Trés long pour ouvrir une page internet

sims439 -  
Bonjour,

trop long (2min) pour ouvrir un site internet
De tps en tps un erreur en parcourant mes dossiers
voici un rapprot hijackthis.
pouvez vous me dire si j'ai des virus et que faire?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:06:14, on 10/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [film size] C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Monitor.lnk = C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?c4e141bcef294ef48ad7f86d8734e76f
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?c4e141bcef294ef48ad7f86d8734e76f
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\PC\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

--
End of file - 13198 bytes
Configuration: Windows XP
Internet Explorer 7.0

54 réponses

Résumé de la discussion

Analyse d’un log HijackThis sur un PC Windows XP SP3 et la demande concerne la détection de virus et les mesures à prendre face à des ralentissements. Plusieurs propositions de résolution circulent, notamment ComboFix et MSNFix avec des tutoriels et des avertissements, ainsi que des outils comme Ad-Remover; certaines explications insistent sur une exécution guidée et sur les risques. Des précautions sont évoquées, notamment l’importance de suivre des tutoriels fiables et d’éviter les manipulations risquées comme la désactivation complète des défenses, afin de ne pas endommager le système. Le rapport inclut des éléments connus comme Ad-Aware, ZoneAlarm, PnkBstrA/B, Boonty; les analyses doivent être croisées avec d'autres outils.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Salut

    commence par cela:

    ============================Si vista:================================
    =>Désactiver l'UAC de vista
    DEMARRER=>PANNEAU DE CONFIGURATION=>COMPTES UTILISATEURS:

    Cliquez ensuite sur Activer ou désactiver le contrôle des comptes d'utilisateurs.
    L'UAC vous demandera une confirmation ; cliquez sur le bouton Continuer.

    * Dans la nouvelle fenêtre , décocher la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur et cliquez sur OK.
    =>Redémarrer votre pc.
    désactiver l'uac

    ==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

    Toolbar-S&D

    !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

    * double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

    * Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

    * Choisis l'option 1 ( "recherche") et tapes "entrée" .

    * Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
    de son contenu dans ta prochaine réponse ...

    ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

    Tutoriel Toolbard-S&D

    0
    1. sims439
      voici le rapport demandé, je suis sous xp

      -----------\\ ToolBar S&D 1.2.4 XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
      BIOS : Phoenix - AwardBIOS v6.00PG
      USER : PC ( Administrator )
      BOOT : Normal boot
      C:\ (Local Disk) - NTFS - Total:146 Go (Free:48 Go)
      D:\ (CD or DVD)
      E:\ (Local Disk) - NTFS - Total:87 Go (Free:11 Go)
      H:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
      Option : [1] ( 10/11/2008|15:18 )

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\Program Files\AskSBar
      C:\Program Files\AskSBar\bar
      C:\Program Files\AskSBar\SrchAstt
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\06-12-29-16-57-06
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-06-11-12-18-55
      C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-08-18-11-23-29
      C:\WINDOWS\iun6002.exe
      C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll

      -----------\\ Extensions

      (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

      (PC) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
      "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
      "Search Bar"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
      "Start Page"="http://www.ustart.org"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.01net.com/telecharger/"
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="http://www.ustart.org"
      "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

      --------------------\\ Recherche d'autres infections

      C:\WINDOWS\Pack.epk

      C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts.dat
      C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts_nav.dat
      C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts_navps.dat
      C:\WINDOWS\System32\qjexvwb.dat
      C:\WINDOWS\System32\qjexvwb_nav.dat
      C:\WINDOWS\System32\qjexvwb_navps.dat
      [b]==> EGDACCESS <==/b

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\PC\Application Data\Azureus\torrents\alone in the dark 5 multi(ita-eng-deu-esp-fra)no crack no serial [mininova].torrent.torrent

      1 - "C:\ToolBar SD\TB_1.txt" - 10/11/2008|15:18 - Option : [1]

      -----------\\ Fin du rapport a 15:18:47,87
      0
      1. Utilisateur anonyme
        Re,

        Fais ceci maintenant :

        Nettoyage avec ToolBar S&D :

        !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

        Relances Toolbar-S&D en double-cliquant sur le raccourci.
        -->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

        Note : ne touches à rien lors de la suppression !

        Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse
        accompagné d'un nouveau rapport hijackthis pour analyse ...
        0
        1. sims439 Auteur
          j'ai repondu mais je ne voi pas ma reponse??
          0
          2. Utilisateur anonyme
            Re,

            Suite a un bugg certainement:

            recommence désoler pour cette géne.

