ordinateur lent et probléme de connexion Fermé

Question

Bonjour,
mon ordinateur est trés  lent et j'ai des probléme de connexion à internet tt le temps 
pouvez vous m'aider . merci

mat2549 · Answer

Change d ordi

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:26:37, on 24/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm033MXFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Usersaymond\AppData\LocalLow\Dealio\kb124es\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O13 - Gopher Prefix: 
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O21 - SSODL: syshelps - {88840B87-8E61-4BAA-BFDF-E08CCBA6D5C2} - syshelps.dll (file missing)
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

noctambule28 · Answer

Salut

il y a du boulot !!

Afin de contribuer à l'elaboration d'un outil, je vais te demander de faire ceci :

télécharge GenProc http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip sur ton bureau

dézippe le dossier, double-clique sur GenProc.bat  et poste le contenu du rapport qui s'ouvre

Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

mataye · Answer

jfai ce ke tu me dit  mais kan je clik sur genproc.bat sa sort une page bleu ou il ya écrit  :
il manque un ou plusieurs fichiers nécessaires au fonctionnement du programme dnc voilà

noctambule28 · Answer

tu peux essayer comme ça 

Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide. 

et pour genproc 

  clic droit et "executer en tant qu'administrateur"
  


sinon, nous passerons en manuel

mataye · Answer

mais c en anglais traduit moi définir en tant que administrator

mataye · Answer

ok merci jle ferai dans une heure ou environ 40 minute

mataye · Answer

j'ai télécharger le zipper keske je fait ensuite svp

mataye · Answer

comment jfai pour dézipper??

mataye · Answer

je l'ai fait un mm dossier c crée sauf ke kan jclik sur genproc.bat sa refai paréil sa met la page bleu

noctambule28 · Answer

la page bleu ? ou une fenetre bleu ( type DOS) .

il n'y a rien d'ecrit ?

mataye · Answer

fenétre bleu il ya écrit :



                        Il manque un ou plusieurs fichiers
                    necessaires au fonctionnement du programme.


   Veuillez :


1 - Fermer cette fenetre
2 - Supprimer la totalite du dossier GenProc ainsi que le fichier GenProc.zip
3 - Suivre ces indications :
    http://www.alt-shift-return.org/Info/GenProc-HowTo.html




Appuyez sur une touche pour continuer...

noctambule28 · Answer

arfff

Normalement ça fonctionne sauf peut etre si c'est un vista 64bit).

bon, nous allons passer à la desinfection:

Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide. 

   Télécharge MSNFix.zip (de !aur3n7) sur ton bureau:
    http://sosvirus.changelog.fr/MSNFix.zip

    Décompresse-le (clic droit >> Extraire ici) et place les fichiers dans C:\MSNFix (très important).

  clic droit et "executer en tant qu'administrateur"
    - Exécutez l'option R.
    -- Si l'infection est détectée, un message l'indiquera et il suffira de presser une touche pour lancer le nettoyage

    Note :
    Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal

    - Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt

Toujours penser à desactivé l'uac et execiuter en tant qu'administrateur
ensuite


Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

@+

mataye · Answer

c  en anglais cmmt jfai

noctambule28 · Answer

Ecrit en français , stp

MSNfix , en anglais ?


normalement pas, tu es sur de bien extraire les fichiers?

mataye · Answer

j'ai télécharger mais kan jclik droit c en anglais

noctambule28 · Answer

Pas de sms, stp

soit un peu explicite sur ce que tu fais :
-Tu as telechargé quoi , tu fais quoi? dans quel ordre ?

mataye · Answer

ok alors j'ai télécharger msn fix avec le liens ke tu ma donné 
é kan jlik droit c en anglais donc jpeu pa savoir c ou il ya écrit extraire

noctambule28 · Answer

lis ça, stp

Quand tu clics droit sur msnfix.zip , tu dois avoir extraire ici !

le programmemsnfix est en Français.

sI vraiment ça ne fonctionne pas nous ferons autrement

mataye · Answer

c bn j'ai réussi à ouvrir le dossier sa ma sorti une fenétre ou il ya marqué les langue

mataye · Answer

à nn jme suis trompé c parcke je l'ai enregistré dans mes documents là jfai faire ce ke tu m'a dit extraire

noctambule28 · Answer

Ecoute, t'es bien gentil, je t'ai demandé  3 fois de ne pas ecrire en sms !! ( c'est chiant à lire quand tu ne le pratique pas , et je ne le partique pas; tu as un clavier avec plus de 10 touches)

Alors par respect tu le fais, sinon, je considère que tes messages sont hors charte, et je zappe le topic. 

Le respect, stp!

mataye · Answer

alors sur le documment msn jclik droit 7zip é jclik sur extraire vers "MSNFix\" ? c sa

noctambule28 · Answer

Dernier avertissement, après tu te debrouilles : arrete le sms 

sinon, c'est bien ça avec msnfix doit etre en racine ( C:\MSNfix)

mataye · Answer

ok pas de probléme désolé j'avai pas bien compris

mataye · Answer

comment je fai pour désactivé l'uac et executé en tant qu'administrateur comme tu m'a dit

noctambule28 · Answer

Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

mataye · Answer

aprés avoir désactivé activé 
je Télécharge Toolbar-S&D je continue ce que tu m'a dit ?

noctambule28 · Answer

je voudrais bien les rapports aussi

mataye · Answer

tu veu le rapport de MSNFix ? ke jte l'envoi

mataye · Answer

bonjour , j'ai fait tout ceux que tu m'a dit voici le rapport MSNFix ? 

   MSNFix 1.742  
 
C:\Users\raymond\Pictures\Jeannot\MSNFix 
Fix exécuté le 25/08/2008 - 19:25:44,14 By raymond 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Microsoft Office.lnk 
... C:\Windows\photos.zip 
... C:\Windows\photos.zip 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Microsoft Office.lnk  
.. OK ... C:\Windows\photos.zip  
.. OK ... C:\Windows\photos.zip 
 
 
 
************************ Nettoyage du registre 
 
 
 
************************ Hostsclean 
 
Cleanhosts v 0.1.0.7  By Laurent

-- Backup : C:\Windows\system32\drivers\etc\hosts-20080825194554
-- original size 0.74 Kb / 20 lines
-- Start cleaning Hosts file .... 



-- final size 0.74 Kb / 20 lines
-- entry Found : 0  /  Entry check : 310

End .............................. 18.7 Secondes 

 
 
 
 
Les fichiers encore présents seront supprimés au prochain redémarrage 
 
 
Aucun Fichier trouvé 
 
 
 
 
 
************************ Hostsclean 
 
Cleanhosts v 0.1.0.7  By Laurent

-- Backup : C:\Windows\system32\drivers\etc\hosts-20080825195044
-- original size 0.74 Kb / 20 lines
-- Start cleaning Hosts file .... 



