Message sprt_ads.dll

civodul63 Messages postés 1 Statut Membre -  
 rameleu -
Bonjour,

merci de m'aider car je suis plutot novice avec windows. Au demarrage de window j'obtiens la fenetre suivante :

titre : Rundl erreure de telechargement de c:\windows\system32\sprt_ads.dll le module specifie est introuvable

le pc demarre et semble fonctionner correctement mais je ne peux plus me connecter à internet, quee ce soit avec mozilla firefox ou internet explorer.

que puis je faire?

amicalement
Configuration: Windows XP
Firefox 2.0.0.11

22 réponses

  • 1
  • 2
  1. Utilisateur anonyme
     
    Hi,

    Et ben il a du boulot a faire sur ton pc.

    Commence par ceci STP.

    Installe - Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31)

    Choisit l'option:5

    Ensuite tu redemarre ton pc en mode sans échec et tu fait ceci:

    Relance hijack et clique sur "Do a system scan only"
    Ensuite recherche ces lignes et coches les cases

    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
    O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
    O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11

    Ensuite clique sur "Fix checked"

    Tu refait un hijackthis .
    Alut.
    1
    1. rameleu
       
      Merci, mais comment faire pour demarer windows en mode sans echec et comment faire pour enlever le mode sans echec
      Et surtout, est ce que mon message sprt_ads.dll va partir ?
      Merci de ton aide, j'attend ton prochain message pour demarer le mode sans echec.
      0
  2. Utilisateur anonyme
     
    Hi,

    Pour demarrer en mode sans échec tu redemarre ton pc et la appuie sur F8 et tu choisit le mode sans échec.

    Ensuite après avoir cocher les lignes tu redemarre en mode normale et refait un hijackthis.

    Pour si cela va réapparaitre ,je pense que oui.

    mais il a pas mal de boulot.

    Alut.
    1
    1. rameleu
       
      Je n'ai pas le mode sans echec: quand je fais F8, j'ai 4 possibilités mais pas le mode sans echec.
      Est-ce que je peux faire le "truc" avec hijackthis sans mettre le mode sans echec ?
      Ou sinon, y a t-il un autre moyen pour le faire ?
      Merci
      0
  3. frandam
     
    bonjour j'ai le meme probleme que toi ,j'ai pas trouvé de solution,si tu trouve contacte moi
    0
  4. rameleu
     
    Salut a tous, j'ai le même probleme c'est vraiment emmerdant car a cause de ça, mon PC rame et au demmarage, il prend 5 minutes.
    J'espère trouver une solution bientôt
    a bientôt
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Utilisateur anonyme
     
    Hi,

    @rameleu,

    fait ceci STP:

    télécharge hijackthis
    -> enregistre la cible sous .... "le bureau"

    -> Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

    -> Clique sur Install ensuite sur "I Accept"

    -> Clique sur" Do a scan system and save log file"