            @+
            0
            1. sims439 Auteur
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 16:11:50, on 10/11/2008
              Platform: Windows XP SP3 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16735)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\WINDOWS\ATKKBService.exe
              C:\Program Files\Bonjour\mDNSResponder.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\WINDOWS\System32\FTRTSVC.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\WINDOWS\system32\PnkBstrA.exe
              C:\WINDOWS\system32\PnkBstrB.exe
              C:\Program Files\CyberLink\Shared Files\RichVideo.exe
              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\SOUNDMAN.EXE
              C:\WINDOWS\system32\RUNDLL32.EXE
              C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
              C:\Program Files\QuickTime\QTTask.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
              C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
              C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\Program Files\Wanadoo\GestionnaireInternet.exe
              C:\Program Files\Wanadoo\ComComp.exe
              C:\PROGRA~1\Wanadoo\Toaster.exe
              C:\PROGRA~1\Wanadoo\Inactivity.exe
              C:\PROGRA~1\Wanadoo\PollingModule.exe
              C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
              C:\Program Files\Wanadoo\Watch.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Windows Live Toolbar\msn_sl.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
              O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
              O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
              O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
              O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
              O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
              O4 - HKCU\..\Run: [film size] C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
              O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
              O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
              O4 - Global Startup: Monitor.lnk = C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
              O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
              O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
              O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
              O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
              O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?c4e141bcef294ef48ad7f86d8734e76f
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?c4e141bcef294ef48ad7f86d8734e76f
              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\PC\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
              O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
              O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
              O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
              O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              0
              1. sims439 Auteur
                voila je vien d'envoyé les2 rapports et j'en voi qu'un celui de hijack....

                merci pour ton aide
                0
                1. Utilisateur anonyme
                  Re,

                  ==>Télécharge sur ton bureau MSNFix

                  * Enregistrez le fichier sur votre bureau.
                  * Ne pas double-cliquer sur le fichier
                  * Faites un clic droit sur le fichier puis Extraire tout, le but étant de récupérer un dossier MSNFix

                  * Double-cliquez sur le dossier MSNFix afin de l'ouvrir
                  * Vous trouverez dedans un nouveau dossier ainsi qu'un fichier MSNFix.bat (le .bat peut ne pas apparaître chez vous).
                  * Double-cliquez sur MSNFix.bat

                  Tutorial MSNFix
                  0
                  1. sim439
                    -----------\\ ToolBar S&D 1.2.4 XP/Vista

                    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
                    BIOS : Phoenix - AwardBIOS v6.00PG
                    USER : PC ( Administrator )
                    BOOT : Normal boot
                    C:\ (Local Disk) - NTFS - Total:146 Go (Free:48 Go)
                    D:\ (CD or DVD)
                    E:\ (Local Disk) - NTFS - Total:87 Go (Free:11 Go)
                    H:\ (CD or DVD)

                    "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
                    Option : [2] ( 10/11/2008|15:37 )

                    -----------\\ SUPPRESSION

                    Supprime! - C:\Program Files\AskSBar\bar
                    Supprime! - C:\Program Files\AskSBar\SrchAstt
                    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\06-12-29-16-57-06
                    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-06-11-12-18-55
                    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-08-18-11-23-29
                    Supprime! - C:\WINDOWS\iun6002.exe
                    Supprime! - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll
                    Supprime! - C:\Program Files\AskSBar
                    Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar

                    -----------\\ Recherche de Fichiers / Dossiers ...

                    -----------\\ Extensions

                    (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

                    (PC) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

                    -----------\\ [..\Internet Explorer\Main]

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                    "Search Page"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
                    "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
                    "Search Bar"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
                    "Start Page"="http://www.ustart.org"

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                    "Default_Page_URL"="https://www.01net.com/telecharger/"
                    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                    "Start Page"="https://www.msn.com/fr-fr/"
                    "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

                    --------------------\\ Recherche d'autres infections

                    C:\WINDOWS\Pack.epk

                    C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts.dat
                    C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts_nav.dat
                    C:\DOCUME~1\PC\LOCALS~1\APPLIC~1\jtuwqhgts_navps.dat
                    C:\WINDOWS\System32\qjexvwb.dat
                    C:\WINDOWS\System32\qjexvwb_nav.dat
                    C:\WINDOWS\System32\qjexvwb_navps.dat
                    [b]==> EGDACCESS <==/b

                    --------------------\\ Cracks & Keygens ..