-- final size 0.74 Kb / 20 lines
-- entry Found : 0  /  Entry check : 310

End .............................. 11.09 Secondes 

 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\Windows\system32\DeviceEject.exe] 5123C80DB8A51766BC13CEC55381E905 
[C:\Windows\system32\DeviceProperties.exe] 5942AB66026F3999181B64B01BAEE8DC 
[C:\Windows\system32\secinit.exe] 32956A36844093FB99EAE0AEC66916FB 
[C:\Users\raymond\AppData\Local\Temp\pandonetworksCrash_070808_181805.zip] B7D44AD1BEC8B88057EB7E91D66A31CF 

[color=#FF0000][b]==>/b/color SVP merci d'envoyer le fichier  [b] C:\Users\raymond\Desktop\Upload_Me.zip /b sur http://upload.changelog.fr

 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 25082008_19505600.zip
 
************************ HKLM\...\Winlogon\Userinit 
 
Userinit = C:\Windows\system32\userinit.exe, 

------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

mataye · Answer

VOICI le rapport Toolbar-S&D :

   
   -----------\  ToolBar S&D 1.1.4   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : raymond ( Administrator )
   BOOT : Normal boot

   "C:\ToolBar SD" ( MAJ : 24-08-2008|14:20 )
   Option : [1] ( 26/08/2008|13:41 )

   [ UAC => 1 ]

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Windows\Prefetch\DEALIOAU.EXE-4B8D8E58.pf
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_large.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_small.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioFF.dll
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioProtocol.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
   C:\Program Files\Dealio
   C:\Program Files\Dealio\DealioAU.exe
   C:\Program Files\Dealio\kb124
   C:\Program Files\FunWebProducts
   C:\Program Files\FunWebProducts\ScreenSaver
   C:\Usersaymond\AppData\Roaming\MICROS~1\Windows\Cookiesaymond@mywebsearch[2].txt
   C:\Program Files\MyWebSearch
   C:\Program Files\MyWebSearch\bar
   C:\Program Files\MyWebSearch\SrchAstt
   C:\Program Files\VMNToolbar
   C:\Program Files\VMNToolbar\install.ico
   C:\Program Files\VMNToolbar	buninstall.exe
   C:\Program Files\VMNToolbar	oolbar.ini
   C:\Program Files\VMNToolbar\uninstall.exe
   C:\Program Files\VMNToolbar\vmntoolbar.dll
   C:\Windows\System32\f3PSSavr.scr
   C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
   C:\Program Files\MSN Messengeriched20.dll

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl"
   "SEARCH PAGE"="https://www.google.com/?gws_rd=ssl"
   "Local Page"="C:\Windows\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Url"="https://www.msn.com/fr-fr/actualite/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.com/?gws_rd=ssl"
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Usersaymond\Pictures\Alphonsy\Music\alpha 5.20\Mon Crack.mp3
   C:\Usersaymond\Pictures\Gloire\Musique\Rap\Rim-K\Famille Nombreuse\Pilotes Crack Musik.mp3


   [ UAC => 1 ]

   -----------\  Fin du rapport a 13:47:10,80

noctambule28 · Answer

Salut

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

et poste un nouvel hijackthis egalement
@+

mataye · Answer

-----------\  ToolBar S&D 1.1.4   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : raymond ( Administrator )
   BOOT : Normal boot

   "C:\ToolBar SD" ( MAJ : 24-08-2008|14:20 )
   Option : [1] ( 26/08/2008|13:41 )

   [ UAC => 1 ]

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Windows\Prefetch\DEALIOAU.EXE-4B8D8E58.pf
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_large.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_small.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioFF.dll
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioProtocol.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
   C:\Program Files\Dealio
   C:\Program Files\Dealio\DealioAU.exe
   C:\Program Files\Dealio\kb124
   C:\Program Files\FunWebProducts
   C:\Program Files\FunWebProducts\ScreenSaver
   C:\Usersaymond\AppData\Roaming\MICROS~1\Windows\Cookiesaymond@mywebsearch[2].txt
   C:\Program Files\MyWebSearch
   C:\Program Files\MyWebSearch\bar
   C:\Program Files\MyWebSearch\SrchAstt
   C:\Program Files\VMNToolbar
   C:\Program Files\VMNToolbar\install.ico
   C:\Program Files\VMNToolbar	buninstall.exe
   C:\Program Files\VMNToolbar	oolbar.ini
   C:\Program Files\VMNToolbar\uninstall.exe
   C:\Program Files\VMNToolbar\vmntoolbar.dll
   C:\Windows\System32\f3PSSavr.scr
   C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
   C:\Program Files\MSN Messengeriched20.dll

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl"
   "SEARCH PAGE"="https://www.google.com/?gws_rd=ssl"
   "Local Page"="C:\Windows\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Url"="https://www.msn.com/fr-fr/actualite/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.com/?gws_rd=ssl"
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Usersaymond\Pictures\Alphonsy\Music\alpha 5.20\Mon Crack.mp3
   C:\Usersaymond\Pictures\Gloire\Musique\Rap\Rim-K\Famille Nombreuse\Pilotes Crack Musik.mp3


   [ UAC => 1 ]

   -----------\  Fin du rapport a 13:47:10,80

mataye · Answer

bonjour comment je fai pour partir à " l'onglet PROCESSUS "  ?

noctambule28 · Answer

C'etait l'option 2 que je voulais ;))

mataye · Answer

j'ai fai ce que tu m'a dit de faire 
j'ai cliké sur toolbard S&D une fenétre bleu ets sorti j'ai tapé f (français) aprés j'ai tapé 2(supprimé) aprés dés que c'est fini sa ma sorti une fenetre de bloc note é il y'avai ce rapport à l'intérieur.

noctambule28 · Answer

tu peux remettre un hijackthis stp

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:26:37, on 24/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm033MXFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Usersaymond\AppData\LocalLow\Dealio\kb124es\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O13 - Gopher Prefix: 
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O21 - SSODL: syshelps - {88840B87-8E61-4BAA-BFDF-E08CCBA6D5C2} - syshelps.dll (file missing)
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

noctambule28 · Answer

Relance hijackthis
fait "do a scan only"
coche devant ses lignes et fixchecked

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing) 
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL 
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL 
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm033MXFR

Pense à redesactivé l'UAC, et à executer en tant que administrateur, et refait cette manip car à mon avis tu ne l'a pas bien faite

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

post le rapport ainsi qu'un nouvel hijackthis

mataye · Answer

bonjour, il n'y à pas :


O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL 
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL 
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

  IL YA QUE LE R3 ET LE 08

noctambule28 · Answer

C'est pas grave, c'est meme rassurant

tu fais le reste stp

mataye · Answer

-----------\  ToolBar S&D 1.1.4   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : raymond ( Administrator )
   BOOT : Normal boot

   "C:\ToolBar SD" ( MAJ : 24-08-2008|14:20 )
   Option : [1] ( 26/08/2008|13:41 )

   [ UAC => 1 ]

