Scan hijackthis

Question

SalutJ vous envois ce fameux scan hichackthis, car j'ai un problème avec mon ordi, qui n'arrete pas de beuguer, de changer de couleur.Et pourtant j'ai fais un test antivirus avec Avast ainsi qu'avec ad-award pesonnalLogfile of HijackThis v1.99.1Scan saved at 20:44:51, on 13/01/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\windows\system\hpsysdrv.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\HP\KBD\KBD.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Multimedia Card Reader\shwicon2k.exeC:\WINDOWS\ALCXMNTR.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\explorer.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\WINDOWS\System32\msiexec.exeC:\Documents and Settings\Propriétaire\Mes documents\Mes téléchargements\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://fr.search.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: Class - {03A25C5E-2285-A73A-47BC-3F31BD618A3B} - C:\WINDOWS
tjn32.dllO2 - BHO: Class - {0402ED77-6A3E-935E-AC06-95ADD3F1EC13} - C:\WINDOWS\appuf32.dllO2 - BHO: Class - {05F3C50C-D53F-D6BC-9065-2ABB3092A8D0} - C:\WINDOWS\ipqt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: Class - {083BB3F1-97E9-86D9-D6D7-D82343AADC7D} - C:\WINDOWS\system32\sdksi32.dllO2 - BHO: Class - {09A44D23-36D4-1C12-AD2A-E655F1C400AD} - C:\WINDOWS\javako32.dllO2 - BHO: Class - {0B4CB86F-D21A-B1C2-381D-61FA9B55F603} - C:\WINDOWS\d3lu.dllO2 - BHO: Class - {0E8BFA5B-11A5-4B4E-7596-7118D059ECE8} - C:\WINDOWS\system32
tyu.dllO2 - BHO: Class - {1960401C-1EDC-C453-499B-B9D8506F210E} - C:\WINDOWS\system32\iecc.dllO2 - BHO: Class - {1C366C9F-DCEA-5233-2D82-F45056550ACB} - C:\WINDOWS\apptu32.dllO2 - BHO: Class - {1E0A9905-147C-8EE6-A30E-79339560CB79} - C:\WINDOWS\system32\ipla.dllO2 - BHO: Class - {1F49B46E-A0DA-CDF6-D913-1FAB1FF1A5FC} - C:\WINDOWS\system32\appop32.dllO2 - BHO: Class - {22FC434A-3E8C-40D7-EB9E-4324CBFEC077} - C:\WINDOWS\system32\mfckj.dllO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: Class - {2566FCEB-BCBE-B30A-35B9-518DEE38C367} - C:\WINDOWS\system32\winaw.dllO2 - BHO: Class - {27B5521F-00B6-1C06-5D69-90882615E7D8} - C:\WINDOWS\sysxl.dllO2 - BHO: Class - {27D7BC22-F101-E351-8F6E-1B9CE9ECDD9C} - C:\WINDOWS\cryb32.dllO2 - BHO: Class - {28FF0DAA-6EDD-259A-83C4-EADDF15D72AD} - C:\WINDOWS\system32\mfcbl32.dllO2 - BHO: Class - {30880E43-5DFC-86A8-0E33-7D8211669941} - C:\WINDOWS\system32\appzo32.dllO2 - BHO: Class - {32A6CEC2-152D-9C47-1D16-97AAFF45661E} - C:\WINDOWS\msej32.dllO2 - BHO: Class - {36C7DCF1-3D4C-D77C-04EE-55F46BFD30E0} - C:\WINDOWS\system32\crxq.dllO2 - BHO: Class - {3741D035-47CF-B4A5-B941-489B37424B4D} - C:\WINDOWS\system32\javacq.dllO2 - BHO: Class - {3F90B85D-C6A6-81CA-37D8-E42540D53A0B} - C:\WINDOWS\system32\ieuw32.dllO2 - BHO: Class - {408A38D3-8F90-3682-07E0-801204F76847} - C:\WINDOWS\ieui32.dllO2 - BHO: Class - {41D261AF-74ED-449F-EEC7-1D4FC649FA14} - C:\WINDOWS\appmu32.dllO2 - BHO: Class - {434697B1-B0A0-8A25-A2B0-15519E338038} - C:\WINDOWS\system32\sdkvc.dllO2 - BHO: Class - {4543DD78-8742-3F79-661D-E8EB58800867} - C:\WINDOWS\system32\iems.dllO2 - BHO: Class - {4B1D6F47-484B-7F32-116B-897A986991B7} - C:\WINDOWS\system32\sysmy32.