                    C:\DOCUME~1\PC\Application Data\Azureus\torrents\alone in the dark 5 multi(ita-eng-deu-esp-fra)no crack no serial [mininova].torrent.torrent

                    1 - "C:\ToolBar SD\TB_1.txt" - 10/11/2008|15:18 - Option : [1]
                    2 - "C:\ToolBar SD\TB_2.txt" - 10/11/2008|15:37 - Option : [2]

                    -----------\\ Fin du rapport a 15:37:42,96
                    0
                    2. sims439 Auteur
                      ok msnfix c désinfecté

                      pour internet c tjrs pareil....

                      que dois-je faire?

                      merci pour ton aide
                      0
                      1. Utilisateur anonyme
                        Re,

                        Fait moi un nouvelle hijackthis STP.

                        merci
                        0
                        1. sims439 Auteur
                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 16:42:24, on 10/11/2008
                          Platform: Windows XP SP3 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16735)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          C:\WINDOWS\ATKKBService.exe
                          C:\Program Files\Bonjour\mDNSResponder.exe
                          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          C:\WINDOWS\System32\FTRTSVC.exe
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\WINDOWS\system32\PnkBstrA.exe
                          C:\WINDOWS\system32\PnkBstrB.exe
                          C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                          C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
                          C:\WINDOWS\system32\wscntfy.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\WINDOWS\SOUNDMAN.EXE
                          C:\WINDOWS\system32\RunDLL32.exe
                          C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                          C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                          C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                          C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                          C:\Program Files\pspvideo9\pspVideo9.exe
                          C:\Program Files\QuickTime\QTTask.exe
                          C:\Program Files\iTunes\iTunesHelper.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Electronic Arts\EADM\Core.exe
                          C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                          C:\Program Files\GameSpy\Comrade\Comrade.exe
                          C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
                          C:\PROGRA~1\Wanadoo\ComComp.exe
                          C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
                          C:\PROGRA~1\Wanadoo\Toaster.exe
                          C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                          C:\PROGRA~1\Wanadoo\Inactivity.exe
                          C:\PROGRA~1\Wanadoo\PollingModule.exe
                          C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
                          C:\PROGRA~1\Wanadoo\Watch.exe
                          C:\Program Files\iPod\bin\iPodService.exe
                          C:\Program Files\Internet Explorer\iexplore.exe
                          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                          C:\Program Files\Windows Live Toolbar\msn_sl.exe
                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                          O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                          O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                          O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                          O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                          O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                          O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                          O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                          O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                          O4 - HKCU\..\Run: [film size] C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                          O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                          O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
                          O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
                          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                          O4 - Global Startup: Monitor.lnk = C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
                          O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                          O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
                          O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
                          O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
                          O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
                          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?c4e141bcef294ef48ad7f86d8734e76f
                          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?c4e141bcef294ef48ad7f86d8734e76f
                          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                          O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\PC\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                          O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                          O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
                          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                          O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                          O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
                          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                          O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                          O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                          0
                          1. Utilisateur anonyme
                            Re,

                            Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :

                            /!\ Déconnectes toi et fermes toutes applications en cours

                            ● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
                            ● Double clique sur l'icône Ad-removersituée sur ton bureau
                            ● Au menu principal choisi l'option "A"
                            ● Postes le rapport qui apparait à la fin .

                            ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

                            (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                            Note :

                            "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                            Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                            Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
                            0
                            1. sims439 Auteur
                              voici le rapport

                              F --------- Logfile of AD-Remover 1.0.3.2 by C_XX ---------

                              START at: 16:50:27 | 10/11/2008
                              ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
                              Internet Explorer: 7.0.5730.11
                              OPTION: Scan
                              EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
                              USER: PC | PC: PC-1EB3A9E0183B
                              BOOT MODE: Normal
                              DRIVE(S): C:\
                              ~> Systemdrive: C:\