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Windows\Prefetch\DEALIOAU.EXE-4B8D8E58.pf
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_large.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_small.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioFF.dll
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioProtocol.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
   C:\Program Files\Dealio
   C:\Program Files\Dealio\DealioAU.exe
   C:\Program Files\Dealio\kb124
   C:\Program Files\FunWebProducts
   C:\Program Files\FunWebProducts\ScreenSaver
   C:\Usersaymond\AppData\Roaming\MICROS~1\Windows\Cookiesaymond@mywebsearch[2].txt
   C:\Program Files\MyWebSearch
   C:\Program Files\MyWebSearch\bar
   C:\Program Files\MyWebSearch\SrchAstt
   C:\Program Files\VMNToolbar
   C:\Program Files\VMNToolbar\install.ico
   C:\Program Files\VMNToolbar	buninstall.exe
   C:\Program Files\VMNToolbar	oolbar.ini
   C:\Program Files\VMNToolbar\uninstall.exe
   C:\Program Files\VMNToolbar\vmntoolbar.dll
   C:\Windows\System32\f3PSSavr.scr
   C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
   C:\Program Files\MSN Messengeriched20.dll

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl"
   "SEARCH PAGE"="https://www.google.com/?gws_rd=ssl"
   "Local Page"="C:\Windows\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Url"="https://www.msn.com/fr-fr/actualite/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.com/?gws_rd=ssl"
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Usersaymond\Pictures\Alphonsy\Music\alpha 5.20\Mon Crack.mp3
   C:\Usersaymond\Pictures\Gloire\Musique\Rap\Rim-K\Famille Nombreuse\Pilotes Crack Musik.mp3


   [ UAC => 1 ]

   -----------\  Fin du rapport a 13:47:10,80

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:26:37, on 24/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm033MXFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Usersaymond\AppData\LocalLow\Dealio\kb124es\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O13 - Gopher Prefix: 
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O21 - SSODL: syshelps - {88840B87-8E61-4BAA-BFDF-E08CCBA6D5C2} - syshelps.dll (file missing)
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:26:37, on 24/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm033MXFR
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Usersaymond\AppData\LocalLow\Dealio\kb124es\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O13 - Gopher Prefix: 
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O21 - SSODL: syshelps - {88840B87-8E61-4BAA-BFDF-E08CCBA6D5C2} - syshelps.dll (file missing)
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

noctambule28 · Answer

Tu sais quand je te demande un nouvel hijackthis, ce n'est pas pour l'avoir en bas de page , mais pour en avoir un plus recent

Celui là date du 24.08 , c'est un peu vieux;)


Allez , tu remets ça ;)

Edi: et fais cela par la meme occasion
élécharge LOP S&D d'Eric71 ici https://sites.google.com/site/eric71mespages/lop.sd.exe

Double-clique dessus pour lancer l'installation.
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )
Patiente jusqu'à la fin du scan.
Poste le rapport généré (situé aussi ici C:\lopR.txt )

@+

mataye · Answer

je ne sai pas comment faire pour avoir le nouveau hijackthis.
 Quand je clique sur  hijackthis puis dés que clik sur :DO A SYSTEM SCAN ONLY  jne peut pas coppier le rapport mais dés que jlique sur: DO A SYSTEM SCAN AND SAVE A LOGFILE sa me sort l'ancien  rapport en méme temps .
            COMMENT JE FAI POUR OUVRIR LE NOUVEAU RAPPORT HIJACKTHIS

noctambule28 · Answer

Choisis l'option "Do a system scan and save a log file"
Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
J'en demande regulièrement, personne n'a vraiment eu de soucis

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:52:17, on 30/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.MSNFix
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix: 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

mataye · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:52:17, on 30/08/2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\System32\SysMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Windows\System\w98eject.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {06663B56-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Pando Search Assistant BHO - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Pando Toolbar BHO - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Pando Toolbar - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BarbieGirlsTray] C:\Program Files\Mattel\Barbie Girls\Mattel.BarbieGirls.Tray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - HKCU\..\Run: [WengoPhoneNG] F:\Apps\PortableWengoPhone\qtwengophone.exe -b
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.MSNFix
O4 - Global Startup: w98Eject.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix: 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - https://www.disney.com/
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

mataye · Answer

VOICI LE RAPPORT LOP&SD :



   --------------------\  Lop S&D 4.2.3-6   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : raymond ( Administrator )
   BOOT : Normal boot
   Antivirus : Norton Internet Security 2007 (Activated)
   Firewall  : Norton Internet Security 2007 (Activated)

   "C:\Lop SD" ( MAJ : 27-08-2008|22:40 )
   Option : [1] ( 30/08/2008|15:57 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local  