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: Class - {5378A270-97C0-9850-0932-5B4BF750E05A} - C:\WINDOWS\system32\appng32.dllO2 - BHO: Class - {54595623-DD6E-DF6D-5647-D57D6B2CFEEB} - C:\WINDOWS\system32\sysur.dllO2 - BHO: Class - {55FD2817-BB02-E38C-F634-F5698484A5E6} - C:\WINDOWS\system32\d3wx.dllO2 - BHO: Class - {59658A25-7B74-EDCF-F455-A75FF0E4C8BE} - C:\WINDOWS\system32\crzd32.dllO2 - BHO: Class - {6259AAB6-979D-83C5-B2DB-ABC95EA1C8B2} - C:\WINDOWS\system32\msny32.dllO2 - BHO: Class - {63386818-1A9E-7A7D-61CD-7B656BEB6F4B} - C:\WINDOWS\ielq32.dllO2 - BHO: Class - {690868EA-08A6-AFDD-6D4E-3F0D7A94CB53} - C:\WINDOWS\iexv32.dllO2 - BHO: Class - {6F75ABBF-6008-EDA7-8453-2ADF8601ADFA} - C:\WINDOWS\msmv32.dllO2 - BHO: Class - {6F9D6D55-CAC3-5935-5958-2D75D127FF8E} - C:\WINDOWS\system32\sdkvc32.dllO2 - BHO: Class - {750FF9F1-9D7A-E337-A964-FD57D4914B02} - C:\WINDOWS\winvm32.dllO2 - BHO: Class - {75DF86D0-50B4-B58E-3F0F-546011A4DCDD} - C:\WINDOWS\ield.dllO2 - BHO: Class - {76271389-5737-F3F1-6A0D-D026C3733A3C} - C:\WINDOWS\mfcyd.dllO2 - BHO: Class - {792A8CA5-55BB-B3E8-EADD-488F2058805F} - C:\WINDOWS\system32\ipdk.dllO2 - BHO: Class - {7E10E215-8015-F27A-7FF8-C0C3C681C7D8} - C:\WINDOWS\system32
etjv.dllO2 - BHO: Class - {7E4E0ADA-4189-6454-35CE-5091BC0DCDBA} - C:\WINDOWS\atlkl.dllO2 - BHO: Class - {80127E37-4EFD-E63C-C706-18F6F66CDC8D} - C:\WINDOWS\d3hj32.dllO2 - BHO: Class - {80F9AF81-3EAC-2434-C117-26B9A88BCE7F} - C:\WINDOWS\msce.dllO2 - BHO: Class - {83EF55DB-6787-8204-BD91-03202E65FD32} - C:\WINDOWS\addnf32.dllO2 - BHO: Class - {853A1B1F-537E-D540-D6C6-ED90C207B848} - C:\WINDOWS\system32\winen32.dllO2 - BHO: Class - {86A6E2E0-A3BB-429F-4259-DEDA727BB219} - C:\WINDOWS\iejz32.dllO2 - BHO: Class - {86CC8D04-6990-3461-CA24-AF770BA94E40} - C:\WINDOWS\mfcmv32.dllO2 - BHO: Class - {88C6205F-2630-39C2-A423-8DF6C5DBE0B8} - C:\WINDOWS\system32\mfcrd32.dllO2 - BHO: Class - {8B9B4C67-045B-2559-03A4-FD879036D7DA} - C:\WINDOWS\system32\atlzo.dllO2 - BHO: Class - {8D4CF4DC-B05B-899F-99D4-09E2C70DA0DF} - C:\WINDOWS\system32\winab.dllO2 - BHO: Class - {8DD0E093-F203-A226-34B6-803644787EFF} - C:\WINDOWS\addzj32.dllO2 - BHO: Class - {9131706F-D034-5F4E-62F6-C060F737064C} - C:\WINDOWS\ipye32.dllO2 - BHO: Class - {9283B90B-6824-9F8C-CDEE-A26195750B35} - C:\WINDOWS\system32\wings.dllO2 - BHO: Class - {983C1758-DCAA-83B6-A461-FBD6D56D852E} - C:\WINDOWS\atlph.dllO2 - BHO: Class - {9AF6A182-27A8-DF20-ED12-C90589BF74CB} - C:\WINDOWS\system32\apphe.dllO2 - BHO: Class - {9B52DB7D-8D7B-4564-958F-49D99A6430FB} - C:\WINDOWS\appwh32.dllO2 - BHO: Class - {9D3007CE-B2C2-20A0-77AB-340FC4EDB2B3} - C:\WINDOWS\addsq.dllO2 - BHO: Class - {9D820633-435E-D9B8-9FD4-3C50B83EB541} - C:\WINDOWS\system32\winvx.dllO2 - BHO: Class - {A012ED6C-3ADD-6CAA-B9D6-A652CB9CDECF} - C:\WINDOWS\system32\msvw32.dllO2 - BHO: Class - {A3A1D3DD-CE5C-50A8-BB1C-D6D51301175C} - C:\WINDOWS\apioz32.dllO2 - BHO: Class - {A3AE7E28-5A26-913E-3E28-ABCC687B6BC9} - C:\WINDOWS\system32\apilu.dllO2 - BHO: Class - {A3C660FF-DEAB-ECF0-02FE-C8DC9874C708} - C:\WINDOWS\appdi32.dllO2 - BHO: Class - {AE963F47-BC89-BD0D-3AE9-19865D9B1BB7} - C:\WINDOWS\system32
trf.dllO2 - BHO: Class - {AEADE211-1738-D170-94D4-88BB276E7B57} - C:\WINDOWS\d3ti32.dllO2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - C:\WINDOWS
tim.dllO2 - BHO: Class - {B32BF9AC-3C15-58D5-A2CD-D066EB196265} - C:\WINDOWS\iedk.dllO2 - BHO: Class - {B74FC677-1BFA-DEF5-DEB7-DBD24D544D78} - C:\WINDOWS\apisf.dllO2 - BHO: Class - {B75BCD02-ABA7-9B5A-4478-A8AD97904CAC} - C:\WINDOWS\addnh32.dllO2 - BHO: Class - {B81896EA-E0AA-92AA-BF67-14B1C8C5A7E4} - C:\WINDOWS\system32
thl.dllO2 - BHO: Class - {BABB5662-6B08-7DB6-0D07-2CC2D56B1F13} - C:\WINDOWS\apiqx32.dllO2 - BHO: Class - {BB1AF287-6200-1830-5874-562036D6FA6B} - C:\WINDOWS\system32\apipn32.dllO2 - BHO: Class - {BB27E660-AE94-F3AC-F602-A183F392ABD7} - C:\WINDOWS\system32\msrt.dllO2 - BHO: Class - {C09D9D44-16EF-CE8C-6787-CE76B594A733} - C:\WINDOWS\apicg32.dllO2 - BHO: Class - {C518F322-8AF1-F0EE-3F82-E57C1BF73146} - C:\WINDOWS\atlgg.dllO2 - BHO: Class - {CA14850C-FA9C-DE0D-27DA-8BD9DA485F0B} - C:\WINDOWS
tvf32.dllO2 - BHO: Class - {CB798A46-957D-1AE4-8F9E-F766D6E85F00} - C:\WINDOWS\addkt32.dllO2 - BHO: Class - {CC22FEF2-3F13-D4D7-35C2-C66D30943149} - C:\WINDOWS\appoi32.dllO2 - BHO: Class - {CE40FC76-6F48-E648-5F16-33EAEF4DA9CF} - C:\WINDOWS\system32\javagq.dllO2 - BHO: Class - {CFFA8321-97AC-D558-B2CD-D278699292B1} - C:\WINDOWS\system32\appiq32.dllO2 - BHO: Class - {D23166CF-6072-71EA-2EDB-6FE0AE95942D} - C:\WINDOWS\javapo.dllO2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)O2 - BHO: Class - {DB29A986-131A-F212-4C89-18F9E42C205A} - C:\WINDOWS\msjz.dllO2 - BHO: Class - {DB58988A-7E72-E50C-B2C0-29E44B377388} - C:\WINDOWS\sdkob.dllO2 - BHO: Class - {DF77D786-7899-DE17-AC07-FBA8FA5E3372} - C:\WINDOWS
etbz.dllO2 - BHO: Class - {E4630875-2D99-D343-395A-FB070852B36D} - C:\WINDOWS\system32\mfcpv.dllO2 - BHO: Class - {E86D22B7-C656-24F6-633A-03A13BAB127D} - C:\WINDOWS\system32