                              --------- [ PROCESSES ] ---------

                              \SystemRoot\System32\smss.exe [900]
                              \??\C:\WINDOWS\system32\csrss.exe [956]
                              \??\C:\WINDOWS\system32\winlogon.exe [996]
                              C:\WINDOWS\system32\services.exe [1040]
                              C:\WINDOWS\system32\lsass.exe [1052]
                              C:\WINDOWS\system32\svchost.exe [1196]
                              C:\WINDOWS\system32\svchost.exe [1260]
                              C:\WINDOWS\System32\svchost.exe [1296]
                              C:\WINDOWS\system32\svchost.exe [1332]
                              C:\WINDOWS\system32\svchost.exe [1380]
                              C:\WINDOWS\system32\svchost.exe [1408]
                              C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [1480]
                              C:\WINDOWS\system32\spoolsv.exe [1568]
                              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [1676]
                              C:\WINDOWS\ATKKBService.exe [1688]
                              C:\Program Files\Bonjour\mDNSResponder.exe [1708]
                              C:\WINDOWS\system32\drivers\CDAC11BA.EXE [1720]
                              C:\WINDOWS\System32\FTRTSVC.exe [1752]
                              C:\WINDOWS\system32\nvsvc32.exe [1796]
                              C:\WINDOWS\system32\PnkBstrA.exe [1812]
                              C:\WINDOWS\system32\PnkBstrB.exe [1824]
                              C:\Program Files\CyberLink\Shared Files\RichVideo.exe [1856]
                              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [1900]
                              C:\WINDOWS\system32\svchost.exe [1948]
                              C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe [216]
                              C:\WINDOWS\System32\alg.exe [756]
                              C:\WINDOWS\system32\wscntfy.exe [788]
                              C:\WINDOWS\Explorer.EXE [840]
                              C:\WINDOWS\System32\svchost.exe [2364]
                              C:\WINDOWS\system32\wuauclt.exe [3180]
                              C:\WINDOWS\SOUNDMAN.EXE [3232]
                              C:\WINDOWS\system32\RunDLL32.exe [3368]
                              C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [3396]
                              C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe [3376]
                              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [3428]
                              C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [3448]
                              C:\PROGRA~1\Wanadoo\TaskBarIcon.exe [3424]
                              C:\Program Files\pspvideo9\pspVideo9.exe [3460]
                              C:\Program Files\QuickTime\QTTask.exe [3440]
                              C:\Program Files\iTunes\iTunesHelper.exe [3480]
                              C:\WINDOWS\system32\ctfmon.exe [3528]
                              C:\Program Files\Electronic Arts\EADM\Core.exe [3540]
                              C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3596]
                              C:\Program Files\GameSpy\Comrade\Comrade.exe [3576]
                              C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe [3680]
                              C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [3740]
                              C:\Program Files\iPod\bin\iPodService.exe [1320]
                              C:\WINDOWS\system32\msiexec.exe [2204]
                              C:\WINDOWS\system32\MsiExec.exe [3272]
                              C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2968]
                              C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe [468]

                              ---------------------------- [~> 51]

                              +---------------------------------------------------------------------------+
                              +------------------------------- SERVICES FOUND
                              +---------------------------------------------------------------------------+

                              Found ! - "Boonty Games"

                              +---------------------------------------------------------------------------+
                              +------------------------------- REGISTRY ELEMENTS FOUND
                              +---------------------------------------------------------------------------+

                              "HKEY_LOCAL_MACHINE\Software\Boonty"
                              "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}"
                              "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
                              "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
                              "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
                              "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
                              "HKEY_CURRENT_USER\SOFTWARE\Boonty"
                              "HKEY_CURRENT_USER\SOFTWARE\MessengerSkinner"
                              "HKEY_CLASSES_ROOT\boontybox"

                              +---------------------------------------------------------------------------+
                              +------------------------------- FILES\FOLDERS FOUND
                              +---------------------------------------------------------------------------+

                              [11/06/2008 16:55|d--------] C:\Program Files\Boonty
                              [11/06/2008 16:55|d--------] C:\Program Files\BoontyGames
                              [19/11/2007 22:09|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
                              [19/11/2007 22:09|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

                              +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

                              ...\u2g8i435.default\prefs.js :

                              ~~~~ Mozilla FireFox version 2.0.0.2 ~~~~

                              Start Page : "https://www.msn.com/fr-fr"

                              +----------+

                              +---------------------------------------------------------------------------+

                              +---------- Added scan ...

                              +-----[HKLM\...\Run]

                              SoundMan REG_SZ SOUNDMAN.EXE
                              NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                              nwiz REG_SZ nwiz.exe /install
                              NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                              NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
                              Zone Labs Client REG_SZ C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                              Easy-PrintToolBox REG_SZ C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                              EEventManager REG_SZ C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                              Microsoft Works Update Detection REG_SZ C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                              WOOWATCH REG_SZ C:\PROGRA~1\Wanadoo\Watch.exe
                              WOOTASKBARICON REG_SZ C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                              SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                              PCSuiteTrayApplication REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                              PSPVideo9 REG_SZ C:\Program Files\pspvideo9\pspVideo9.exe -t
                              QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                              iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                              +-----[HKCU\...\Run]

                              WOOKIT REG_SZ C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                              film size REG_SZ C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
                              msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
                              EA Core REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                              Comrade.exe REG_SZ C:\Program Files\GameSpy\Comrade\Comrade.exe

                              +-----[HKLM\...\Internet Explorer\MAIN]

                              Start Page : hxxp://www.msn.com/
                              Start Page : hxxp://www.01net.com/\0http

                              +-----[HKCU\...\Internet Explorer\MAIN]

                              Start Page : hxxp://www.google.fr/

                              +---------------------------------------------------------------------------+
                              +------------------------------- [ EOF - 134 lines ]
                              +---------------------------------------------------------------------------+
                              0
                              1. Utilisateur anonyme
                                Re,

                                Nettoyage AD-Remover :

                                ! Déconnectes toi et fermes toutes applications en cours !