    -> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

    ->Tuto hijackthis(Merci à Balltrap34)
    0
    1. rameleu
       
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 09:15:52, on 30/11/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\cisvc.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\QuickTime\QTTask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe
      C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {010F2237-D25F-4A68-AD05-DCE8E2288652} - C:\WINDOWS\system32\pmkhi.dll (file missing)
      O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Program Files\Applications\iebt.dll (file missing)
      O2 - BHO: (no name) - {30159B64-3D27-487B-8212-5AB3FCF99534} - C:\WINDOWS\system32\vtsqq.dll (file missing)
      O2 - BHO: (no name) - {31070AD4-99D5-40B4-A4DA-FB6B5BF33FA4} - C:\WINDOWS\system32\awtqr.dll (file missing)
      O2 - BHO: (no name) - {4118195E-9C2C-457C-B3B1-9D3214F4E795} - C:\WINDOWS\system32\awvtq.dll (file missing)
      O2 - BHO: superiorads - {4AD44D3E-7316-4251-B754-9B10EC96AF92} - C:\WINDOWS\system32\sprt_ads.dll (file missing)
      O2 - BHO: (no name) - {561EDEF1-C606-4CAC-858B-ACACF7212535} - C:\WINDOWS\system32\pmkjj.dll (file missing)
      O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
      O2 - BHO: (no name) - {5F40B50E-36B4-472A-A082-5CEDC009E12B} - C:\WINDOWS\system32\ssttu.dll (file missing)
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {8E34E0E9-7F57-47EB-A3D5-3F66C07A4B68} - C:\WINDOWS\system32\ssqrs.dll (file missing)
      O2 - BHO: (no name) - {8F2F111B-AA89-4DF9-B4B5-B9FA516D860B} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {987ba8f6-c8d8-4bff-87c4-8fd40be343da} - C:\WINDOWS\system32\jihayefo.dll
      O2 - BHO: (no name) - {AEAA22B5-6C4E-41D5-9E41-3EF75210E93E} - C:\WINDOWS\system32\geede.dll (file missing)
      O2 - BHO: (no name) - {B28AEE21-7403-4DB5-831F-AA464315E721} - C:\WINDOWS\system32\mlljk.dll (file missing)
      O2 - BHO: (no name) - {B9DCE201-B7FD-47AE-B5D1-25E4115FA557} - C:\WINDOWS\system32\mljji.dll (file missing)
      O2 - BHO: (no name) - {BF54A4EF-6231-44F3-A6BD-636AB9766857} - C:\WINDOWS\system32\ssqpm.dll (file missing)
      O2 - BHO: Tooltipizer - {C004D9F0-A742-4DC7-AFD0-BC29CE3FE04A} - C:\WINDOWS\system32\dcadssuggest.dll
      O2 - BHO: (no name) - {C2EC6044-8B5A-471B-8B29-3482F4E2582D} - (no file)
      O2 - BHO: (no name) - {C7DDC00A-ABDF-45F9-8864-EA22F6B6C5FF} - C:\WINDOWS\system32\pmkhe.dll (file missing)
      O2 - BHO: (no name) - {C95BC956-7D08-45D5-A1C9-974BF4D2F811} - (no file)
      O2 - BHO: (no name) - {CAABBA2F-D6CE-472F-A097-1BF289075770} - C:\WINDOWS\system32\ddayx.dll (file missing)
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
      O2 - BHO: ThreatWarningBHO Class - {E1FAB6BD-4A34-47ce-82AF-50B16A6BE77E} - C:\Program Files\aspch\ThreatWarning.dll (file missing)
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: (no name) - {E85568BB-5F92-4B4E-A98A-91D61E2E63C2} - (no file)
      O2 - BHO: (no name) - {E8AA56F8-6A81-42BB-B470-1C612ABB7AD2} - (no file)
      O2 - BHO: (no name) - {F3BA5231-453C-4FA4-B2F8-822BEE91F1F2} - (no file)
      O2 - BHO: (no name) - {FFAE183B-B2E6-4BF9-B4C0-4B4ED91E629E} - C:\WINDOWS\system32\ddccc.dll (file missing)
      O3 - Toolbar: (no name) - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - (no file)
      O3 - Toolbar: Dcads Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Dcads Advanced Toolbar\toolbar.dll
      O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      O3 - Toolbar: Internet Service - {94A5C93F-BD18-4C46-B777-C94C145C3CAB} - C:\Program Files\Applications\iebr.dll (file missing)
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log] C:\WINDOWS\system32\warez.exe
      O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllStart
      O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Propriétaire\Application Data\Deskbar_{A9A6C45C-877C-406d-85A8-B0227F07591F}\starter.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [542a8e5b] rundll32.exe "C:\WINDOWS\system32\rogiwezu.dll",b
      O4 - HKLM\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\yisiwupi.dll",a
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] "c:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe" -silent
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
      O4 - HKCU\..\Run: [wblogon] C:\WINDOWS\system32\ubpr01.exe
      O4 - HKCU\..\Run: [aspch] "C:\Program Files\aspch\ASpCh.exe"
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
      O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Applications\iebtm.exe
      O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Program Files\Applications\wcs.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
      O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
      O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.166 85.255.112.11
      O20 - AppInit_DLLs: C:\WINDOWS\system32\duzemibe.dll c:\windows\system32\yisiwupi.dll c:\windows\system32\lokegepe.dll
      O20 - Winlogon Notify: ctfnfo - ctfnfo.dll (file missing)
      O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
      O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      0
  7. Utilisateur anonyme
     
    Hi,

    Oui essai en mode normal sinon pour le mode sans échec essai avec la touche F5.

    Alut.
    0
    1. rameleu
       
      re
      et comment je vois les effet et dailleurs, quels sont les effets ?
      Merci
      0
  8. Utilisateur anonyme
     
    Hi,

    t'inquiète pas à la fin tu les verras.....................

    Alut.
    0
    1. rameleu
       
      Et bien merci beaucoup pour ton aide, j'aime bien les gens comme ca !!
      Vive Internet et les gens comme Drhouse1998 !!
      MERCI 1000000000000000000000 fois !!
      0
  9. Utilisateur anonyme
     
    Hi,

    Fait ce que je t'ai demander ............

    Alut.
    0
    1. rameleu
       
      Merci beaucoup mais maintenan, mon ordi ne rame plus du tout !!
      Vive Internet et les gens comme Drhouse1998
      0
  10. Utilisateur anonyme
     
    Hi,

    Refait un hijackthis.STP.