   [06/10/2007|10:22] C:\Usersaymond\AppData\Local\{300ED5A9-6225-4D09-9CE6-35CFF0DFE09F}
   [04/07/2007|11:21] C:\Usersaymond\AppData\Local\{7B279561-FBF9-4C9E-9E3D-B3785DCF04E3}
   [20/06/2007|00:04] C:\Usersaymond\AppData\Local\{A6709136-4BF6-429C-95B8-07F5723C0668}
   [04/08/2007|14:23] C:\Usersaymond\AppData\Local\{A8609F33-E3A4-4FD8-8580-16F371C682A2}
   [13/02/2008|22:09] C:\Usersaymond\AppData\Local\{B734406A-61B5-4E1D-A964-81B07B93BB70}
   [12/06/2008|06:59] C:\Usersaymond\AppData\Local\{C98C229E-62B4-4551-B6D4-521A7B2D16EC}
   [24/06/2007|08:59] C:\Usersaymond\AppData\Local\{F9FDB932-AE3C-4263-8C07-D30F7478EEB5}
   [24/05/2007|22:12] C:\Usersaymond\AppData\Local\Adobe
   [20/10/2007|10:12] C:\Usersaymond\AppData\Local\Apple
   [26/10/2007|16:31] C:\Usersaymond\AppData\Local\Apple Computer
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Application Data 
   [07/08/2008|15:33] C:\Usersaymond\AppData\Local\ApplicationHistory
   [09/06/2008|20:36] C:\Usersaymond\AppData\Local\d3d9caps.dat
   [27/08/2008|11:16] C:\Usersaymond\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [07/08/2008|15:32] C:\Usersaymond\AppData\Local\fusioncache.dat
   [04/01/2008|22:33] C:\Usersaymond\AppData\Local\GDIPFONTCACHEV1.DAT
   [20/11/2007|13:47] C:\Usersaymond\AppData\Local\Google
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Historique 
   [30/08/2008|01:10] C:\Usersaymond\AppData\Local\IconCache.db
   [24/05/2007|02:09] C:\Usersaymond\AppData\Local\MCE Deluxe Suite
   [11/04/2008|09:47] C:\Usersaymond\AppData\Local\Microsoft
   [24/05/2007|20:03] C:\Usersaymond\AppData\Local\Microsoft Games
   [27/05/2007|23:55] C:\Usersaymond\AppData\Local\Mozilla
   [04/01/2008|22:21] C:\Usersaymond\AppData\Local\Pando
   [24/05/2007|02:09] C:\Usersaymond\AppData\Local\PowerCinema
   [19/06/2007|17:54] C:\Usersaymond\AppData\Local\Shareaza
   [23/06/2007|09:57] C:\Usersaymond\AppData\Local\SM
   [30/08/2008|15:52] C:\Usersaymond\AppData\Local\Temp
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Temporary Internet Files 
   [22/08/2007|15:27] C:\Usersaymond\AppData\Local\TF1 Vision
   [24/05/2007|00:17] C:\Usersaymond\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [11/02/2008 13:32][--a------] C:\Windows	asks\Norton Security Scan.job
   [30/08/2008 14:58][--a------] C:\Windows	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [29/08/2008 23:53][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{C24C8C68-B6A5-4BBF-9225-B6FC039E0254}.job
   [30/08/2008 11:12][--ah-----] C:\Windows	asks\SA.DAT
   [30/08/2008 01:11][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [28/05/2007|00:12] C:\ProgramData\Adobe
   [20/10/2007|10:10] C:\ProgramData\Apple
   [11/06/2007|09:42] C:\ProgramData\Apple Computer
   [02/11/2006|15:02] C:\ProgramData\Application Data 
   [30/07/2007|19:30] C:\ProgramData\AVS4YOU
   [23/05/2007|21:51] C:\ProgramData\Bureau 
   [01/08/2007|17:33] C:\ProgramData\Corel
   [14/12/2006|15:14] C:\ProgramData\CyberLink
   [02/11/2006|15:02] C:\ProgramData\Desktop 
   [02/11/2006|15:02] C:\ProgramData\Documents 
   [09/02/2008|13:34] C:\ProgramData\Downloaded Installations
   [17/10/2007|20:42] C:\ProgramData\eMule
   [23/05/2007|21:51] C:\ProgramData\Favoris 
   [02/11/2006|15:02] C:\ProgramData\Favorites 
   [26/05/2007|14:02] C:\ProgramData\Google
   [30/08/2008|00:49] C:\ProgramData\Google Updater
   [23/05/2007|21:59] C:\ProgramData\InstallShield
   [23/05/2007|21:51] C:\ProgramData\Menu D‚marrer 
   [25/02/2008|00:01] C:\ProgramData\Messenger Plus!
   [23/10/2007|21:43] C:\ProgramData\Micro Application
   [30/07/2007|13:59] C:\ProgramData\Microsoft
   [23/05/2007|21:51] C:\ProgramData\ModŠles 
   [28/05/2007|00:45] C:\ProgramData\NtiDvdCopy
   [10/11/2007|17:24] C:\ProgramData\PC Suite
   [09/10/2007|20:15] C:\ProgramData\SBT
   [02/11/2006|15:02] C:\ProgramData\Start Menu 
   [11/02/2008|13:32] C:\ProgramData\Symantec
   [02/11/2006|15:02] C:\ProgramData\Templates 
   [24/05/2007|00:05] C:\ProgramData\UDL
   [13/11/2007|10:49] C:\ProgramData\WLInstaller
   [23/05/2007|23:45] C:\ProgramData\Xerox
   [25/05/2007|12:15] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [24/05/2007|00:02] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [23/05/2007|21:59] C:\Program Files\Acer Inc
   [04/01/2008|22:21] C:\Program Files\Acer Zone
   [28/05/2007|00:03] C:\Program Files\Adobe
   [16/09/2007|16:43] C:\Program Files\Alwil Software
   [20/10/2007|10:12] C:\Program Files\Apple Software Update
   [24/10/2007|20:58] C:\Program Files\ArcSoft
   [04/01/2008|22:21] C:\Program Files\AVS4YOU
   [14/09/2007|20:05] C:\Program Files\AVSMedia
   [17/10/2007|20:32] C:\Program Files\BitDownload
   [13/01/2008|00:08] C:\Program Files\Circle Developement
   [09/02/2008|13:37] C:\Program Files\Common Files
   [05/02/2008|19:22] C:\Program Files\Corel
   [14/12/2006|15:14] C:\Program Files\CyberLink
   [10/07/2008|09:52] C:\Program Files\desktop.ini
   [23/08/2007|10:46] C:\Program Files\DialMessenger
   [21/10/2007|22:10] C:\Program Files\directx
   [07/08/2008|15:34] C:\Program Files\Disc2Phone
   [22/11/2007|19:14] C:\Program Files\Disney Interactive
   [24/03/2008|15:33] C:\Program Files\DivX
   [03/01/2008|12:48] C:\Program Files\EoRezo
   [24/05/2007|00:03] C:\Program Files\epson
   [30/05/2007|10:08] C:\Program Files\Fake Webcam
   [04/01/2008|22:21] C:\Program Files\ffdshow
   [23/05/2007|21:51] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [11/11/2007|13:51] C:\Program Files\Free Audio Pack
   [22/08/2007|15:25] C:\Program Files\FunWebProducts
   [07/08/2008|13:40] C:\Program Files\Google
   [03/07/2008|23:16] C:\Program Files\Icone
   [28/05/2007|00:51] C:\Program Files\Illustrate
   [21/05/2008|12:58] C:\Program Files\Incomplete
   [29/04/2008|20:18] C:\Program Files\InstallShield Installation Information
   [14/08/2008|13:15] C:\Program Files\Internet Explorer
   [07/01/2008|21:17] C:\Program Files\iPod
   [04/01/2008|22:23] C:\Program Files\Ipod Video Converter
   [07/01/2008|21:18] C:\Program Files\iTunes
   [07/08/2008|14:47] C:\Program Files\Java
   [03/01/2008|13:41] C:\Program Files\Java(112)
   [19/03/2008|20:53] C:\Program Files\JL2005C
   [03/07/2008|23:15] C:\Program Files\LETMIN
   [21/05/2008|12:58] C:\Program Files\LimeWire
   [04/01/2008|22:21] C:\Program Files\LitexMedia
   [17/02/2008|20:49] C:\Program Files\Mattel
   [20/04/2008|12:13] C:\Program Files\Messenger Plus! Live
   [25/10/2007|17:58] C:\Program Files\Micro Application
   [04/06/2007|23:22] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [09/10/2007|20:14] C:\Program Files\Microsoft FrontPage
   [02/11/2006|14:37] C:\Program Files\Microsoft Games
   [09/10/2007|20:16] C:\Program Files\Microsoft Office
   [13/11/2007|11:03] C:\Program Files\Microsoft SQL Server Compact Edition
   [09/10/2007|20:10] C:\Program Files\Microsoft Visual Studio
   [31/05/2007|12:36] C:\Program Files\Morpheus
   [11/11/2007|22:15] C:\Program Files\Movie Maker
   [04/01/2008|22:21] C:\Program Files\Mozilla Firefox
   [02/11/2006|14:37] C:\Program Files\MSBuild
   [02/11/2006|14:37] C:\Program Files\MSN
   [04/01/2008|22:36] C:\Program Files\MSN Messenger
   [24/05/2007|14:31] C:\Program Files\MSXML 4.0
   [22/08/2007|14:23] C:\Program Files\MyWebSearch
   [04/01/2008|22:21] C:\Program Files\NewTech Infosystems
   [11/02/2008|13:32] C:\Program Files\Norton Security Scan
   [12/06/2008|07:00] C:\Program Files\Pando Networks
   [04/01/2008|22:21] C:\Program Files\PandoBar
   [25/10/2007|17:41] C:\Program Files\Photo Story 3 for Windows
   [05/02/2008|21:10] C:\Program Files\PhotoFiltre
   [05/02/2008|19:41] C:\Program Files\PhotoFiltre Studio
   [17/04/2008|17:06] C:\Program Files\Picasa2
   [24/10/2007|21:40] C:\Program Files\Pixiphot
   [07/01/2008|21:14] C:\Program Files\QuickTime
   [29/05/2007|15:04] C:\Program Files\Real
   [14/12/2006|14:54] C:\Program Files\Realtek
   [02/11/2006|14:37] C:\Program Files\Reference Assemblies
   [04/01/2008|22:21] C:\Program Files\Riva
   [23/05/2007|22:52] C:\Program Files\SAGEM
   [06/11/2007|22:25] C:\Program Files\Samsung
   [21/05/2008|12:58] C:\Program Files\Shareaza
   [04/01/2008|22:21] C:\Program Files\ShareMonkey
   [08/09/2007|16:56] C:\Program Files\SigmaTel
   [04/07/2007|10:42] C:\Program Files\SM
   [09/10/2007|20:22] C:\Program Files\Snapshot Viewer
   [07/08/2008|14:48] C:\Program Files\Sun
   [04/01/2008|22:21] C:\Program Files\Symantec
   [24/08/2008|15:26] C:\Program Files\Trend Micro
   [02/11/2006|15:01] C:\Program Files\Uninstall Information
   [04/01/2008|22:21] C:\Program Files\Veoh Networks
   [26/02/2008|14:09] C:\Program Files\Visicom Media
   [26/02/2008|14:09] C:\Program Files\vmntoolbar
   [16/09/2007|16:07] C:\Program Files\Windows Calendar
   [02/11/2006|14:42] C:\Program Files\Windows Collaboration
   [16/09/2007|16:07] C:\Program Files\Windows Defender
   [02/11/2006|14:42] C:\Program Files\Windows Journal
   [28/02/2008|11:53] C:\Program Files\Windows Live
   [13/11/2007|11:06] C:\Program Files\Windows Live Favorites
   [13/11/2007|11:06] C:\Program Files\Windows Live Toolbar
   [16/09/2007|16:07] C:\Program Files\Windows Mail
   [16/08/2007|15:08] C:\Program Files\Windows Media Player
   [23/05/2007|21:51] C:\Program Files\Windows NT
   [02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
   [10/01/2008|10:54] C:\Program Files\Windows Sidebar
   [04/01/2008|22:21] C:\Program Files\WinRAR
   [21/07/2007|00:27] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [05/02/2008|23:13] C:\Program Files\Common Files\Adobe
   [04/01/2008|22:21] C:\Program Files\Common Files\Apple
   [25/10/2007|18:00] C:\Program Files\Common Files\AquaSoft
   [04/01/2008|22:21] C:\Program Files\Common Files\AVSMedia
   [09/10/2007|20:10] C:\Program Files\Common Files\Designer
   [23/05/2007|21:59] C:\Program Files\Common Files\InstallShield
   [04/01/2008|22:21] C:\Program Files\Common Files\Java
   [03/01/2008|13:40] C:\Program Files\Common Files\Java(109)
   [14/12/2006|15:09] C:\Program Files\Common Files\LightScribe
   [24/10/2007|21:23] C:\Program Files\Common Files\MAGIX Shared
   [13/11/2007|11:00] C:\Program Files\Common Files\microsoft shared
   [04/01/2008|22:21] C:\Program Files\Common Files\NewTech Infosystems
   [18/09/2007|20:23] C:\Program Files\Common Files\PX Storage Engine
   [29/05/2007|15:05] C:\Program Files\Common Files\Real
   [02/11/2006|13:18] C:\Program Files\Common Files\Services
   [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
   [11/02/2008|16:22] C:\Program Files\Common Files\Symantec Shared
   [09/10/2007|20:15] C:\Program Files\Common Files\System
   [13/11/2007|10:54] C:\Program Files\Common Files\WindowsLiveInstaller
   [25/10/2007|17:57] C:\Program Files\Common Files\Wise Installation Wizard
   [29/05/2007|15:05] C:\Program Files\Common Files\xing shared

