http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm
              A++
              http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
          2. wkY Auteur
            Je remet un rapport d'aujourd'hui au cas où :)

            Logfile of HijackThis v1.99.1
            Scan saved at 13:23:53, on 03/06/2007
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Sygate\SPF\smc.exe
            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            C:\Program Files\Alwil Software\Avast4\ashServ.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
            C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            C:\WINDOWS\SOUNDMAN.EXE
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            C:\Program Files\Mozilla Firefox\firefox.exe
            C:\WINDOWS\explorer.exe
            C:\Documents and Settings\Kévin\Bureau\hijackthis\Scanner.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O2 - BHO: (no name) - {709AFF26-6BB0-4AD3-A3A3-1286592465D6} - C:\WINDOWS\system32\khffdee.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: (no name) - {8B2CA430-560F-4F30-A61F-AE00EB3DD835} - C:\WINDOWS\system32\jdwudbjt.dll
            O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\iclcegyt.dll
            O2 - BHO: (no name) - {D4AF5E3C-353B-4FAC-8BE0-E8BE7EF88053} - C:\WINDOWS\system32\jdwudbjt.dll
            O2 - BHO: (no name) - {DDA82188-6F44-41D0-8BA6-8199C113A300} - C:\WINDOWS\system32\jkkjg.dll
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
            O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [j6291334] rundll32 C:\WINDOWS\system32\j6291334.dll sook
            O4 - HKLM\..\Run: [Genuine] rundll32.exe "C:\WINDOWS\system32\ojxlffit.dll",realset
            O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\camufqeb.dll",realset
            O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
            O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
            O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
            O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
            O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
            O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
            O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
            O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
            O20 - Winlogon Notify: jkkjg - C:\WINDOWS\system32\jkkjg.dll
            O20 - Winlogon Notify: khffdee - C:\WINDOWS\SYSTEM32\khffdee.dll
            O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
            O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
            O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
            O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
            O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
            O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
            O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
            1. ^^Marie^^
              Bonjour

              Tu as toujours des pubs ??

              Prends connaissance du contenu le lien suivant:

              http://www.f-secure.com/products/license-terms/eult_fra.pdf

              Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.

              Maintenant fais un clic droit sur ce lien :

              http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip

              Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.

              Fais un clic droit sur navilog1.zip et choisis "tout extraire"

              Ensuite double clique sur navilog1.bat
              Laisses-toi guider.

              Au menu principal, choisis 1 et valides.
              (Ne fais pas le choix 2 sans notre avis/accord)

              Patientes jusqu'au message :

              *** Analyse Termine le ..... ***

              Appuies sur une touche comme demandé, le bloc note va s'ouvrir.

              Copies-colles l'intégralité dans une réponse.

              Refermes le bloc note.

              Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

          3. wkY Auteur
            Oui j'ai toujours des pubs :( Donc voici le rapport comme demandé :

            Search Navipromo version 2.0.2 commencé le 04/06/2007 à 23:24:49,14

            !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
            !!! Poster ce rapport sur le forum pour le faire analyser !!!
            !!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

            Fix lancé depuis C:\Program Files\navilog1
            Mise a jour le 17.05.2007 a 23h00 by IL-MAFIOSO

            Executé en mode normal

            *** Recherche Programmes installes ***

            *** Recherche dossiers dans C:\WINDOWS ***

            *** Recherche dossiers dans C:\Program Files ***

            *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

            *** Recherche dossiers dans C:\Documents and Settings\K‚vin\Application Data ***

            *** Recherche avec BlackLight Engine/F-secure ***
            BlackLight Engine est un produit de F-secure, pour + d'infos :
            https://www.f-secure.com/en

            F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
            ======================================

            Copyright 2005-2006 F-Secure Corporation. All rights reserved.
            This is a beta version. It will expire on 1st of April, 2007.
            Version information: 2.2.1061.

            [+] Started on 06/04/07 at 23:24:51.
            [+] Initializing ...
            [+] Starting scan, press Ctrl-C to abort.
            [+] Scanning for hidden items ......................................................
            [+] Scan complete.
            [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
            [+] Exited on 06/04/07 at 23:31:02 (return code = 0).

            *** Recherche fichiers ***

            *** Recherche cles registre ***

            Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]

            Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]

            Recherche Clé Magic Control

            *** Module de Recherche complémentaire ***
            (Recherche fichiers spécifiques)

            1)Recherche fichiers connus:

            C:\WINDOWS\system32\gjkkj.ini2 trouvé ! infection Vundo possible non traité par cet outil !
            C:\WINDOWS\system32\gjkkj.bak1 trouvé ! infection Vundo possible non traité par cet outil !
            C:\WINDOWS\system32\gjkkj.bak2 trouvé ! infection Vundo possible non traité par cet outil !