                                ● Relances "Ad-remover" : au menu principal choisi l'option "B" .

                                --> le programme va travailler ...

                                ● Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ...

                                ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

                                (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                                /!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides)
                                0
                                1. sims439 Auteur
                                  voici le rapport demandé

                                  F --------- Logfile of AD-Remover 1.0.3.2 by C_XX ---------

                                  START at: 16:50:27 | 10/11/2008
                                  ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
                                  Internet Explorer: 7.0.5730.11
                                  OPTION: Scan
                                  EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
                                  USER: PC | PC: PC-1EB3A9E0183B
                                  BOOT MODE: Normal
                                  DRIVE(S): C:\
                                  ~> Systemdrive: C:\

                                  --------- [ PROCESSES ] ---------

                                  \SystemRoot\System32\smss.exe [900]
                                  \??\C:\WINDOWS\system32\csrss.exe [956]
                                  \??\C:\WINDOWS\system32\winlogon.exe [996]
                                  C:\WINDOWS\system32\services.exe [1040]
                                  C:\WINDOWS\system32\lsass.exe [1052]
                                  C:\WINDOWS\system32\svchost.exe [1196]
                                  C:\WINDOWS\system32\svchost.exe [1260]
                                  C:\WINDOWS\System32\svchost.exe [1296]
                                  C:\WINDOWS\system32\svchost.exe [1332]
                                  C:\WINDOWS\system32\svchost.exe [1380]
                                  C:\WINDOWS\system32\svchost.exe [1408]
                                  C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [1480]
                                  C:\WINDOWS\system32\spoolsv.exe [1568]
                                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [1676]
                                  C:\WINDOWS\ATKKBService.exe [1688]
                                  C:\Program Files\Bonjour\mDNSResponder.exe [1708]
                                  C:\WINDOWS\system32\drivers\CDAC11BA.EXE [1720]
                                  C:\WINDOWS\System32\FTRTSVC.exe [1752]
                                  C:\WINDOWS\system32\nvsvc32.exe [1796]
                                  C:\WINDOWS\system32\PnkBstrA.exe [1812]
                                  C:\WINDOWS\system32\PnkBstrB.exe [1824]
                                  C:\Program Files\CyberLink\Shared Files\RichVideo.exe [1856]
                                  C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [1900]
                                  C:\WINDOWS\system32\svchost.exe [1948]
                                  C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe [216]
                                  C:\WINDOWS\System32\alg.exe [756]
                                  C:\WINDOWS\system32\wscntfy.exe [788]
                                  C:\WINDOWS\Explorer.EXE [840]
                                  C:\WINDOWS\System32\svchost.exe [2364]
                                  C:\WINDOWS\system32\wuauclt.exe [3180]
                                  C:\WINDOWS\SOUNDMAN.EXE [3232]
                                  C:\WINDOWS\system32\RunDLL32.exe [3368]
                                  C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [3396]
                                  C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe [3376]
                                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [3428]
                                  C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [3448]
                                  C:\PROGRA~1\Wanadoo\TaskBarIcon.exe [3424]
                                  C:\Program Files\pspvideo9\pspVideo9.exe [3460]
                                  C:\Program Files\QuickTime\QTTask.exe [3440]
                                  C:\Program Files\iTunes\iTunesHelper.exe [3480]
                                  C:\WINDOWS\system32\ctfmon.exe [3528]
                                  C:\Program Files\Electronic Arts\EADM\Core.exe [3540]
                                  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3596]
                                  C:\Program Files\GameSpy\Comrade\Comrade.exe [3576]
                                  C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe [3680]
                                  C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [3740]
                                  C:\Program Files\iPod\bin\iPodService.exe [1320]
                                  C:\WINDOWS\system32\msiexec.exe [2204]
                                  C:\WINDOWS\system32\MsiExec.exe [3272]
                                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2968]
                                  C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe [468]

                                  ---------------------------- [~> 51]

                                  +---------------------------------------------------------------------------+
                                  +------------------------------- SERVICES FOUND
                                  +---------------------------------------------------------------------------+

                                  Found ! - "Boonty Games"

                                  +---------------------------------------------------------------------------+
                                  +------------------------------- REGISTRY ELEMENTS FOUND
                                  +---------------------------------------------------------------------------+