   --------------------\  Process

   ( 77 Processus )

   iexplore.exe ~ [PID:4688]
   BitDownload.exe ~ [PID:2436]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Usersaymond\AppData\Local\Temp
sjE481.tmp
   C:\Usersaymond\AppData\Local\Temp
sr2425.tmp
   C:\Usersaymond\AppData\Local\Temp
sw6191.tmp
   C:\Usersaymond\AppData\Local\Temp
syA5C1.tmp
   C:\Usersaymond\AppData\Roaming\BitDownload
   C:\Usersaymond\AppData\Roaming\BitDownload\BitDownload.ini
   C:\Usersaymond\AppData\Roaming\BitDownload\btdht.dat
   C:\Usersaymond\AppData\Roaming\BitDownload\DHTLog.txt
   C:\Usersaymond\AppData\Roaming\BitDownload\Favorites.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\lib.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\PlayLists
   C:\Usersaymond\AppData\Roaming\BitDownload\Recently played.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\RoutingTree.bin
   C:\Usersaymond\AppData\Roaming\BitDownload\search.ini
   C:\Usersaymond\AppData\Roaming\BitDownload\Shared.dat
   C:\Usersaymond\AppData\Roaming\BitDownload\SPK.bin
   C:\Usersaymond\AppData\Roaming\BitDownload\Storage
   C:\Usersaymond\AppData\Roaming\BitDownload\Torrents
   C:\Usersaymond\AppData\Roaming\BitDownload	rdnld.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload	rupld.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\URLs.ini
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload Downloads.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload Uninstall.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload.lnk
   C:\Program Files\BitDownload
   C:\Program Files\BitDownload\BitDownload.exe
   C:\Program Files\BitDownload\player.dll
   C:\Program Files\BitDownload\plug-ins
   C:\Program Files\BitDownloadtl70.bpl
   C:\Program Files\BitDownload\Units.bpl
   C:\Program Files\BitDownload\vcl70.bpl
   C:\Program Files\BitDownload\vclshlctrls70.bpl
   C:\Program Files\BitDownload\vclx70.bpl
   C:\Program Files\BitDownload\WinSkinD7R.bpl
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\Windows\Prefetch\BITDOWNLOAD.EXE-F407EECC.pf
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "BitDownload"="\"C:\Program Files\BitDownload\BitDownload.exe\" /minimized"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-08-30 15:57:28
   Windows 6.0.6000  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 77
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Usersaymond\Pictures\Alphonsy\Music\alpha 5.20\Mon Crack.mp3
   C:\Usersaymond\Pictures\Gloire\Musique\Rap\Rim-K\Famille Nombreuse\Pilotes Crack Musik.mp3