etpd.dllO2 - BHO: Class - {EB79404D-AE0E-86BB-F3E5-F15C2D55C061} - C:\WINDOWS\atlkx.dllO2 - BHO: Class - {EC52F9A9-BFCA-611C-0CF2-D33A007A66FA} - C:\WINDOWS\system32\ieis.dllO2 - BHO: Class - {EF56697C-5109-5395-6FE2-E92AAFF48176} - C:\WINDOWS\mfcwk32.dllO2 - BHO: Class - {F3E402C1-7CDD-A508-5E40-1F3CA6FC89B1} - C:\WINDOWS\ieeo.dllO2 - BHO: Class - {F5FE0B4F-6539-4884-A16A-13AF58029AB1} - C:\WINDOWS\system32\sdkkl32.dllO2 - BHO: Class - {F7BDA65D-1EEA-FBCD-9F9B-79556234850C} - C:\WINDOWS\system32\apiou.dllO2 - BHO: Class - {F820586B-B64E-CA18-010C-8EE429E06F22} - C:\WINDOWS\mseu.dllO2 - BHO: Class - {FA0C2FA2-9533-02AC-2257-2C0FBDC0D6F5} - C:\WINDOWS\system32\winzk32.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O2 - BHO: Class - {FE91B9D4-3653-458A-EDE1-263E7454EF29} - C:\WINDOWS
etqf32.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program Files\Accoona\atoolbar.dll (file missing)O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [atlmv32.exe] C:\WINDOWS\system32\atlmv32.exeO4 - HKLM\..\Run: [msma32.exe] C:\WINDOWS\msma32.exeO4 - HKLM\..\Run: [mfcbi.exe] C:\WINDOWS\mfcbi.exeO4 - HKLM\..\Run: [iexo.exe] C:\WINDOWS\system32\iexo.exeO4 - HKLM\..\Run: [mfcui32.exe] C:\WINDOWS\system32\mfcui32.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [winqh32.exe] C:\WINDOWS\system32\winqh32.exeO4 - HKLM\..\Run: [ipay32.exe] C:\WINDOWS\ipay32.exeO4 - HKLM\..\Run: [ntwq32.exe] C:\WINDOWS\system32
twq32.exeO4 - HKLM\..\Run: [appek.exe] C:\WINDOWS\appek.exeO4 - HKLM\..\Run: [sysck32.exe] C:\WINDOWS\system32\sysck32.exeO4 - HKLM\..\Run: [crkd32.exe] C:\WINDOWS\system32\crkd32.exeO4 - HKLM\..\Run: [netas32.exe] C:\WINDOWS
etas32.exeO4 - HKLM\..\Run: [ntfw32.exe] C:\WINDOWS
tfw32.exeO4 - HKLM\..\Run: [addei.exe] C:\WINDOWS\system32\addei.exeO4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"O4 - HKLM\..\Run: [atlal.exe] C:\WINDOWS\system32\atlal.exeO4 - HKLM\..\Run: [crzg32.exe] C:\WINDOWS\system32\crzg32.exeO4 - HKLM\..\Run: [netyl32.exe] C:\WINDOWS\system32
etyl32.exeO4 - HKLM\..\Run: [crgg32.exe] C:\WINDOWS\system32\crgg32.exeO4 - HKLM\..\Run: [apidm32.exe] C:\WINDOWS\apidm32.exeO4 - HKLM\..\Run: [javamx32.exe] C:\WINDOWS\javamx32.exeO4 - HKLM\..\Run: [iewi.exe] C:\WINDOWS\system32\iewi.exeO4 - HKLM\..\Run: [apidc.exe] C:\WINDOWS\system32\apidc.exeO4 - HKLM\..\Run: [d3wi.exe] C:\WINDOWS\system32\d3wi.exeO4 - HKLM\..\Run: [winjh.exe] C:\WINDOWS\winjh.exeO4 - HKLM\..\Run: [netam32.exe] C:\WINDOWS\system32
etam32.exeO4 - HKLM\..\Run: [sdkyi.exe] C:\WINDOWS\system32\sdkyi.exeO4 - HKLM\..\Run: [sysbn32.exe] C:\WINDOWS\sysbn32.exeO4 - HKLM\..\Run: [crno.exe] C:\WINDOWS\system32\crno.exeO4 - HKLM\..\Run: [HyperappelPL2003] C:\Program Files\Larousse\Petit Larousse 2004\bin\HiPL2002popup.exeO4 - HKLM\..\Run: [iplu32.exe] C:\WINDOWS\iplu32.exeO4 - HKLM\..\Run: [d3ge.exe] C:\WINDOWS\system32\d3ge.exeO4 - HKLM\..\Run: [sdksy.exe] C:\WINDOWS\sdksy.exeO4 - HKLM\..