    Alut.
    0
    1. rameleu
       
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 10:15:05, on 30/11/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\cisvc.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\QuickTime\QTTask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe
      C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Safari\Safari.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {010F2237-D25F-4A68-AD05-DCE8E2288652} - C:\WINDOWS\system32\pmkhi.dll (file missing)
      O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Program Files\Applications\iebt.dll (file missing)
      O2 - BHO: (no name) - {30159B64-3D27-487B-8212-5AB3FCF99534} - C:\WINDOWS\system32\vtsqq.dll (file missing)
      O2 - BHO: (no name) - {31070AD4-99D5-40B4-A4DA-FB6B5BF33FA4} - C:\WINDOWS\system32\awtqr.dll (file missing)
      O2 - BHO: (no name) - {4118195E-9C2C-457C-B3B1-9D3214F4E795} - C:\WINDOWS\system32\awvtq.dll (file missing)
      O2 - BHO: superiorads - {4AD44D3E-7316-4251-B754-9B10EC96AF92} - C:\WINDOWS\system32\sprt_ads.dll (file missing)
      O2 - BHO: (no name) - {561EDEF1-C606-4CAC-858B-ACACF7212535} - C:\WINDOWS\system32\pmkjj.dll (file missing)
      O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
      O2 - BHO: (no name) - {5F40B50E-36B4-472A-A082-5CEDC009E12B} - C:\WINDOWS\system32\ssttu.dll (file missing)
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {8E34E0E9-7F57-47EB-A3D5-3F66C07A4B68} - C:\WINDOWS\system32\ssqrs.dll (file missing)
      O2 - BHO: (no name) - {8F2F111B-AA89-4DF9-B4B5-B9FA516D860B} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {987ba8f6-c8d8-4bff-87c4-8fd40be343da} - C:\WINDOWS\system32\jihayefo.dll
      O2 - BHO: (no name) - {AEAA22B5-6C4E-41D5-9E41-3EF75210E93E} - C:\WINDOWS\system32\geede.dll (file missing)
      O2 - BHO: (no name) - {B28AEE21-7403-4DB5-831F-AA464315E721} - C:\WINDOWS\system32\mlljk.dll (file missing)
      O2 - BHO: (no name) - {B9DCE201-B7FD-47AE-B5D1-25E4115FA557} - C:\WINDOWS\system32\mljji.dll (file missing)
      O2 - BHO: (no name) - {BF54A4EF-6231-44F3-A6BD-636AB9766857} - C:\WINDOWS\system32\ssqpm.dll (file missing)
      O2 - BHO: Tooltipizer - {C004D9F0-A742-4DC7-AFD0-BC29CE3FE04A} - C:\WINDOWS\system32\dcadssuggest.dll
      O2 - BHO: (no name) - {C2EC6044-8B5A-471B-8B29-3482F4E2582D} - (no file)
      O2 - BHO: (no name) - {C7DDC00A-ABDF-45F9-8864-EA22F6B6C5FF} - C:\WINDOWS\system32\pmkhe.dll (file missing)
      O2 - BHO: (no name) - {C95BC956-7D08-45D5-A1C9-974BF4D2F811} - (no file)
      O2 - BHO: (no name) - {CAABBA2F-D6CE-472F-A097-1BF289075770} - C:\WINDOWS\system32\ddayx.dll (file missing)
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
      O2 - BHO: ThreatWarningBHO Class - {E1FAB6BD-4A34-47ce-82AF-50B16A6BE77E} - C:\Program Files\aspch\ThreatWarning.dll (file missing)
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: (no name) - {E85568BB-5F92-4B4E-A98A-91D61E2E63C2} - (no file)
      O2 - BHO: (no name) - {E8AA56F8-6A81-42BB-B470-1C612ABB7AD2} - (no file)
      O2 - BHO: (no name) - {F3BA5231-453C-4FA4-B2F8-822BEE91F1F2} - (no file)
      O2 - BHO: (no name) - {FFAE183B-B2E6-4BF9-B4C0-4B4ED91E629E} - C:\WINDOWS\system32\ddccc.dll (file missing)
      O3 - Toolbar: (no name) - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - (no file)
      O3 - Toolbar: Dcads Toolbar - {41C29B07-6F91-4966-91BE-2E2841643C83} - C:\Program Files\Dcads Advanced Toolbar\toolbar.dll
      O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      O3 - Toolbar: Internet Service - {94A5C93F-BD18-4C46-B777-C94C145C3CAB} - C:\Program Files\Applications\iebr.dll (file missing)
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log] C:\WINDOWS\system32\warez.exe
      O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllStart
      O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Propriétaire\Application Data\Deskbar_{A9A6C45C-877C-406d-85A8-B0227F07591F}\starter.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [542a8e5b] rundll32.exe "C:\WINDOWS\system32\rogiwezu.dll",b
      O4 - HKLM\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\yisiwupi.dll",a
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] "c:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe" -silent
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
      O4 - HKCU\..\Run: [wblogon] C:\WINDOWS\system32\ubpr01.exe
      O4 - HKCU\..\Run: [aspch] "C:\Program Files\aspch\ASpCh.exe"
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKCU\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\lokegepe.dll",a
      O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
      O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Applications\iebtm.exe
      O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Program Files\Applications\wcs.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O20 - AppInit_DLLs: C:\WINDOWS\system32\duzemibe.dll c:\windows\system32\yisiwupi.dll c:\windows\system32\lokegepe.dll
      O20 - Winlogon Notify: ctfnfo - ctfnfo.dll (file missing)
      O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
      O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      0
  11. Utilisateur anonyme
     
