Infecté par win spyware protect

johanna49 -  
buginformatik Messages postés 2210 Statut Contributeur -
Bonjour,
cela fait plusieurs jours que je suis infecté par win spyware protect et le problème c'est que je suis très nulle en informatique je ne sais pas comment m'en sortir,si quelqu'un peut m'aider MERCI
Configuration: Windows 2000
Internet Explorer 6.0

3 réponses

  1.
    buginformatik Messages postés 2210 Statut Contributeur 54
     
    Ok je m'occupe de toi !

    On va commencer par une petite consultation chez le toubib :) Téléchrge Hijackthis ==> https://www.zebulon.fr/telechargements/securite/systeme/hijackthis.html

    Tu accept le contrat Puis tu clique sur : do a scan and save a logfile

    Tu copie tout le rapport Hijackthis ouvert sur le bloc notes et tu le colles sur le forum et on commence

    A+
    0
    1. johanna49
       
      merci pour ton aide voila le rapport
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:12:52, on 04/07/2008
      Platform: Windows 2000 SP2 (WinNT 5.00.2195)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
      Boot mode: Normal

      Running processes:
      C:\WINNT\System32\smss.exe
      C:\WINNT\system32\winlogon.exe
      C:\WINNT\system32\services.exe
      C:\WINNT\system32\lsass.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINNT\System32\svchost.exe
      C:\WINNT\system32\regsvc.exe
      C:\WINNT\system32\MSTask.exe
      C:\WINNT\system32\stisvc.exe
      C:\WINNT\System32\WBEM\WinMgmt.exe
      C:\WINNT\System32\mspmspsv.exe
      C:\WINNT\Explorer.EXE
      C:\WINNT\System32\Promon.exe
      C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
      C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Lexmark 2400 Series\ezprint.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
      C:\WINNT\loadqm.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINNT\System32\rundll32.exe
      C:\WINNT\System32\internat.exe
      C:\Program Files\SuperCopier\SuperCopier.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\WINNT\System32\lxcrcoms.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe
      C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\PROGRA~1\WINZIP\winzip32.exe
      C:\Documents and Settings\Administrateur\Local Settings\Temp\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
      O2 - BHO: (no name) - {4A3F62A9-AFEB-4543-AE4D-DC2442444E64} - C:\WINNT\System32\opnonoNH.dll (file missing)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: (no name) - {B8301AF7-D00E-4EA4-87C1-5FF4644FBBA1} - C:\Program Files\Web Technologies\iebt.dll (file missing)
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O2 - BHO: (no name) - {C22E8711-AB35-4261-B10C-11AAC1B61693} - C:\WINNT\System32\rqRhGWNh.dll (file missing)
      O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Internet Service - {85BDD81D-31FD-4A6B-A73C-3955B128D2EC} - C:\Program Files\Web Technologies\iebr.dll (file missing)
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
      O4 - HKLM\..\Run: [tourpath] regedit /s c:\winnt\tour.reg
      O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
      O4 - HKLM\..\Run: [Promon.exe] Promon.exe
      O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
      O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\NTFSCLUP.EXE
      O4 - HKLM\..\Run: [CSScheduleCheck] C:\CFGSAFE\SCHWIZEX.EXE -CHECK
      O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
      O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
      O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
      O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINNT\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
      O4 - HKLM\..\Run: [LoadQM] loadqm.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [2b2d157e] rundll32.exe "C:\WINNT\System32\uxdrchbd.dll",b
      O4 - HKCU\..\Run: [internat.exe] internat.exe
      O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [17439454330749638309807948345579] C:\Program Files\XP Antivirus\xpa.exe
      O4 - HKCU\..\Run: [A00F344410.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_A00F344410.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [WinSpywareProtect] "C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe" /autorun
      O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Alice ADSL - {0962BEEC-ABDA-4E1E-ADA4-4CB37F38290D} - https://portail.free.fr/ (file missing) (HKCU)
      O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
      O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O20 - Winlogon Notify: opnonoNH - opnonoNH.dll (file missing)
      O20 - Winlogon Notify: __c00133A - C:\WINNT\System32\__c00133A.dat (file missing)
      O20 - Winlogon Notify: __c0015D3F - C:\WINNT\System32\__c0015D3F.dat (file missing)
      O20 - Winlogon Notify: __c0017286 - C:\WINNT\System32\__c0017286.dat (file missing)
      O20 - Winlogon Notify: __c001D588 - C:\WINNT\System32\__c001D588.dat (file missing)
      O20 - Winlogon Notify: __c00273C2 - C:\WINNT\System32\__c00273C2.dat (file missing)
      O20 - Winlogon Notify: __c004CA40 - C:\WINNT\System32\__c004CA40.dat (file missing)
      O20 - Winlogon Notify: __c0086855 - C:\WINNT\System32\__c0086855.dat (file missing)
      O20 - Winlogon Notify: __c009920D - C:\WINNT\System32\__c009920D.dat
      O20 - Winlogon Notify: __c00B26B1 - C:\WINNT\System32\__c00B26B1.dat (file missing)
      O20 - Winlogon Notify: __c00B6804 - C:\WINNT\System32\__c00B6804.dat (file missing)
      O20 - Winlogon Notify: __c00B77DF - C:\WINNT\System32\__c00B77DF.dat (file missing)
      O20 - Winlogon Notify: __c00C7772 - C:\WINNT\System32\__c00C7772.dat (file missing)
      O20 - Winlogon Notify: __c00C8C17 - C:\WINNT\System32\__c00C8C17.dat (file missing)
      O20 - Winlogon Notify: __c00D7226 - C:\WINNT\System32\__c00D7226.dat (file missing)
      O20 - Winlogon Notify: __c00DF4B7 - C:\WINNT\System32\__c00DF4B7.dat (file missing)
      O20 - Winlogon Notify: __c00FDAC2 - C:\WINNT\System32\__c00FDAC2.dat (file missing)
      O22 - SharedTaskScheduler: frizzed - {ecc974ae-6ede-44a2-90da-93b996d8eaf8} - C:\WINNT\System32\blbpeoy.dll (file missing)
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
      O23 - Service: LXCRCustomerConnect - Unknown owner - C:\WINNT\System32\spool\DRIVERS\W32X86\3\\LXCRserv.exe
      O23 - Service: lxcr_device - - C:\WINNT\System32\lxcrcoms.exe
      O23 - Service: NMS Service (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/Images/Dragon%20Ball/Dragon%20Ball%20Z/Dragon%20Ball%20Z%20-%20Calendrier%202007/Vegeta/veg_11.jpg
      0
    2. johanna49
       