   [F:9816][D:217]-> C:\Usersaymond\AppData\Local\Temp
   [F:185][D:1]-> C:\Usersaymond\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:4613][D:157]-> C:\Usersaymond\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:975][D:8]-> C:\$Recycle.Bin

   --------------------\  Fin du rapport a 16:09:43
   [ UAC => 1 ]

noctambule28 · Answer

Relance LOP S&D d'Eric71

Choisis cette fois ci l'Option 2 ( Suppression )
Ne ferme pas la fenêtre lors de la suppression !
Poste le rapport généré (situé aussi ici C:\lopR.txt )

mataye · Answer

--------------------\  Lop S&D 4.2.3-6   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6000 ) 
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : raymond ( Administrator )
   BOOT : Normal boot
   Antivirus : Norton Internet Security 2007 (Activated)
   Firewall  : Norton Internet Security 2007 (Activated)

   "C:\Lop SD" ( MAJ : 27-08-2008|22:40 )
   Option : [1] ( 30/08/2008|15:57 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local  

   [06/10/2007|10:22] C:\Usersaymond\AppData\Local\{300ED5A9-6225-4D09-9CE6-35CFF0DFE09F}
   [04/07/2007|11:21] C:\Usersaymond\AppData\Local\{7B279561-FBF9-4C9E-9E3D-B3785DCF04E3}
   [20/06/2007|00:04] C:\Usersaymond\AppData\Local\{A6709136-4BF6-429C-95B8-07F5723C0668}
   [04/08/2007|14:23] C:\Usersaymond\AppData\Local\{A8609F33-E3A4-4FD8-8580-16F371C682A2}
   [13/02/2008|22:09] C:\Usersaymond\AppData\Local\{B734406A-61B5-4E1D-A964-81B07B93BB70}
   [12/06/2008|06:59] C:\Usersaymond\AppData\Local\{C98C229E-62B4-4551-B6D4-521A7B2D16EC}
   [24/06/2007|08:59] C:\Usersaymond\AppData\Local\{F9FDB932-AE3C-4263-8C07-D30F7478EEB5}
   [24/05/2007|22:12] C:\Usersaymond\AppData\Local\Adobe
   [20/10/2007|10:12] C:\Usersaymond\AppData\Local\Apple
   [26/10/2007|16:31] C:\Usersaymond\AppData\Local\Apple Computer
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Application Data 
   [07/08/2008|15:33] C:\Usersaymond\AppData\Local\ApplicationHistory
   [09/06/2008|20:36] C:\Usersaymond\AppData\Local\d3d9caps.dat
   [27/08/2008|11:16] C:\Usersaymond\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [07/08/2008|15:32] C:\Usersaymond\AppData\Local\fusioncache.dat
   [04/01/2008|22:33] C:\Usersaymond\AppData\Local\GDIPFONTCACHEV1.DAT
   [20/11/2007|13:47] C:\Usersaymond\AppData\Local\Google
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Historique 
   [30/08/2008|01:10] C:\Usersaymond\AppData\Local\IconCache.db
   [24/05/2007|02:09] C:\Usersaymond\AppData\Local\MCE Deluxe Suite
   [11/04/2008|09:47] C:\Usersaymond\AppData\Local\Microsoft
   [24/05/2007|20:03] C:\Usersaymond\AppData\Local\Microsoft Games
   [27/05/2007|23:55] C:\Usersaymond\AppData\Local\Mozilla
   [04/01/2008|22:21] C:\Usersaymond\AppData\Local\Pando
   [24/05/2007|02:09] C:\Usersaymond\AppData\Local\PowerCinema
   [19/06/2007|17:54] C:\Usersaymond\AppData\Local\Shareaza
   [23/06/2007|09:57] C:\Usersaymond\AppData\Local\SM
   [30/08/2008|15:52] C:\Usersaymond\AppData\Local\Temp
   [23/05/2007|21:55] C:\Usersaymond\AppData\Local\Temporary Internet Files 
   [22/08/2007|15:27] C:\Usersaymond\AppData\Local\TF1 Vision
   [24/05/2007|00:17] C:\Usersaymond\AppData\Local\VirtualStore
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [11/02/2008 13:32][--a------] C:\Windows	asks\Norton Security Scan.job
   [30/08/2008 14:58][--a------] C:\Windows	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [29/08/2008 23:53][--ah-----] C:\Windows	asks\User_Feed_Synchronization-{C24C8C68-B6A5-4BBF-9225-B6FC039E0254}.job
   [30/08/2008 11:12][--ah-----] C:\Windows	asks\SA.DAT
   [30/08/2008 01:11][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [28/05/2007|00:12] C:\ProgramData\Adobe
   [20/10/2007|10:10] C:\ProgramData\Apple
   [11/06/2007|09:42] C:\ProgramData\Apple Computer
   [02/11/2006|15:02] C:\ProgramData\Application Data 
   [30/07/2007|19:30] C:\ProgramData\AVS4YOU
   [23/05/2007|21:51] C:\ProgramData\Bureau 
   [01/08/2007|17:33] C:\ProgramData\Corel
   [14/12/2006|15:14] C:\ProgramData\CyberLink
   [02/11/2006|15:02] C:\ProgramData\Desktop 
   [02/11/2006|15:02] C:\ProgramData\Documents 
   [09/02/2008|13:34] C:\ProgramData\Downloaded Installations
   [17/10/2007|20:42] C:\ProgramData\eMule
   [23/05/2007|21:51] C:\ProgramData\Favoris 
   [02/11/2006|15:02] C:\ProgramData\Favorites 
   [26/05/2007|14:02] C:\ProgramData\Google
   [30/08/2008|00:49] C:\ProgramData\Google Updater
   [23/05/2007|21:59] C:\ProgramData\InstallShield
   [23/05/2007|21:51] C:\ProgramData\Menu D‚marrer 
   [25/02/2008|00:01] C:\ProgramData\Messenger Plus!
   [23/10/2007|21:43] C:\ProgramData\Micro Application
   [30/07/2007|13:59] C:\ProgramData\Microsoft
   [23/05/2007|21:51] C:\ProgramData\ModŠles 
   [28/05/2007|00:45] C:\ProgramData\NtiDvdCopy
   [10/11/2007|17:24] C:\ProgramData\PC Suite
   [09/10/2007|20:15] C:\ProgramData\SBT
   [02/11/2006|15:02] C:\ProgramData\Start Menu 
   [11/02/2008|13:32] C:\ProgramData\Symantec
   [02/11/2006|15:02] C:\ProgramData\Templates 
   [24/05/2007|00:05] C:\ProgramData\UDL
   [13/11/2007|10:49] C:\ProgramData\WLInstaller
   [23/05/2007|23:45] C:\ProgramData\Xerox
   [25/05/2007|12:15] C:\ProgramData\Yahoo! Companion