    Hi,

    Maintenant fait ceci:

    ==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

    Toolbar-S&D

    !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

    * double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

    * Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

    * Choisis l'option 1 ( "recherche") et tapes "entrée" .

    * Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
    de son contenu dans ta prochaine réponse ...

    ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

    Alut.
    0
    1. rameleu
       
      -----------\\ ToolBar S&D 1.2.5 XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3700+ )
      BIOS : Phoenix - AwardBIOS v6.00PG
      USER : Antoine ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1290 [VPS 081129-0] 4.8.1290 (Activated)
      C:\ (Local Disk) - NTFS - Total:232 Go (Free:106 Go)
      D:\ (CD or DVD)
      E:\ (USB)
      F:\ (USB)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
      Option : [1] ( 30/11/2008|10:20 )

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\DOCUME~1\PROPRI~1\APPLIC~1\Dcads Advanced Toolbar
      C:\DOCUME~1\PROPRI~1\APPLIC~1\Dcads Advanced Toolbar\advertbuttons.xml
      C:\DOCUME~1\PROPRI~1\APPLIC~1\Dcads Advanced Toolbar\selected.xml
      C:\Program Files\Dcads Advanced Toolbar
      C:\Program Files\Dcads Advanced Toolbar\buttons.xml
      C:\Program Files\Dcads Advanced Toolbar\search.xml
      C:\Program Files\Dcads Advanced Toolbar\toolbar.dll
      C:\Program Files\Dcads Advanced Toolbar\uninstall.exe
      C:\Program Files\DAEMON Tools Toolbar
      C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
      C:\Program Files\DAEMON Tools Toolbar\Resources
      C:\Program Files\DAEMON Tools Toolbar\support@daemon-tools.cc
      C:\Program Files\DAEMON Tools Toolbar\uninst.exe
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome.manifest
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\install.rdf
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome\dttoolbar.jar
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
      C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.xpt
      C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
      C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
      C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
      C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
      C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
      C:\Program Files\Multi_Media_France
      C:\Program Files\Multi_Media_France\INSTALL.LOG
      C:\Program Files\Multi_Media_France\tbMul1.dll
      C:\Program Files\Multi_Media_France\tbMult.dll
      C:\Program Files\Multi_Media_France\toolbar.cfg
      C:\Program Files\Multi_Media_France\UNWISE.EXE
      C:\Program Files\Multi_Media_France\UNWISE.INI
      C:\DOCUME~1\PROPRI~1\APPLIC~1\VMNToolbar
      C:\DOCUME~1\PROPRI~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
      C:\DOCUME~1\PROPRI~1\APPLIC~1\VMNToolbar\New York_NY_weather.txt
      C:\DOCUME~1\PROPRI~1\APPLIC~1\VMNToolbar\sinfo.txt
      C:\Program Files\VMNToolbar
      C:\Program Files\VMNToolbar\vmntoolbar.dll.old18
      C:\Program Files\WinAble
      C:\WINDOWS\System32\Dcads-remove.exe
      C:\WINDOWS\system32\dcads_sidebar_uninstall.exe
      C:\WINDOWS\System32\DcadsSocial-uninstall.exe
      C:\WINDOWS\system32\dcadssuggest.dll
      C:\WINDOWS\system32\superiorads-uninst.exe
      0
  12. Utilisateur anonyme
     
    Hi,

    Ton rapport n'est pas complet.

    Toutefois fait ceci maintenant:

    Nettoyage avec ToolBar S&D :

    !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

    Relances Toolbar-S&D en double-cliquant sur le raccourci.
    -->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

    Note : ne touches à rien lors de la suppression !

    Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse

    accompagné d'un nouveau rapport hijackthis pour analyse ...
    0
    1. rameleu
       
      quesque ca fait nettoyage ??
      ca supprime quoi ?
      0
  13. Utilisateur anonyme
     
    Hi,

    T'inquiète pas fait ce que je te demande de faire et tu verras ton pc iras bien mieux que maintenant.

    Alut.
    0
  14. rameleu
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:43:13, on 30/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {010F2237-D25F-4A68-AD05-DCE8E2288652} - C:\WINDOWS\system32\pmkhi.dll (file missing)
    O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Program Files\Applications\iebt.dll (file missing)
    O2 - BHO: (no name) - {30159B64-3D27-487B-8212-5AB3FCF99534} - C:\WINDOWS\system32\vtsqq.dll (file missing)
    O2 - BHO: (no name) - {31070AD4-99D5-40B4-A4DA-FB6B5BF33FA4} - C:\WINDOWS\system32\awtqr.dll (file missing)
    O2 - BHO: (no name) - {4118195E-9C2C-457C-B3B1-9D3214F4E795} - C:\WINDOWS\system32\awvtq.dll (file missing)
    O2 - BHO: (no name) - {561EDEF1-C606-4CAC-858B-ACACF7212535} - C:\WINDOWS\system32\pmkjj.dll (file missing)
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: (no name) - {5F40B50E-36B4-472A-A082-5CEDC009E12B} - C:\WINDOWS\system32\ssttu.dll (file missing)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {8E34E0E9-7F57-47EB-A3D5-3F66C07A4B68} - C:\WINDOWS\system32\ssqrs.dll (file missing)
    O2 - BHO: (no name) - {8F2F111B-AA89-4DF9-B4B5-B9FA516D860B} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {987ba8f6-c8d8-4bff-87c4-8fd40be343da} - C:\WINDOWS\system32\jihayefo.dll
    O2 - BHO: (no name) - {AEAA22B5-6C4E-41D5-9E41-3EF75210E93E} - C:\WINDOWS\system32\geede.dll (file missing)
    O2 - BHO: (no name) - {B28AEE21-7403-4DB5-831F-AA464315E721} - C:\WINDOWS\system32\mlljk.dll (file missing)
    O2 - BHO: (no name) - {B9DCE201-B7FD-47AE-B5D1-25E4115FA557} - C:\WINDOWS\system32\mljji.dll (file missing)
    O2 - BHO: (no name) - {BF54A4EF-6231-44F3-A6BD-636AB9766857} - C:\WINDOWS\system32\ssqpm.dll (file missing)
    O2 - BHO: (no name) - {C2EC6044-8B5A-471B-8B29-3482F4E2582D} - (no file)
    O2 - BHO: (no name) - {C7DDC00A-ABDF-45F9-8864-EA22F6B6C5FF} - C:\WINDOWS\system32\pmkhe.dll (file missing)
    O2 - BHO: (no name) - {C95BC956-7D08-45D5-A1C9-974BF4D2F811} - (no file)
    O2 - BHO: (no name) - {CAABBA2F-D6CE-472F-A097-1BF289075770} - C:\WINDOWS\system32\ddayx.dll (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
    O2 - BHO: ThreatWarningBHO Class - {E1FAB6BD-4A34-47ce-82AF-50B16A6BE77E} - C:\Program Files\aspch\ThreatWarning.dll (file missing)
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: (no name) - {E85568BB-5F92-4B4E-A98A-91D61E2E63C2} - (no file)
    O2 - BHO: (no name) - {E8AA56F8-6A81-42BB-B470-1C612ABB7AD2} - (no file)
    O2 - BHO: (no name) - {F3BA5231-453C-4FA4-B2F8-822BEE91F1F2} - (no file)
    O2 - BHO: (no name) - {FFAE183B-B2E6-4BF9-B4C0-4B4ED91E629E} - C:\WINDOWS\system32\ddccc.dll (file missing)
    O3 - Toolbar: Internet Service - {94A5C93F-BD18-4C46-B777-C94C145C3CAB} - C:\Program Files\Applications\iebr.dll (file missing)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log] C:\WINDOWS\system32\warez.exe
    O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Propriétaire\Application Data\Deskbar_{A9A6C45C-877C-406d-85A8-B0227F07591F}\starter.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [542a8e5b] rundll32.exe "C:\WINDOWS\system32\rogiwezu.dll",b
    O4 - HKLM\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\lokegepe.dll",a
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe" -silent
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [wblogon] C:\WINDOWS\system32\ubpr01.exe
    O4 - HKCU\..\Run: [aspch] "C:\Program Files\aspch\ASpCh.exe"
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
    O4 - HKCU\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\lokegepe.dll",a
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
    O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Applications\iebtm.exe
    O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Program Files\Applications\wcs.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O20 - AppInit_DLLs: C:\WINDOWS\system32\duzemibe.dll c:\windows\system32\yisiwupi.dll c:\windows\system32\lokegepe.dll
    O20 - Winlogon Notify: ctfnfo - ctfnfo.dll (file missing)
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

    End of file - 12237 bytes

    PS: dsl de t'avoir fait attendre si longtemps, mon PC a buggé
    0
  15. Utilisateur anonyme
     
    Hi,

    Télécharges OTMoveIt3 (de Old_Timer) sur ton Bureau.