      merci pour ton aide voila le rapport
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:12:52, on 04/07/2008
      Platform: Windows 2000 SP2 (WinNT 5.00.2195)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
      Boot mode: Normal

      Running processes:
      C:\WINNT\System32\smss.exe
      C:\WINNT\system32\winlogon.exe
      C:\WINNT\system32\services.exe
      C:\WINNT\system32\lsass.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINNT\System32\svchost.exe
      C:\WINNT\system32\regsvc.exe
      C:\WINNT\system32\MSTask.exe
      C:\WINNT\system32\stisvc.exe
      C:\WINNT\System32\WBEM\WinMgmt.exe
      C:\WINNT\System32\mspmspsv.exe
      C:\WINNT\Explorer.EXE
      C:\WINNT\System32\Promon.exe
      C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
      C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Lexmark 2400 Series\ezprint.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
      C:\WINNT\loadqm.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINNT\System32\rundll32.exe
      C:\WINNT\System32\internat.exe
      C:\Program Files\SuperCopier\SuperCopier.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\WINNT\System32\lxcrcoms.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe
      C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\PROGRA~1\WINZIP\winzip32.exe
      C:\Documents and Settings\Administrateur\Local Settings\Temp\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
      O2 - BHO: (no name) - {4A3F62A9-AFEB-4543-AE4D-DC2442444E64} - C:\WINNT\System32\opnonoNH.dll (file missing)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: (no name) - {B8301AF7-D00E-4EA4-87C1-5FF4644FBBA1} - C:\Program Files\Web Technologies\iebt.dll (file missing)
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O2 - BHO: (no name) - {C22E8711-AB35-4261-B10C-11AAC1B61693} - C:\WINNT\System32\rqRhGWNh.dll (file missing)
      O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Internet Service - {85BDD81D-31FD-4A6B-A73C-3955B128D2EC} - C:\Program Files\Web Technologies\iebr.dll (file missing)
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
      O4 - HKLM\..\Run: [tourpath] regedit /s c:\winnt\tour.reg
      O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
      O4 - HKLM\..\Run: [Promon.exe] Promon.exe
      O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
      O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\NTFSCLUP.EXE
      O4 - HKLM\..\Run: [CSScheduleCheck] C:\CFGSAFE\SCHWIZEX.EXE -CHECK
      O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
      O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
      O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
      O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINNT\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
      O4 - HKLM\..\Run: [LoadQM] loadqm.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [2b2d157e] rundll32.exe "C:\WINNT\System32\uxdrchbd.dll",b
      O4 - HKCU\..\Run: [internat.exe] internat.exe
      O4 - HKCU\..\Run: [SuperCopier.exe] C:\Program Files\SuperCopier\SuperCopier.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [17439454330749638309807948345579] C:\Program Files\XP Antivirus\xpa.exe