   --------------------\  Listing des dossiers dans C:\Program Files

   [24/05/2007|00:02] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [23/05/2007|21:59] C:\Program Files\Acer Inc
   [04/01/2008|22:21] C:\Program Files\Acer Zone
   [28/05/2007|00:03] C:\Program Files\Adobe
   [16/09/2007|16:43] C:\Program Files\Alwil Software
   [20/10/2007|10:12] C:\Program Files\Apple Software Update
   [24/10/2007|20:58] C:\Program Files\ArcSoft
   [04/01/2008|22:21] C:\Program Files\AVS4YOU
   [14/09/2007|20:05] C:\Program Files\AVSMedia
   [17/10/2007|20:32] C:\Program Files\BitDownload
   [13/01/2008|00:08] C:\Program Files\Circle Developement
   [09/02/2008|13:37] C:\Program Files\Common Files
   [05/02/2008|19:22] C:\Program Files\Corel
   [14/12/2006|15:14] C:\Program Files\CyberLink
   [10/07/2008|09:52] C:\Program Files\desktop.ini
   [23/08/2007|10:46] C:\Program Files\DialMessenger
   [21/10/2007|22:10] C:\Program Files\directx
   [07/08/2008|15:34] C:\Program Files\Disc2Phone
   [22/11/2007|19:14] C:\Program Files\Disney Interactive
   [24/03/2008|15:33] C:\Program Files\DivX
   [03/01/2008|12:48] C:\Program Files\EoRezo
   [24/05/2007|00:03] C:\Program Files\epson
   [30/05/2007|10:08] C:\Program Files\Fake Webcam
   [04/01/2008|22:21] C:\Program Files\ffdshow
   [23/05/2007|21:51] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [11/11/2007|13:51] C:\Program Files\Free Audio Pack
   [22/08/2007|15:25] C:\Program Files\FunWebProducts
   [07/08/2008|13:40] C:\Program Files\Google
   [03/07/2008|23:16] C:\Program Files\Icone
   [28/05/2007|00:51] C:\Program Files\Illustrate
   [21/05/2008|12:58] C:\Program Files\Incomplete
   [29/04/2008|20:18] C:\Program Files\InstallShield Installation Information
   [14/08/2008|13:15] C:\Program Files\Internet Explorer
   [07/01/2008|21:17] C:\Program Files\iPod
   [04/01/2008|22:23] C:\Program Files\Ipod Video Converter
   [07/01/2008|21:18] C:\Program Files\iTunes
   [07/08/2008|14:47] C:\Program Files\Java
   [03/01/2008|13:41] C:\Program Files\Java(112)
   [19/03/2008|20:53] C:\Program Files\JL2005C
   [03/07/2008|23:15] C:\Program Files\LETMIN
   [21/05/2008|12:58] C:\Program Files\LimeWire
   [04/01/2008|22:21] C:\Program Files\LitexMedia
   [17/02/2008|20:49] C:\Program Files\Mattel
   [20/04/2008|12:13] C:\Program Files\Messenger Plus! Live
   [25/10/2007|17:58] C:\Program Files\Micro Application
   [04/06/2007|23:22] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [09/10/2007|20:14] C:\Program Files\Microsoft FrontPage
   [02/11/2006|14:37] C:\Program Files\Microsoft Games
   [09/10/2007|20:16] C:\Program Files\Microsoft Office
   [13/11/2007|11:03] C:\Program Files\Microsoft SQL Server Compact Edition
   [09/10/2007|20:10] C:\Program Files\Microsoft Visual Studio
   [31/05/2007|12:36] C:\Program Files\Morpheus
   [11/11/2007|22:15] C:\Program Files\Movie Maker
   [04/01/2008|22:21] C:\Program Files\Mozilla Firefox
   [02/11/2006|14:37] C:\Program Files\MSBuild
   [02/11/2006|14:37] C:\Program Files\MSN
   [04/01/2008|22:36] C:\Program Files\MSN Messenger
   [24/05/2007|14:31] C:\Program Files\MSXML 4.0
   [22/08/2007|14:23] C:\Program Files\MyWebSearch
   [04/01/2008|22:21] C:\Program Files\NewTech Infosystems
   [11/02/2008|13:32] C:\Program Files\Norton Security Scan
   [12/06/2008|07:00] C:\Program Files\Pando Networks
   [04/01/2008|22:21] C:\Program Files\PandoBar
   [25/10/2007|17:41] C:\Program Files\Photo Story 3 for Windows
   [05/02/2008|21:10] C:\Program Files\PhotoFiltre
   [05/02/2008|19:41] C:\Program Files\PhotoFiltre Studio
   [17/04/2008|17:06] C:\Program Files\Picasa2
   [24/10/2007|21:40] C:\Program Files\Pixiphot
   [07/01/2008|21:14] C:\Program Files\QuickTime
   [29/05/2007|15:04] C:\Program Files\Real
   [14/12/2006|14:54] C:\Program Files\Realtek
   [02/11/2006|14:37] C:\Program Files\Reference Assemblies
   [04/01/2008|22:21] C:\Program Files\Riva
   [23/05/2007|22:52] C:\Program Files\SAGEM
   [06/11/2007|22:25] C:\Program Files\Samsung
   [21/05/2008|12:58] C:\Program Files\Shareaza
   [04/01/2008|22:21] C:\Program Files\ShareMonkey
   [08/09/2007|16:56] C:\Program Files\SigmaTel
   [04/07/2007|10:42] C:\Program Files\SM
   [09/10/2007|20:22] C:\Program Files\Snapshot Viewer
   [07/08/2008|14:48] C:\Program Files\Sun
   [04/01/2008|22:21] C:\Program Files\Symantec
   [24/08/2008|15:26] C:\Program Files\Trend Micro
   [02/11/2006|15:01] C:\Program Files\Uninstall Information
   [04/01/2008|22:21] C:\Program Files\Veoh Networks
   [26/02/2008|14:09] C:\Program Files\Visicom Media
   [26/02/2008|14:09] C:\Program Files\vmntoolbar
   [16/09/2007|16:07] C:\Program Files\Windows Calendar
   [02/11/2006|14:42] C:\Program Files\Windows Collaboration
   [16/09/2007|16:07] C:\Program Files\Windows Defender
   [02/11/2006|14:42] C:\Program Files\Windows Journal
   [28/02/2008|11:53] C:\Program Files\Windows Live
   [13/11/2007|11:06] C:\Program Files\Windows Live Favorites
   [13/11/2007|11:06] C:\Program Files\Windows Live Toolbar
   [16/09/2007|16:07] C:\Program Files\Windows Mail
   [16/08/2007|15:08] C:\Program Files\Windows Media Player
   [23/05/2007|21:51] C:\Program Files\Windows NT
   [02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
   [10/01/2008|10:54] C:\Program Files\Windows Sidebar
   [04/01/2008|22:21] C:\Program Files\WinRAR
   [21/07/2007|00:27] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [05/02/2008|23:13] C:\Program Files\Common Files\Adobe
   [04/01/2008|22:21] C:\Program Files\Common Files\Apple
   [25/10/2007|18:00] C:\Program Files\Common Files\AquaSoft
   [04/01/2008|22:21] C:\Program Files\Common Files\AVSMedia
   [09/10/2007|20:10] C:\Program Files\Common Files\Designer
   [23/05/2007|21:59] C:\Program Files\Common Files\InstallShield
   [04/01/2008|22:21] C:\Program Files\Common Files\Java
   [03/01/2008|13:40] C:\Program Files\Common Files\Java(109)
   [14/12/2006|15:09] C:\Program Files\Common Files\LightScribe
   [24/10/2007|21:23] C:\Program Files\Common Files\MAGIX Shared
   [13/11/2007|11:00] C:\Program Files\Common Files\microsoft shared
   [04/01/2008|22:21] C:\Program Files\Common Files\NewTech Infosystems
   [18/09/2007|20:23] C:\Program Files\Common Files\PX Storage Engine
   [29/05/2007|15:05] C:\Program Files\Common Files\Real
   [02/11/2006|13:18] C:\Program Files\Common Files\Services
   [02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
   [11/02/2008|16:22] C:\Program Files\Common Files\Symantec Shared
   [09/10/2007|20:15] C:\Program Files\Common Files\System
   [13/11/2007|10:54] C:\Program Files\Common Files\WindowsLiveInstaller
   [25/10/2007|17:57] C:\Program Files\Common Files\Wise Installation Wizard
   [29/05/2007|15:05] C:\Program Files\Common Files\xing shared