    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ! Déconnectes toi et fermes toute tes applications en cours !

    Double cliques sur "OTMoveIt3.exe" pour ouvrir le prg .
    Puis copies ce qui se trouve en citation ci-dessous,

    :Files
    c:\program files\aspch\threatwarning.dll
    c:\documents and settings\propriétaire\application data\deskbar_{a9a6c45c-877c-406d-85a8-b0227f07591f}\starter.exe
    c:\windows\system32\rogiwezu.dll
    c:\windows\system32\ubpr01.exe
    c:\program files\aspch\aspch.exe
    c:\program files\video add-on\icthis.exe
    c:\program files\applications\iebtm.exe
    c:\program files\applications\wcs.exe

    :Commands
    [emptytemp]


    et colles le dans le cadre de gauche de OTMoveIt3 :
    Paste Instructions for items to be moved.
    (ne touche à rien d'autre !)

    -> cliques sur MoveIt! pour lancer la suppression.
    -> laisses travailler l'outil ...

    ( Note : ton bureau va disparaitre puis réapparaitre, c'est normal .)

    -->Postes le contenu du rapport qui se trouve dans le dossier "C:\_OTMoveIt\MovedFiles"
    ( " xxxx2008_xxxxxx.log " où les "x" correspondent au jour et à l'heure de l'utilisation ).

    Refait un hijackthis.

    Alut.
    0
  16. rameleu
     
    ========== FILES ==========
    File/Folder c:\program files\aspch\threatwarning.dll not found.
    File/Folder c:\documents and settings\propriétaire\application data\deskbar_{a9a6c45c-877c-406d-85a8-b0227f07591f}\starter.exe not found.
    DllUnregisterServer procedure not found in c:\windows\system32\rogiwezu.dll
    c:\windows\system32\rogiwezu.dll NOT unregistered.
    c:\windows\system32\rogiwezu.dll moved successfully.
    File/Folder c:\windows\system32\ubpr01.exe not found.
    File/Folder c:\program files\aspch\aspch.exe not found.
    File/Folder c:\program files\video add-on\icthis.exe not found.
    File/Folder c:\program files\applications\iebtm.exe not found.
    File/Folder c:\program files\applications\wcs.exe not found.
    ========== COMMANDS ==========
    User's Temp folder emptied.
    User's Temporary Internet Files folder emptied.
    User's Internet Explorer cache folder emptied.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
    Local Service Temp folder emptied.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    Local Service Temporary Internet Files folder emptied.
    File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
    File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_318.dat scheduled to be deleted on reboot.
    File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_a0.dat scheduled to be deleted on reboot.
    Windows Temp folder emptied.
    Java cache emptied.
    FireFox cache emptied.
    Temp folders emptied.

    OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11302008_105850
    0
  17. rameleu
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:02:18, on 30/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\Safari\Safari.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {010F2237-D25F-4A68-AD05-DCE8E2288652} - C:\WINDOWS\system32\pmkhi.dll (file missing)
    O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Program Files\Applications\iebt.dll (file missing)
    O2 - BHO: (no name) - {30159B64-3D27-487B-8212-5AB3FCF99534} - C:\WINDOWS\system32\vtsqq.dll (file missing)
    O2 - BHO: (no name) - {31070AD4-99D5-40B4-A4DA-FB6B5BF33FA4} - C:\WINDOWS\system32\awtqr.dll (file missing)
    O2 - BHO: (no name) - {4118195E-9C2C-457C-B3B1-9D3214F4E795} - C:\WINDOWS\system32\awvtq.dll (file missing)
    O2 - BHO: (no name) - {561EDEF1-C606-4CAC-858B-ACACF7212535} - C:\WINDOWS\system32\pmkjj.dll (file missing)
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: (no name) - {5F40B50E-36B4-472A-A082-5CEDC009E12B} - C:\WINDOWS\system32\ssttu.dll (file missing)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {8E34E0E9-7F57-47EB-A3D5-3F66C07A4B68} - C:\WINDOWS\system32\ssqrs.dll (file missing)
    O2 - BHO: (no name) - {8F2F111B-AA89-4DF9-B4B5-B9FA516D860B} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {987ba8f6-c8d8-4bff-87c4-8fd40be343da} - C:\WINDOWS\system32\jihayefo.dll
    O2 - BHO: (no name) - {AEAA22B5-6C4E-41D5-9E41-3EF75210E93E} - C:\WINDOWS\system32\geede.dll (file missing)
    O2 - BHO: (no name) - {B28AEE21-7403-4DB5-831F-AA464315E721} - C:\WINDOWS\system32\mlljk.dll (file missing)
    O2 - BHO: (no name) - {B9DCE201-B7FD-47AE-B5D1-25E4115FA557} - C:\WINDOWS\system32\mljji.dll (file missing)
    O2 - BHO: (no name) - {BF54A4EF-6231-44F3-A6BD-636AB9766857} - C:\WINDOWS\system32\ssqpm.dll (file missing)
    O2 - BHO: (no name) - {C2EC6044-8B5A-471B-8B29-3482F4E2582D} - (no file)
    O2 - BHO: (no name) - {C7DDC00A-ABDF-45F9-8864-EA22F6B6C5FF} - C:\WINDOWS\system32\pmkhe.dll (file missing)
    O2 - BHO: (no name) - {C95BC956-7D08-45D5-A1C9-974BF4D2F811} - (no file)
    O2 - BHO: (no name) - {CAABBA2F-D6CE-472F-A097-1BF289075770} - C:\WINDOWS\system32\ddayx.dll (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
    O2 - BHO: ThreatWarningBHO Class - {E1FAB6BD-4A34-47ce-82AF-50B16A6BE77E} - C:\Program Files\aspch\ThreatWarning.dll (file missing)
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: (no name) - {E85568BB-5F92-4B4E-A98A-91D61E2E63C2} - (no file)
    O2 - BHO: (no name) - {E8AA56F8-6A81-42BB-B470-1C612ABB7AD2} - (no file)
    O2 - BHO: (no name) - {F3BA5231-453C-4FA4-B2F8-822BEE91F1F2} - (no file)
    O2 - BHO: (no name) - {FFAE183B-B2E6-4BF9-B4C0-4B4ED91E629E} - C:\WINDOWS\system32\ddccc.dll (file missing)
    O3 - Toolbar: Internet Service - {94A5C93F-BD18-4C46-B777-C94C145C3CAB} - C:\Program Files\Applications\iebr.dll (file missing)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log] C:\WINDOWS\system32\warez.exe
    O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Propriétaire\Application Data\Deskbar_{A9A6C45C-877C-406d-85A8-B0227F07591F}\starter.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [542a8e5b] rundll32.exe "C:\WINDOWS\system32\rogiwezu.dll",b
    O4 - HKLM\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\lokegepe.dll",a
    O4 - HKLM\..\RunOnce: [OTMoveIt] C:\Documents and Settings\Antoine.FUJITSU-E9017BB\Mes documents\OTMoveIt3.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe" -silent
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [wblogon] C:\WINDOWS\system32\ubpr01.exe
    O4 - HKCU\..\Run: [aspch] "C:\Program Files\aspch\ASpCh.exe"
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
    O4 - HKCU\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\yisiwupi.dll",a
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
    O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Applications\iebtm.exe
    O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Program Files\Applications\wcs.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O20 - AppInit_DLLs: C:\WINDOWS\system32\duzemibe.dll c:\windows\system32\yisiwupi.dll c:\windows\system32\lokegepe.dll
    O20 - Winlogon Notify: ctfnfo - ctfnfo.dll (file missing)
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lokegepe.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    0
  18. Utilisateur anonyme
     
    Hi,

    redemarre ton pc et refait un hijackthis.

