Suspect virus ou autre salopperie

Bonjour,
pourriez vous svp ,inspecter ce rapport hijacktis?
mon pc est lent et je me demende si j'ai pas une salopperie

merci d'avence

Logfile of HijackThis v1.99.1
Scan saved at 22:47:44, on 04/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\system32\hphmon03.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Eset\nod32kui.exe
C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\HPHipm09.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
F:\install generale +crack\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: CInterceptor Object - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - C:\Program Files\Pando Networks\Pando\PandoIEPlugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [HPHmon03] C:\WINDOWS\system32\hphmon03.exe
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\pando.exe" /Minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe
Configuration: Windows XP
Firefox 2.0.0.11

10 réponses

  1. Contributeur sécurité
    slt vire si present via ton panneau de configuration

    CInterceptor Object et pando

    __________________

    utilise pour supprimer tes traces

    CCLEANER: (lance un nettoyage et répare 3 fois les erreurs) sans installer la barre yahoo

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
    ___________________

    AVG antispyware

    https://www.01net.com/telecharger/

    Tuto :
    http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

    ->Relance AVG AS -> "Analyse" ->"Paramètres"

    Sous la question "Comment réagir ?" :

    -> clique sur "Actions recommandées" et choisis "Quarantaines"
    -> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

    Si un fichier est infecté en fin d'analyse

    ->Clique sur "Appliquer toutes les actions "

    ->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

    ->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici

    _________________________

    colle le rapport d'un scan en ligne
    avec un des suivants:

    bitdefender en ligne :
    http://www.bitdefender.fr/scan_fr/scan8/ie.html

    Panda en ligne :
    http://pandasoftware.fr

    secuser en ligne :
    http://www.secuser.com/outils/antivirus.htm
    _____________________

    recole hijakthis
    0
    1. ---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 08:58:50 05/01/2008

      + Résultat de l'analyse:

      D:\données\dossier cinzia\dOcUmEnT dE CinZia\FOtO Et Imange De CinZia\tof rien ke des copin et copine\Messenger Plus! - Setup.exe/sponsor.exe -> Downloader.Swizzor.ag : Nettoyé.
      D:\incoming\serveur edonkey\URL2FILE.exe -> Not-A-Virus.Downloader.Win32.Url2File.a : Nettoyé.
      :mozilla.39:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
      :mozilla.17:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.18:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.19:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
      :mozilla.34:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
      :mozilla.10:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.14:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.8:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.9:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
      :mozilla.6:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      :mozilla.7:C:\Documents and Settings\lino\Application Data\Mozilla\Firefox\Profiles\bja2sres.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
      F:\install generale +crack\nood32 fr+crack\ESET.NOD32.v2.51.30.WinNT2K2K3XP.Cracked-BRD.rar/crack\patch2.exe -> Trojan.Agent.vw : Nettoyé.
      F:\install generale +crack\nood32 fr+crack\ESET.NOD32.v2.51.30.WinNT2K2K3XP.Cracked-BRD.rar/crack\patch3.exe -> Trojan.Agent.vw : Nettoyé.
      F:\install generale +crack\nood32 fr+crack\ESET.NOD32.v2.51.30.WinNT2K2K3XP.Cracked-BRD.rar/crack\patch4.exe -> Trojan.Agent.vw : Nettoyé.
      D:\System Volume Information\_restore{6FDFA9E5-9327-488B-8D7A-343275493FA7}\RP56\A0031505.exe -> Trojan.Keygen.s : Nettoyé.
      D:\System Volume Information\_restore{6FDFA9E5-9327-488B-8D7A-343275493FA7}\RP59\A0038134.exe -> Trojan.Keygen.s : Nettoyé.
      F:\install generale +crack\crak\Symantec Norton Ghost 9.0 (Keygen) SSG.exe -> Trojan.Keygen.s : Nettoyé.

      Fin du rapport

      voila ,merci pour ton aide

      voici le nouveau rapport hijackthis

      Logfile of HijackThis v1.99.1
      Scan saved at 09:02:33, on 05/01/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Eset\nod32krn.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\SearchIndexer.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      C:\WINDOWS\system32\hphmon03.exe
      C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
      C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Eset\nod32kui.exe
      C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      C:\WINDOWS\system32\HPHipm09.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      F:\install generale +crack\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [HPHmon03] C:\WINDOWS\system32\hphmon03.exe
      O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\RunOnce: [PandoBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -3
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
      O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
      O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
      O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe
      0
      1. Contributeur sécurité
        viré tes cracks.:) . Ensuite désactive ta restauration système (. Dans DÉMARRER puis TOUS LES PROG . Puis ACCESSOIRE puis OUTILS SYSTÈME puis RESTAURATION .puis PARAMÈTRE.) redémarre ton ordi puis réactive la . Colle moi ensuite un scan en ligne bitdefender et dis moi tes problèmes . À plus
        0
        1. voici le rapport ,merci man

          file:///C:/Documents%20and%20Settings/lino/Bureau/Nouveau%20dossier/raport.html

          @@+++
          0
          1. Contributeur sécurité
            relance hijackthis, fais do a system scan only puis fix ces fignes (fix cheked)