                                  "HKEY_LOCAL_MACHINE\Software\Boonty"
                                  "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}"
                                  "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
                                  "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
                                  "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
                                  "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
                                  "HKEY_CURRENT_USER\SOFTWARE\Boonty"
                                  "HKEY_CURRENT_USER\SOFTWARE\MessengerSkinner"
                                  "HKEY_CLASSES_ROOT\boontybox"

                                  +---------------------------------------------------------------------------+
                                  +------------------------------- FILES\FOLDERS FOUND
                                  +---------------------------------------------------------------------------+

                                  [11/06/2008 16:55|d--------] C:\Program Files\Boonty
                                  [11/06/2008 16:55|d--------] C:\Program Files\BoontyGames
                                  [19/11/2007 22:09|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
                                  [19/11/2007 22:09|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

                                  +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

                                  ...\u2g8i435.default\prefs.js :

                                  ~~~~ Mozilla FireFox version 2.0.0.2 ~~~~

                                  Start Page : "https://www.msn.com/fr-fr"

                                  +----------+

                                  +---------------------------------------------------------------------------+

                                  +---------- Added scan ...

                                  +-----[HKLM\...\Run]

                                  SoundMan REG_SZ SOUNDMAN.EXE
                                  NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                  nwiz REG_SZ nwiz.exe /install
                                  NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                                  NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
                                  Zone Labs Client REG_SZ C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                  Easy-PrintToolBox REG_SZ C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                                  EEventManager REG_SZ C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                                  Microsoft Works Update Detection REG_SZ C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                  WOOWATCH REG_SZ C:\PROGRA~1\Wanadoo\Watch.exe
                                  WOOTASKBARICON REG_SZ C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                                  SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                  PCSuiteTrayApplication REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                  PSPVideo9 REG_SZ C:\Program Files\pspvideo9\pspVideo9.exe -t
                                  QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                                  +-----[HKCU\...\Run]

                                  WOOKIT REG_SZ C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                                  film size REG_SZ C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
                                  msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                  ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
                                  EA Core REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                                  Comrade.exe REG_SZ C:\Program Files\GameSpy\Comrade\Comrade.exe

                                  +-----[HKLM\...\Internet Explorer\MAIN]

                                  Start Page : hxxp://www.msn.com/
                                  Start Page : hxxp://www.01net.com/\0http

                                  +-----[HKCU\...\Internet Explorer\MAIN]

                                  Start Page : hxxp://www.google.fr/

                                  +---------------------------------------------------------------------------+
                                  +------------------------------- [ EOF - 134 lines ]
                                  +---------------------------------------------------------------------------+

                                  [ END at: 16:54:31 | 10/11/2008 ] - [ Time elapsed: 4 minutes, 3 seconds ]
                                  0
                                  1. Utilisateur anonyme
                                    Re,

                                    -Télécharge et installe MalwareByte's Anti-Malware
                                    Malwarebyte

                                    - Mets le à jour

                                    ---
                                    - Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
                                    - Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
                                    - clique sur Rechercher

                                    - Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

                                    - Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

                                    - Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

                                    - Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

                                    Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

                                    Tutoriel pour MalwareByte's
                                    0
                                    1. sims439 Auteur
                                      c'es pas le bon rapport

                                      voici le bon rapport

                                      F --------- Logfile of AD-Remover 1.0.3.2 by C_XX ---------

                                      START at: 16:57:37 | 10/11/2008
                                      ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
                                      Internet Explorer: 7.0.5730.11
                                      OPTION: Clean
                                      EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
                                      USER: PC | PC: PC-1EB3A9E0183B
                                      BOOT MODE: Normal
                                      DRIVE(S): C:\
                                      ~> Systemdrive: C:\