   --------------------\  Process

   ( 77 Processus )

   iexplore.exe ~ [PID:4688]
   BitDownload.exe ~ [PID:2436]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Usersaymond\AppData\Local\Temp
sjE481.tmp
   C:\Usersaymond\AppData\Local\Temp
sr2425.tmp
   C:\Usersaymond\AppData\Local\Temp
sw6191.tmp
   C:\Usersaymond\AppData\Local\Temp
syA5C1.tmp
   C:\Usersaymond\AppData\Roaming\BitDownload
   C:\Usersaymond\AppData\Roaming\BitDownload\BitDownload.ini
   C:\Usersaymond\AppData\Roaming\BitDownload\btdht.dat
   C:\Usersaymond\AppData\Roaming\BitDownload\DHTLog.txt
   C:\Usersaymond\AppData\Roaming\BitDownload\Favorites.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\lib.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\PlayLists
   C:\Usersaymond\AppData\Roaming\BitDownload\Recently played.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\RoutingTree.bin
   C:\Usersaymond\AppData\Roaming\BitDownload\search.ini
   C:\Usersaymond\AppData\Roaming\BitDownload\Shared.dat
   C:\Usersaymond\AppData\Roaming\BitDownload\SPK.bin
   C:\Usersaymond\AppData\Roaming\BitDownload\Storage
   C:\Usersaymond\AppData\Roaming\BitDownload\Torrents
   C:\Usersaymond\AppData\Roaming\BitDownload	rdnld.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload	rupld.vcs
   C:\Usersaymond\AppData\Roaming\BitDownload\URLs.ini
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload Downloads.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload Uninstall.lnk
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\BitDownload\BitDownload.lnk
   C:\Program Files\BitDownload
   C:\Program Files\BitDownload\BitDownload.exe
   C:\Program Files\BitDownload\player.dll
   C:\Program Files\BitDownload\plug-ins
   C:\Program Files\BitDownloadtl70.bpl
   C:\Program Files\BitDownload\Units.bpl
   C:\Program Files\BitDownload\vcl70.bpl
   C:\Program Files\BitDownload\vclshlctrls70.bpl
   C:\Program Files\BitDownload\vclx70.bpl
   C:\Program Files\BitDownload\WinSkinD7R.bpl
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\Windows\Prefetch\BITDOWNLOAD.EXE-F407EECC.pf
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "BitDownload"="\"C:\Program Files\BitDownload\BitDownload.exe\" /minimized"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-08-30 15:57:28
   Windows 6.0.6000  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 77
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Usersaymond\Pictures\Alphonsy\Music\alpha 5.20\Mon Crack.mp3
   C:\Usersaymond\Pictures\Gloire\Musique\Rap\Rim-K\Famille Nombreuse\Pilotes Crack Musik.mp3


   [F:9816][D:217]-> C:\Usersaymond\AppData\Local\Temp
   [F:185][D:1]-> C:\Usersaymond\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:4613][D:157]-> C:\Usersaymond\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:975][D:8]-> C:\$Recycle.Bin

   --------------------\  Fin du rapport a 16:09:43
   [ UAC => 1 ]

noctambule28 · Answer

Tu m'a envoyé le meme rapport , pas celui après l'option 2:(

mataye · Answer

tu veu que je t'envoye quel rapport ?

noctambule28 · Answer

Le rapport de lop S&D après l'option 2

Là, c'est l'option 1 ( il a la meme heure et la meme option) donc ce n'esr pas le bon

mataye · Answer

je vient de le refair loption 2 (suppression+hosts)mais sa me remet le méme rapport de loption 1(recherche)
alors je fai éssayé l'autre option 3 qui est s(uppréssion - hosts).
 je peut ou pas?

noctambule28 · Answer

bon, c'est pas grave  ;)

Pas la peine l'option 3, j'espere juste que ça s'est bien passé.

il reste un fix encore à passer

Commence par télécharger ComboFix ici:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Et enregistre le sur le bureau.
Regardes ici, si tu souhaites te familiariser avec son utilisation:
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Sur ton bureau double clic sur Combofix.exe.
Appuies sur la touche 1, pour que le programme commence à s'exécuter et suis les instructions à l'écran.
En cours de nettoyage il est possible, que tu reçoives un avertissement te disant que le pc va redémarrer, laisse faire.

Après le redemarrage du pc, un rapport s'ouvrira dans le Bloc notes en fin d'analyse, copie et colle tout son contenu dans ton prochain message.
(Le fichier rapport Combofix.txt , est ensuite automatiquement sauvegardé dans C:\Combofix.txt)

/!\ Pendant toute la durée (ça peut être assez long si le pc est très infecté) du scan de ComboFix, n'ouvres aucun programme et ne surfe pas sur le net.

Ordinateur lent et probléme de connexion

58 réponses

Discussions similaires