            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
            O4 - HKLM\..\RunOnce: [PandoBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -3

            _______________________

            le rapport du scan en ligne est pas bon il faut me coller le rapport avec l'action, le nom des virus et les fichiers inféctés
            puis me dire tes soucis actuel

            si nod 32 n'est pas legal installe antivir a la place en gratuit

            https://www.malekal.com/avira-free-security-antivirus-gratuit/
            0
            1. ok super ,j'ai pas version complete de nood 32 efectivement ,je vais installer l'anti virus que tu me recomende ,mais il est seulement en englais?? ou il y a moyen de le passer en francais??

              merci man

              a oui je vais refaire le scan avec bidefeneder ,et essayer de le mettre complet mais je comprend pas il me semble que j'ai cliquer sur sauvegarder le scan??

              @@+++
              0
              1. Contributeur sécurité
                oui selement en anglais

                sinon mets avast en francais: mais moins efficace

                https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/25899.html

                ______________________

                mets a jour internet explorer ici:

                https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

                puis colle soit le rapports d'un scan en ligne soit un rapport antivir

                bitdefender en ligne :
                http://www.bitdefender.fr/scan_fr/scan8/ie.html

                Panda en ligne :
                http://pandasoftware.fr

                secuser en ligne :
                http://www.secuser.com/outils/antivirus.htm

                scan en ligne firefox

                https://www.trendmicro.com/fr_fr/business.html

                _______________________

                pour protéger gratos ton ordi

                http://www.commentcamarche.net/telecharger/logiciel 4 securite

                mettre un antivirus

                AVAST en français ou ANTIVIR (en anglais mais très efficace)
                https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
                -------------
                des anti-espions :
                AD AWARE + SPYBOT +/- si tea timer non active de spybot: WINDOWS DEFENDER

                +
                SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

                Rq : spybot et ad-aware on sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
                --------
                un pare feu :
                celui de Windows ou mieux KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

                https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
                https://manuelsdaide.com/contact/
                http://www.open-files.com/forum/index.php?showtopic=29277
                http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

                -----------

                CCLEANER pour effacer les traces de surf
                0
                1. ok man ,merci c cool j'ai installer ANTIVIR en englais (pas grave) j'ai fait unscan complet je te met le rapport ici

                  AntiVir PersonalEdition Classic
                  Report file date: samedi 5 janvier 2008 20:19

                  Scanning for 1000802 virus strains and unwanted programs.

                  Licensed to: Avira AntiVir PersonalEdition Classic
                  Serial number: 0000149996-ADJIE-0001
                  Platform: Windows XP
                  Windows version: (Service Pack 2) [5.1.2600]
                  Username: SYSTEM
                  Computer name: XPSP2-6C8A9A87F

                  Version information:
                  BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
                  AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
                  AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
                  LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
                  LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
                  ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 19:17:33
                  ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 19:17:33
                  ANTIVIR2.VDF : 7.0.1.170 311296 Bytes 28/12/2007 19:17:33
                  ANTIVIR3.VDF : 7.0.1.194 93696 Bytes 04/01/2008 19:17:33
                  AVEWIN32.DLL : 7.6.0.46 3084800 Bytes 05/01/2008 19:17:33
                  AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
                  AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
                  AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
                  AVPACK32.DLL : 7.6.0.2 360488 Bytes 05/01/2008 19:17:34
                  AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
                  AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
                  AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
                  NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
                  RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
                  RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
                  SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

                  Configuration settings for the scan:
                  Jobname..........................: Complete system scan
                  Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                  Logging..........................: low
                  Primary action...................: interactive
                  Secondary action.................: ignore
                  Scan master boot sector..........: off
                  Scan boot sector.................: on
                  Boot sectors.....................: F:,
                  Scan memory......................: on
                  Process scan.....................: on
                  Scan registry....................: on
                  Search for rootkits..............: off
                  Scan all files...................: Intelligent file selection
                  Scan archives....................: on
                  Recursion depth..................: 20
                  Smart extensions.................: on
                  Macro heuristic..................: on
                  File heuristic...................: medium