                                      --------- [ PROCESSES ] ---------

                                      \SystemRoot\System32\smss.exe [900]
                                      \??\C:\WINDOWS\system32\csrss.exe [956]
                                      \??\C:\WINDOWS\system32\winlogon.exe [996]
                                      C:\WINDOWS\system32\services.exe [1040]
                                      C:\WINDOWS\system32\lsass.exe [1052]
                                      C:\WINDOWS\system32\svchost.exe [1196]
                                      C:\WINDOWS\system32\svchost.exe [1260]
                                      C:\WINDOWS\System32\svchost.exe [1296]
                                      C:\WINDOWS\system32\svchost.exe [1332]
                                      C:\WINDOWS\system32\svchost.exe [1380]
                                      C:\WINDOWS\system32\svchost.exe [1408]
                                      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [1480]
                                      C:\WINDOWS\system32\spoolsv.exe [1568]
                                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [1676]
                                      C:\WINDOWS\ATKKBService.exe [1688]
                                      C:\Program Files\Bonjour\mDNSResponder.exe [1708]
                                      C:\WINDOWS\system32\drivers\CDAC11BA.EXE [1720]
                                      C:\WINDOWS\System32\FTRTSVC.exe [1752]
                                      C:\WINDOWS\system32\nvsvc32.exe [1796]
                                      C:\WINDOWS\system32\PnkBstrA.exe [1812]
                                      C:\WINDOWS\system32\PnkBstrB.exe [1824]
                                      C:\Program Files\CyberLink\Shared Files\RichVideo.exe [1856]
                                      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [1900]
                                      C:\WINDOWS\system32\svchost.exe [1948]
                                      C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe [216]
                                      C:\WINDOWS\System32\alg.exe [756]
                                      C:\WINDOWS\system32\wscntfy.exe [788]
                                      C:\WINDOWS\Explorer.EXE [840]
                                      C:\WINDOWS\System32\svchost.exe [2364]
                                      C:\WINDOWS\system32\wuauclt.exe [3180]
                                      C:\WINDOWS\SOUNDMAN.EXE [3232]
                                      C:\WINDOWS\system32\RunDLL32.exe [3368]
                                      C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [3396]
                                      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe [3376]
                                      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [3428]
                                      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [3448]
                                      C:\PROGRA~1\Wanadoo\TaskBarIcon.exe [3424]
                                      C:\Program Files\pspvideo9\pspVideo9.exe [3460]
                                      C:\Program Files\QuickTime\QTTask.exe [3440]
                                      C:\Program Files\iTunes\iTunesHelper.exe [3480]
                                      C:\WINDOWS\system32\ctfmon.exe [3528]
                                      C:\Program Files\Electronic Arts\EADM\Core.exe [3540]
                                      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3596]
                                      C:\Program Files\GameSpy\Comrade\Comrade.exe [3576]
                                      C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe [3680]
                                      C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [3740]
                                      C:\Program Files\iPod\bin\iPodService.exe [1320]
                                      C:\WINDOWS\system32\msiexec.exe [2204]
                                      C:\WINDOWS\system32\MsiExec.exe [3272]
                                      C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2968]
                                      C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe [468]
                                      C:\WINDOWS\system32\notepad.exe [3420]
                                      C:\Program Files\Windows Live Toolbar\msn_sl.exe [1404]

                                      ---------------------------- [~> 53]

                                      +---------------------------------------------------------------------------+
                                      +------------------------------- SERVICES DELETED
                                      +---------------------------------------------------------------------------+

                                      Deleted successfully ! - "Boonty Games"

                                      +---------------------------------------------------------------------------+
                                      +------------------------------- REGISTRY ELEMENTS DELETED
                                      +---------------------------------------------------------------------------+

                                      "HKEY_LOCAL_MACHINE\Software\Boonty"
                                      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}"
                                      "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
                                      "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
                                      "HKEY_CURRENT_USER\SOFTWARE\Boonty"
                                      "HKEY_CURRENT_USER\SOFTWARE\MessengerSkinner"

                                      +---------------------------------------------------------------------------+
                                      +------------------------------- FILES\FOLDERS DELETED
                                      +---------------------------------------------------------------------------+

                                      [11/06/2008 16:55|d--------] C:\Program Files\Boonty
                                      [11/06/2008 16:55|d--------] C:\Program Files\BoontyGames
                                      [19/11/2007 22:09|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
                                      [19/11/2007 22:09|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY

                                      (!) ---- Temp files deleted.

                                      (!) ---- Recycle bin emptied in all drives.

                                      +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

                                      ...\u2g8i435.default\prefs.js :

                                      ~~~~ Mozilla FireFox version 2.0.0.2 ~~~~

                                      Start Page : "https://www.msn.com/fr-fr"

                                      +----------+

                                      +---------- Added scan ...

                                      +-----[HKLM\...\Run]

                                      SoundMan REG_SZ SOUNDMAN.EXE
                                      NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                      nwiz REG_SZ nwiz.exe /install
                                      NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                                      NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
                                      Zone Labs Client REG_SZ C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                      Easy-PrintToolBox REG_SZ C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                                      EEventManager REG_SZ C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                                      Microsoft Works Update Detection REG_SZ C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                      WOOWATCH REG_SZ C:\PROGRA~1\Wanadoo\Watch.exe
                                      WOOTASKBARICON REG_SZ C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                                      SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                      PCSuiteTrayApplication REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                      PSPVideo9 REG_SZ C:\Program Files\pspvideo9\pspVideo9.exe -t
                                      QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                      iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                                      +-----[HKCU\...\Run]