      O4 - HKCU\..\Run: [A00F344410.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_A00F344410.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [WinSpywareProtect] "C:\Documents and Settings\All Users\Application Data\Adsl Software Ltd\WinSpywareProtect\Winspywareprotect.exe" /autorun
      O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Alice ADSL - {0962BEEC-ABDA-4E1E-ADA4-4CB37F38290D} - https://portail.free.fr/ (file missing) (HKCU)
      O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
      O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O20 - Winlogon Notify: opnonoNH - opnonoNH.dll (file missing)
      O20 - Winlogon Notify: __c00133A - C:\WINNT\System32\__c00133A.dat (file missing)
      O20 - Winlogon Notify: __c0015D3F - C:\WINNT\System32\__c0015D3F.dat (file missing)
      O20 - Winlogon Notify: __c0017286 - C:\WINNT\System32\__c0017286.dat (file missing)
      O20 - Winlogon Notify: __c001D588 - C:\WINNT\System32\__c001D588.dat (file missing)
      O20 - Winlogon Notify: __c00273C2 - C:\WINNT\System32\__c00273C2.dat (file missing)
      O20 - Winlogon Notify: __c004CA40 - C:\WINNT\System32\__c004CA40.dat (file missing)
      O20 - Winlogon Notify: __c0086855 - C:\WINNT\System32\__c0086855.dat (file missing)
      O20 - Winlogon Notify: __c009920D - C:\WINNT\System32\__c009920D.dat
      O20 - Winlogon Notify: __c00B26B1 - C:\WINNT\System32\__c00B26B1.dat (file missing)
      O20 - Winlogon Notify: __c00B6804 - C:\WINNT\System32\__c00B6804.dat (file missing)
      O20 - Winlogon Notify: __c00B77DF - C:\WINNT\System32\__c00B77DF.dat (file missing)
      O20 - Winlogon Notify: __c00C7772 - C:\WINNT\System32\__c00C7772.dat (file missing)
      O20 - Winlogon Notify: __c00C8C17 - C:\WINNT\System32\__c00C8C17.dat (file missing)
      O20 - Winlogon Notify: __c00D7226 - C:\WINNT\System32\__c00D7226.dat (file missing)
      O20 - Winlogon Notify: __c00DF4B7 - C:\WINNT\System32\__c00DF4B7.dat (file missing)
      O20 - Winlogon Notify: __c00FDAC2 - C:\WINNT\System32\__c00FDAC2.dat (file missing)
      O22 - SharedTaskScheduler: frizzed - {ecc974ae-6ede-44a2-90da-93b996d8eaf8} - C:\WINNT\System32\blbpeoy.dll (file missing)
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
      O23 - Service: LXCRCustomerConnect - Unknown owner - C:\WINNT\System32\spool\DRIVERS\W32X86\3\\LXCRserv.exe
      O23 - Service: lxcr_device - - C:\WINNT\System32\lxcrcoms.exe
      O23 - Service: NMS Service (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/Images/Dragon%20Ball/Dragon%20Ball%20Z/Dragon%20Ball%20Z%20-%20Calendrier%202007/Vegeta/veg_11.jpg
      0
  3. buginformatik Messages postés 2210 Statut Contributeur 54
     
    Je pars en vacance demain donc poste un Log Hijackthis sur un nouveau Topic dans la rubrique sécurité et demande a quelqu'un de te le lire et regarde ce qu'il y a à changer...

    Met ce topic en résolu et créer en un nouveau pour créer une discussion sans réponse pour bien montrer que personne ne t'aide pour le moment
    0

Discussions similaires

Adobe acrobat fich api-ms-win-core-winrt-l1-1-0.dll manquant
crinik2002 -
fabul -

41 réponses
Problème dans page dl-protect.link dans zone telechargement
Caty1965 -
bazfile -

2 réponses
Mailinblack, quoi en penser à votre avis ?
abeizz -
Suspicieux -

3 réponses
blocage dl-protect.link
stef38100 -
bazfile -

8 réponses
dl-protect hs : dns bloqués ou panne temporaire?
graffx -
Markss -

90 réponses