                  Start of the scan: samedi 5 janvier 2008 20:19

                  The scan of running processes will be started
                  Scan process 'avscan.exe' - '1' Module(s) have been scanned
                  Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                  Scan process 'sched.exe' - '1' Module(s) have been scanned
                  Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                  Scan process 'avguard.exe' - '1' Module(s) have been scanned
                  Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
                  Scan process 'explorer.exe' - '1' Module(s) have been scanned
                  Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
                  Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                  Scan process 'firefox.exe' - '1' Module(s) have been scanned
                  Scan process 'alg.exe' - '1' Module(s) have been scanned
                  Scan process 'hphipm09.exe' - '1' Module(s) have been scanned
                  Scan process 'searchindexer.exe' - '1' Module(s) have been scanned
                  Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
                  Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
                  Scan process 'nod32krn.exe' - '1' Module(s) have been scanned
                  Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
                  Scan process 'guard.exe' - '0' Module(s) have been scanned
                  Scan process 'hpgs2wnf.exe' - '1' Module(s) have been scanned
                  Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
                  Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
                  Scan process 'MsgPlus.exe' - '1' Module(s) have been scanned
                  Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                  Scan process 'nod32kui.exe' - '1' Module(s) have been scanned
                  Scan process 'hpgs2wnd.exe' - '1' Module(s) have been scanned
                  Scan process 'Hpi_monitor.exe' - '1' Module(s) have been scanned
                  Scan process 'hphmon03.exe' - '1' Module(s) have been scanned
                  Scan process 'hpztsb04.exe' - '1' Module(s) have been scanned
                  Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'devldr32.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'svchost.exe' - '1' Module(s) have been scanned
                  Scan process 'lsass.exe' - '1' Module(s) have been scanned
                  Scan process 'services.exe' - '1' Module(s) have been scanned
                  Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                  Scan process 'csrss.exe' - '1' Module(s) have been scanned
                  Scan process 'smss.exe' - '1' Module(s) have been scanned
                  39 processes with 39 modules were scanned

                  Start scanning boot sectors:
                  Boot sector 'C:\'
                  [NOTE] No virus was found!
                  Boot sector 'D:\'
                  [NOTE] No virus was found!
                  Boot sector 'F:\'
                  [NOTE] No virus was found!

                  Starting to scan the registry.
                  The registry was scanned ( '29' files ).

                  Starting the file scan:

                  Begin scan in 'C:\'
                  C:\pagefile.sys
                  [WARNING] The file could not be opened!
                  Begin scan in 'D:\'
                  D:\données\dossier cinzia\dOcUmEnT dE CinZia\FOtO Et Imange De CinZia\image cool\SIDA.jpg
                  [DETECTION] Is the Trojan horse TR/Spy.Banker.vk.1
                  [INFO] The file was deleted!
                  D:\incoming\Ahead Nero Burning ROM v6.6.0.13 Ultra Edition crack keygen serial.zip
                  [0] Archive type: ZIP
                  --> Ahead.Nero.Burning.ROM.v6.6.0.13.Ultra.Edition.WinALL.Incl.Keymaker-CORE/keygen.exe
                  [DETECTION] Is the Trojan horse TR/Keygen.BF
                  [INFO] The file was deleted!
                  D:\incoming\WormsArmageddon.exe
                  [0] Archive type: ZIP SFX (self extracting)
                  --> LANDGEN.EXE
                  [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
                  [INFO] The file was deleted!
                  D:\System Volume Information\_restore{0A6304D4-C9D5-4AAD-886D-CC2436B8640B}\RP55\A0012423.exe
                  [DETECTION] Contains detection pattern of the dropper DR/WhenU.A.18
                  [INFO] The file was deleted!
                  D:\System Volume Information\_restore{6FDFA9E5-9327-488B-8D7A-343275493FA7}\RP58\A0031721.exe
                  [DETECTION] Is the Trojan horse TR/Dropper.Gen
                  [INFO] The file was deleted!
                  D:\System Volume Information\_restore{6FDFA9E5-9327-488B-8D7A-343275493FA7}\RP59\A0038129.exe
                  [DETECTION] Is the Trojan horse TR/Dropper.Gen
                  [INFO] The file was deleted!
                  Begin scan in 'F:\' <donnée>
                  F:\install generale +crack\dvd decoder\Windows media player 10 + Microsoft codec + plug-ins pack\DFX 6 Audio Enhancement for windows Media Player v9\DFX Keygen By Usman Safdar.exe
                  [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
                  [INFO] The file was deleted!
                  F:\install generale +crack\nero 6\keygen.exe
                  [DETECTION] Is the Trojan horse TR/Keygen.BF
                  [INFO] The file was deleted!

                  End of the scan: dimanche 6 janvier 2008 00:17
                  Used time: 3:58:38 min

                  The scan has been done completely.

                  3722 Scanning directories
                  396233 Files were scanned
                  8 viruses and/or unwanted programs were found
                  0 Files were classified as suspicious:
                  8 files were deleted
                  0 files were repaired
                  0 files were moved to quarantine
                  0 files were renamed
                  1 Files cannot be scanned
                  396225 Files not concerned
                  19708 Archives were scanned
                  1 Warnings
                  349 Notes

                  nood 32 est tjr actif je le laisse ?? ou je l'eliminne??

                  sinon,on dirait que ca roule le pc marche normallment ,plus rapide antivir a detecter d'"autres merde que j'ai deleter

                  merci de ton aide
                  0
                  1. Contributeur sécurité
                    desinstalle nod 32. Vire ce qui est en quarantaine dans antivir. Désactivé ta restauration système ( démarrer puis. Tous les prog puis accessoire puis outils system puis restauration puis dans les parametres) puis redémarre ton ordi puis réactive là . Ensuite recolle un scan antivir
                    0