                                      WOOKIT REG_SZ C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                                      film size REG_SZ C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
                                      msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                      ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
                                      EA Core REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                                      Comrade.exe REG_SZ C:\Program Files\GameSpy\Comrade\Comrade.exe

                                      +-----[HKLM\...\Internet Explorer\MAIN]

                                      Start Page : hxxp://fr.msn.com/
                                      Start Page : hxxp://www.01net.com/\0http

                                      +-----[HKCU\...\Internet Explorer\MAIN]

                                      Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

                                      +---------------------------------------------------------------------------+
                                      +------------------------------- [ EOF - 132 lines ]
                                      +---------------------------------------------------------------------------+

                                      [ END at: 17:05:37 | 10/11/2008 ] - [ Time elapsed: 7 minutes, 59 seconds ]
                                      0
                                      1. sims439 Auteur
                                        voila le rapport hijack

                                        Logfile of Trend Micro HijackThis v2.0.2
                                        Scan saved at 17:07:02, on 10/11/2008
                                        Platform: Windows XP SP3 (WinNT 5.01.2600)
                                        MSIE: Internet Explorer v7.00 (7.00.6000.16735)
                                        Boot mode: Normal

                                        Running processes:
                                        C:\WINDOWS\System32\smss.exe
                                        C:\WINDOWS\system32\winlogon.exe
                                        C:\WINDOWS\system32\services.exe
                                        C:\WINDOWS\system32\lsass.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                                        C:\WINDOWS\system32\spoolsv.exe
                                        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                        C:\WINDOWS\ATKKBService.exe
                                        C:\Program Files\Bonjour\mDNSResponder.exe
                                        C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                        C:\WINDOWS\System32\FTRTSVC.exe
                                        C:\WINDOWS\system32\nvsvc32.exe
                                        C:\WINDOWS\system32\PnkBstrA.exe
                                        C:\WINDOWS\system32\PnkBstrB.exe
                                        C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                        C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\system32\wscntfy.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\WINDOWS\system32\wuauclt.exe
                                        C:\WINDOWS\SOUNDMAN.EXE
                                        C:\WINDOWS\system32\RunDLL32.exe
                                        C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                                        C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                                        C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                                        C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                                        C:\Program Files\pspvideo9\pspVideo9.exe
                                        C:\Program Files\QuickTime\QTTask.exe
                                        C:\Program Files\iTunes\iTunesHelper.exe
                                        C:\WINDOWS\system32\ctfmon.exe
                                        C:\Program Files\Electronic Arts\EADM\Core.exe
                                        C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                        C:\Program Files\GameSpy\Comrade\Comrade.exe
                                        C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
                                        C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                                        C:\Program Files\iPod\bin\iPodService.exe
                                        C:\WINDOWS\system32\msiexec.exe
                                        C:\WINDOWS\system32\MsiExec.exe
                                        C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                        C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe
                                        C:\WINDOWS\explorer.exe
                                        C:\Program Files\Wanadoo\GestionnaireInternet.exe
                                        C:\Program Files\Wanadoo\ComComp.exe
                                        C:\PROGRA~1\Wanadoo\Toaster.exe
                                        C:\PROGRA~1\Wanadoo\Inactivity.exe
                                        C:\PROGRA~1\Wanadoo\PollingModule.exe
                                        C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
                                        C:\Program Files\Wanadoo\Watch.exe
                                        C:\Program Files\Internet Explorer\iexplore.exe
                                        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                                        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                        O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                                        O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                                        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                        O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                                        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                                        O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                                        O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                                        O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
                                        O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                        O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                                        O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                        O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                        O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
                                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                        O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                                        O4 - HKCU\..\Run: [film size] C:\DOCUME~1\PC\APPLIC~1\FLAPIN~1\dumb camp.exe
                                        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                        O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                                        O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
                                        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                        O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
                                        O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
                                        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                                        O4 - Global Startup: Monitor.lnk = C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe
                                        O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
                                        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                        O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
                                        O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
                                        O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
                                        O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
                                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?c4e141bcef294ef48ad7f86d8734e76f
                                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?c4e141bcef294ef48ad7f86d8734e76f
                                        O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                                        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                                        O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\PC\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
                                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                                        O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                                        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                                        O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                                        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                                        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                        O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                                        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                        O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
                                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                        O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                                        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                                        O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
                                        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                        O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                        O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                                        0
                                        • 1
                                        • 2
                                        • 3

                                        Discussions similaires

                                        Connecté à internet mais rien ne charge
                                        gandounet

                                        10 réponses
                                        FOTOSE (allemagne)
                                        lix

                                        13 réponses