            2)Recherche Heuristique :
            *
            **
            ***
            ****
            *****
            ******
            *******
            ********

            *** Analyse Terminé le 04/06/2007 à 23:31:15,70 ***
            1. wkY Auteur
              VundoFix V6.4.2

              Checking Java version...

              Java version is 1.5.0.10

              Scan started at 21:08:28 05/06/2007

              Listing files found while scanning....

              C:\WINDOWS\system32\beqfumac.ini
              C:\WINDOWS\system32\bkcdeayg.dll
              C:\WINDOWS\system32\camufqeb.dll
              C:\WINDOWS\system32\drqyjfwo.ini
              C:\WINDOWS\system32\dvpxnywg.dll
              C:\WINDOWS\system32\eelteame.dll
              C:\WINDOWS\system32\emaetlee.ini
              C:\WINDOWS\system32\gjkkj.bak1
              C:\WINDOWS\system32\gjkkj.bak2
              C:\WINDOWS\system32\gjkkj.ini
              C:\WINDOWS\system32\gjkkj.ini2
              C:\WINDOWS\system32\gjkkj.tmp
              C:\WINDOWS\system32\gwynxpvd.ini
              C:\WINDOWS\system32\gyaedckb.ini
              C:\WINDOWS\system32\hxerootv.ini
              C:\WINDOWS\system32\iclcegyt.dll
              C:\WINDOWS\system32\jkkjg.dll
              C:\WINDOWS\system32\khffdee.dll
              C:\WINDOWS\system32\ocknmceq.dll
              C:\WINDOWS\system32\owfjyqrd.dll
              C:\WINDOWS\system32\vtoorexh.dll
              C:\WINDOWS\system32\wodltmwf.dll
              C:\WINDOWS\system32\yaninhpy.ini
              C:\WINDOWS\system32\yphninay.dll

              Beginning removal...

              Attempting to delete C:\WINDOWS\system32\beqfumac.ini
              C:\WINDOWS\system32\beqfumac.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\bkcdeayg.dll
              C:\WINDOWS\system32\bkcdeayg.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\camufqeb.dll
              C:\WINDOWS\system32\camufqeb.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\drqyjfwo.ini
              C:\WINDOWS\system32\drqyjfwo.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\dvpxnywg.dll
              C:\WINDOWS\system32\dvpxnywg.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\eelteame.dll
              C:\WINDOWS\system32\eelteame.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\emaetlee.ini
              C:\WINDOWS\system32\emaetlee.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gjkkj.bak1
              C:\WINDOWS\system32\gjkkj.bak1 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gjkkj.bak2
              C:\WINDOWS\system32\gjkkj.bak2 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gjkkj.ini
              C:\WINDOWS\system32\gjkkj.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gjkkj.ini2
              C:\WINDOWS\system32\gjkkj.ini2 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gjkkj.tmp
              C:\WINDOWS\system32\gjkkj.tmp Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gwynxpvd.ini
              C:\WINDOWS\system32\gwynxpvd.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\gyaedckb.ini
              C:\WINDOWS\system32\gyaedckb.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\hxerootv.ini
              C:\WINDOWS\system32\hxerootv.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\iclcegyt.dll
              C:\WINDOWS\system32\iclcegyt.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\jkkjg.dll
              C:\WINDOWS\system32\jkkjg.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\khffdee.dll
              C:\WINDOWS\system32\khffdee.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\ocknmceq.dll
              C:\WINDOWS\system32\ocknmceq.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\owfjyqrd.dll
              C:\WINDOWS\system32\owfjyqrd.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\vtoorexh.dll
              C:\WINDOWS\system32\vtoorexh.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\wodltmwf.dll
              C:\WINDOWS\system32\wodltmwf.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\yaninhpy.ini
              C:\WINDOWS\system32\yaninhpy.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\yphninay.dll
              C:\WINDOWS\system32\yphninay.dll Has been deleted!