    Alut.
    0
  21. rameleu
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:12:47, on 30/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Safari\Safari.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://internetsearchservice.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://internetsearchservice.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://internetsearchservice.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {010F2237-D25F-4A68-AD05-DCE8E2288652} - C:\WINDOWS\system32\pmkhi.dll (file missing)
    O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Program Files\Applications\iebt.dll (file missing)
    O2 - BHO: (no name) - {30159B64-3D27-487B-8212-5AB3FCF99534} - C:\WINDOWS\system32\vtsqq.dll (file missing)
    O2 - BHO: (no name) - {31070AD4-99D5-40B4-A4DA-FB6B5BF33FA4} - C:\WINDOWS\system32\awtqr.dll (file missing)
    O2 - BHO: (no name) - {4118195E-9C2C-457C-B3B1-9D3214F4E795} - C:\WINDOWS\system32\awvtq.dll (file missing)
    O2 - BHO: (no name) - {561EDEF1-C606-4CAC-858B-ACACF7212535} - C:\WINDOWS\system32\pmkjj.dll (file missing)
    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
    O2 - BHO: (no name) - {5F40B50E-36B4-472A-A082-5CEDC009E12B} - C:\WINDOWS\system32\ssttu.dll (file missing)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {8E34E0E9-7F57-47EB-A3D5-3F66C07A4B68} - C:\WINDOWS\system32\ssqrs.dll (file missing)
    O2 - BHO: (no name) - {8F2F111B-AA89-4DF9-B4B5-B9FA516D860B} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {987ba8f6-c8d8-4bff-87c4-8fd40be343da} - C:\WINDOWS\system32\jihayefo.dll
    O2 - BHO: (no name) - {AEAA22B5-6C4E-41D5-9E41-3EF75210E93E} - C:\WINDOWS\system32\geede.dll (file missing)
    O2 - BHO: (no name) - {B28AEE21-7403-4DB5-831F-AA464315E721} - C:\WINDOWS\system32\mlljk.dll (file missing)
    O2 - BHO: (no name) - {B9DCE201-B7FD-47AE-B5D1-25E4115FA557} - C:\WINDOWS\system32\mljji.dll (file missing)
    O2 - BHO: (no name) - {BF54A4EF-6231-44F3-A6BD-636AB9766857} - C:\WINDOWS\system32\ssqpm.dll (file missing)
    O2 - BHO: (no name) - {C2EC6044-8B5A-471B-8B29-3482F4E2582D} - (no file)
    O2 - BHO: (no name) - {C7DDC00A-ABDF-45F9-8864-EA22F6B6C5FF} - C:\WINDOWS\system32\pmkhe.dll (file missing)
    O2 - BHO: (no name) - {C95BC956-7D08-45D5-A1C9-974BF4D2F811} - (no file)
    O2 - BHO: (no name) - {CAABBA2F-D6CE-472F-A097-1BF289075770} - C:\WINDOWS\system32\ddayx.dll (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file)
    O2 - BHO: ThreatWarningBHO Class - {E1FAB6BD-4A34-47ce-82AF-50B16A6BE77E} - C:\Program Files\aspch\ThreatWarning.dll (file missing)
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: (no name) - {E85568BB-5F92-4B4E-A98A-91D61E2E63C2} - (no file)
    O2 - BHO: (no name) - {E8AA56F8-6A81-42BB-B470-1C612ABB7AD2} - (no file)
    O2 - BHO: (no name) - {F3BA5231-453C-4FA4-B2F8-822BEE91F1F2} - (no file)
    O2 - BHO: (no name) - {FFAE183B-B2E6-4BF9-B4C0-4B4ED91E629E} - C:\WINDOWS\system32\ddccc.dll (file missing)
    O3 - Toolbar: Internet Service - {94A5C93F-BD18-4C46-B777-C94C145C3CAB} - C:\Program Files\Applications\iebr.dll (file missing)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log] C:\WINDOWS\system32\warez.exe
    O4 - HKLM\..\Run: [dbar_starter] C:\Documents and Settings\Propriétaire\Application Data\Deskbar_{A9A6C45C-877C-406d-85A8-B0227F07591F}\starter.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [542a8e5b] rundll32.exe "C:\WINDOWS\system32\rogiwezu.dll",b
    O4 - HKLM\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\yisiwupi.dll",a
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\documents and settings\antoine.fujitsu-e9017bb\bureau\steam.exe" -silent
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [wblogon] C:\WINDOWS\system32\ubpr01.exe
    O4 - HKCU\..\Run: [aspch] "C:\Program Files\aspch\ASpCh.exe"
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
    O4 - HKCU\..\Run: [CPM5719bdc7] Rundll32.exe "c:\windows\system32\yisiwupi.dll",a
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
    O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Applications\iebtm.exe
    O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Program Files\Applications\wcs.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [fudiyekiri] Rundll32.exe "C:\WINDOWS\system32\mirajehi.dll",s (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\system32\ctfnfo.dll (file missing)
    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.usefulietools.com/redirect.php (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O20 - AppInit_DLLs: C:\WINDOWS\system32\duzemibe.dll c:\windows\system32\yisiwupi.dll c:\windows\system32\lokegepe.dll
    O20 - Winlogon Notify: ctfnfo - ctfnfo.dll (file missing)
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\yisiwupi.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\yisiwupi.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    0
  • 1
  • 2

Discussions similaires

SMS message vocal arnaque ?
kikidefer -
Stepik -

10 réponses
Signification de ^^
takataka26 -
Adraen -

13 réponses
Diff message
zebulonmarie -
mumu -

18 réponses
Ca veut dire quoi ^^
Misty-in -
Mixou -

9 réponses
Non envoyé. Appuyez pour réessayer. Problème d'envoi SMS pour un seul contact.
emembi -
Petoule -

5 réponses