\Run: [sysft32.exe] C:\WINDOWS\system32\sysft32.exeO4 - HKLM\..\Run: [d3rf.exe] C:\WINDOWS\d3rf.exeO4 - HKLM\..\Run: [addqo.exe] C:\WINDOWS\system32\addqo.exeO4 - HKLM\..\Run: [wincg.exe] C:\WINDOWS\wincg.exeO4 - HKLM\..\Run: [ieil.exe] C:\WINDOWS\ieil.exeO4 - HKLM\..\Run: [crpe32.exe] C:\WINDOWS\system32\crpe32.exeO4 - HKLM\..\Run: [mfcbx32.exe] C:\WINDOWS\system32\mfcbx32.exeO4 - HKLM\..\Run: [atlmg32.exe] C:\WINDOWS\system32\atlmg32.exeO4 - HKLM\..\Run: [iega32.exe] C:\WINDOWS\iega32.exeO4 - HKLM\..\Run: [javaky32.exe] C:\WINDOWS\javaky32.exeO4 - HKLM\..\Run: [ieip32.exe] C:\WINDOWS\system32\ieip32.exeO4 - HKLM\..\Run: [javaqy32.exe] C:\WINDOWS\javaqy32.exeO4 - HKLM\..\Run: [ntci32.exe] C:\WINDOWS
tci32.exeO4 - HKLM\..\Run: [sysrp.exe] C:\WINDOWS\system32\sysrp.exeO4 - HKLM\..\Run: [crwq32.exe] C:\WINDOWS\system32\crwq32.exeO4 - HKLM\..\Run: [ntlx.exe] C:\WINDOWS\system32
tlx.exeO4 - HKLM\..\Run: [ipqw32.exe] C:\WINDOWS\ipqw32.exeO4 - HKLM\..\Run: [sdkhj.exe] C:\WINDOWS\sdkhj.exeO4 - HKLM\..\Run: [addqq.exe] C:\WINDOWS\system32\addqq.exeO4 - HKLM\..\Run: [crkf32.exe] C:\WINDOWS\system32\crkf32.exeO4 - HKLM\..\Run: [d3yo.exe] C:\WINDOWS\system32\d3yo.exeO4 - HKLM\..\Run: [apipt32.exe] C:\WINDOWS\system32\apipt32.exeO4 - HKLM\..\Run: [netke32.exe] C:\WINDOWS
etke32.exeO4 - HKLM\..\Run: [d3ut.exe] C:\WINDOWS\d3ut.exeO4 - HKLM\..\Run: [winqs32.exe] C:\WINDOWS\system32\winqs32.exeO4 - HKLM\..\Run: [netfw32.exe] C:\WINDOWS\system32
etfw32.exeO4 - HKLM\..\Run: [ipcs32.exe] C:\WINDOWS\system32\ipcs32.exeO4 - HKLM\..\Run: [sdkto32.exe] C:\WINDOWS\system32\sdkto32.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [d3ht.exe] C:\WINDOWS\system32\d3ht.exeO4 - HKLM\..\Run: [crip32.exe] C:\WINDOWS\system32\crip32.exeO4 - HKLM\..\Run: [sysgt.exe] C:\WINDOWS\sysgt.exeO4 - HKLM\..\Run: [addht32.exe] C:\WINDOWS\addht32.exeO4 - HKLM\..\Run: [sysgz.exe] C:\WINDOWS\sysgz.exeO4 - HKLM\..\Run: [iebr32.exe] C:\WINDOWS\system32\iebr32.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [d3gr.exe] C:\WINDOWS\d3gr.exeO4 - HKLM\..\Run: [ntro.exe] C:\WINDOWS\system32
tro.exeO4 - HKLM\..\Run: [msjg.exe] C:\WINDOWS\system32\msjg.exeO4 - HKLM\..\Run: [nthl.exe] C:\WINDOWS
thl.exeO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: RFScheduler.lnk = C:\Program Files\Radio Fr Solo\RFScheduler.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{D25A4B13-12B1-4B98-8BDA-2C4DD1E84827}: NameServer = 80.118.196.36 80.118.192.100O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXEO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: rlyanhzzcngn (ijncsaps6) - Unknown owner - C:\WINDOWS\System32\kqbljfyx6.exe (file missing)O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

vybz kartel · Answer