              Performing Repairs to the registry.
              Done!
              1. wkY Auteur
                Logfile of HijackThis v1.99.1
                Scan saved at 21:19:34, on 05/06/2007
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Sygate\SPF\smc.exe
                C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                C:\Program Files\Alwil Software\Avast4\ashServ.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\Explorer.EXE
                C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
                C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                C:\WINDOWS\SOUNDMAN.EXE
                C:\WINDOWS\system32\svchost.exe
                C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                C:\Program Files\Teamspeak\TeamSpeak.exe
                C:\Program Files\Gamers.IRC\mirc.exe
                C:\Program Files\Steam\steam.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Documents and Settings\Kévin\Bureau\hijackthis\Scanner.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                O2 - BHO: (no name) - {07636360-6822-4E55-BF95-C0CAFEEA5D30} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: (no name) - {8B2CA430-560F-4F30-A61F-AE00EB3DD835} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                O2 - BHO: (no name) - {CD527E66-A38A-43DF-AE9A-DD7AC6B15530} - C:\WINDOWS\system32\jkkjg.dll (file missing)
                O2 - BHO: (no name) - {D4AF5E3C-353B-4FAC-8BE0-E8BE7EF88053} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
                O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                O4 - HKLM\..\Run: [ApachInc] rundll32.exe "C:\WINDOWS\system32\dvpxnywg.dll",realset
                O4 - HKLM\..\Run: [j9281439] rundll32 C:\WINDOWS\system32\j9281439.dll sook
                O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
                O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
                O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
                O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
                1. wkY Auteur
                  Logfile of HijackThis v1.99.1
                  Scan saved at 23:00:02, on 05/06/2007
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Sygate\SPF\smc.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\Teamspeak\TeamSpeak.exe
                  C:\Program Files\Gamers.IRC\mirc.exe
                  C:\Program Files\Steam\steam.exe
                  C:\Program Files\Steam\steamapps\dyonis0sleheros\dedicated server\hltv.exe
                  C:\Program Files\Mozilla Firefox\firefox.exe
                  C:\Program Files\MSN Messenger\msnmsgr.exe
                  C:\Program Files\MSN Messenger\msnmsgr.exe
                  C:\Program Files\MSN Messenger\usnsvc.exe
                  C:\Documents and Settings\Kévin\Bureau\hijackthis\abcde.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                  O2 - BHO: (no name) - {07636360-6822-4E55-BF95-C0CAFEEA5D30} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: (no name) - {8B2CA430-560F-4F30-A61F-AE00EB3DD835} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                  O2 - BHO: (no name) - {CD527E66-A38A-43DF-AE9A-DD7AC6B15530} - C:\WINDOWS\system32\jkkjg.dll (file missing)
                  O2 - BHO: (no name) - {D4AF5E3C-353B-4FAC-8BE0-E8BE7EF88053} - C:\WINDOWS\system32\jdwudbjt.dll (file missing)
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
                  O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [ApachInc] rundll32.exe "C:\WINDOWS\system32\dvpxnywg.dll",realset
                  O4 - HKLM\..\Run: [j9281439] rundll32 C:\WINDOWS\system32\j9281439.dll sook
                  O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                  O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                  O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
                  O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                  O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                  O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                  O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
                  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
                  1. raleuboleu
                    alut!!!

                    entre deux euhhhhh merdes looool fais ceci :

                    virus methode preliminaire de desinfection version fr

                    et meme apres passe avg de temps a autres, Cclener disons 1 x par semaine et le scan en ligne est bon !! vraiment!! bizoux
                    1. wkY Auteur
                      Merci à tous je crois que mon problème est résolu mais au démarrage j'ai une erreur, je vais vous faire un petit screen :)
                      3. raleuboleu
                        raaaaaaaaaaaaaaaaaaa

                        tout ca pour la belle gosse looool

                        nan je rigole

                        reposte 1 log hijack stp , dsl je suis restée 2 jour sans pc et je me repere et repare looool

                        bizoux
                        1. wkY Auteur
                          Logfile of HijackThis v1.99.1
                          Scan saved at 11:09:03, on 12/06/2007
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Sygate\SPF\smc.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\Program Files\MSN Messenger\usnsvc.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\WINDOWS\SOUNDMAN.EXE
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                          C:\Program Files\eMule\emule.exe
                          C:\Program Files\Mozilla Firefox\firefox.exe
                          C:\Program Files\Gamers.IRC\mirc.exe
                          C:\Documents and Settings\Kévin\Bureau\hijackthis\abcde.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                          O2 - BHO: (no name) - {07636360-6822-4E55-BF95-C0CAFEEA5D30} - (no file)
                          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                          O2 - BHO: (no name) - {8B2CA430-560F-4F30-A61F-AE00EB3DD835} - (no file)
                          O2 - BHO: (no name) - {CD527E66-A38A-43DF-AE9A-DD7AC6B15530} - (no file)
                          O2 - BHO: (no name) - {D4AF5E3C-353B-4FAC-8BE0-E8BE7EF88053} - (no file)
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
                          O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                          O4 - HKLM\..\Run: [j9281439] rundll32 C:\WINDOWS\system32\j9281439.dll sook
                          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                          O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                          O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                          O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
                          O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
                          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
                          O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
                          • 1
                          • 2

                          Discussions similaires

                          Caler une adresse au niveau de la fenêtre d'une enveloppe
                          ®omain

                          15 réponses
                          Quel est le raccourci clavier pour le plein écran ?
                          Carotte77

                          19 réponses
                          Ouvrir les fenêtres Windows plein écran ?
                          expan

                          8 réponses
                          Fenêtre Windows ne s'ouvre pas en plein écran
                          Violyne

                          9 réponses
                          Positionner l'adresse dans la fenêtre de l'enveloppe
                          Ifa.Endura

                          4 réponses