voici le rapportLogfile of HijackThis v1.99.1Scan saved at 20:06:54, on 15/01/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\windows\system\hpsysdrv.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\HP\KBD\KBD.EXEC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Propriétaire\Mes documents\Mes téléchargements\HijackThis(3).exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\vwtkc.dll/sp.html#12047R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://fr.search.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: Class - {03A25C5E-2285-A73A-47BC-3F31BD618A3B} - C:\WINDOWS
tjn32.dllO2 - BHO: Class - {0402ED77-6A3E-935E-AC06-95ADD3F1EC13} - C:\WINDOWS\appuf32.dllO2 - BHO: Class - {05F3C50C-D53F-D6BC-9065-2ABB3092A8D0} - C:\WINDOWS\ipqt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: Class - {083BB3F1-97E9-86D9-D6D7-D82343AADC7D} - C:\WINDOWS\system32\sdksi32.dllO2 - BHO: Class - {09A44D23-36D4-1C12-AD2A-E655F1C400AD} - C:\WINDOWS\javako32.dllO2 - BHO: Class - {0B4CB86F-D21A-B1C2-381D-61FA9B55F603} - C:\WINDOWS\d3lu.dll (file missing)O2 - BHO: Class - {0E8BFA5B-11A5-4B4E-7596-7118D059ECE8} - C:\WINDOWS\system32
tyu.dllO2 - BHO: Class - {1960401C-1EDC-C453-499B-B9D8506F210E} - C:\WINDOWS\system32\iecc.dll (file missing)O2 - BHO: Class - {1C366C9F-DCEA-5233-2D82-F45056550ACB} - C:\WINDOWS\apptu32.dllO2 - BHO: Class - {1E0A9905-147C-8EE6-A30E-79339560CB79} - C:\WINDOWS\system32\ipla.dllO2 - BHO: Class - {1F49B46E-A0DA-CDF6-D913-1FAB1FF1A5FC} - C:\WINDOWS\system32\appop32.dll (file missing)O2 - BHO: Class - {22FC434A-3E8C-40D7-EB9E-4324CBFEC077} - C:\WINDOWS\system32\mfckj.dllO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: Class - {2566FCEB-BCBE-B30A-35B9-518DEE38C367} - C:\WINDOWS\system32\winaw.dllO2 - BHO: Class - {27B5521F-00B6-1C06-5D69-90882615E7D8} - C:\WINDOWS\sysxl.dllO2 - BHO: Class - {27D7BC22-F101-E351-8F6E-1B9CE9ECDD9C} - C:\WINDOWS\cryb32.dllO2 - BHO: Class - {28FF0DAA-6EDD-259A-83C4-EADDF15D72AD} - C:\WINDOWS\system32\mfcbl32.dllO2 - BHO: Class - {30880E43-5DFC-86A8-0E33-7D8211669941} - C:\WINDOWS\system32\appzo32.dllO2 - BHO: Class - {32A6CEC2-152D-9C47-1D16-97AAFF45661E} - C:\WINDOWS\msej32.dll (file missing)O2 - BHO: Class - {36C7DCF1-3D4C-D77C-04EE-55F46BFD30E0} - C:\WINDOWS\system32\crxq.dllO2 - BHO: Class - {3741D035-47CF-B4A5-B941-489B37424B4D} - C:\WINDOWS\system32\javacq.dllO2 - BHO: Class - {3F90B85D-C6A6-81CA-37D8-E42540D53A0B} - C:\WINDOWS\system32\ieuw32.dllO2 - BHO: Class - {408A38D3-8F90-3682-07E0-801204F76847} - C:\WINDOWS\ieui32.dllO2 - BHO: Class - {41D261AF-74ED-449F-EEC7-1D4FC649FA14} - C:\WINDOWS\appmu32.dllO2 - BHO: Class - {434697B1-B0A0-8A25-A2B0-15519E338038} - C:\WINDOWS\system32\sdkvc.dll (file missing)O2 - BHO: Class - {4543DD78-8742-3F79-661D-E8EB58800867} - C:\WINDOWS\system32\iems.dllO2 - BHO: Class - {4B1D6F47-484B-7F32-116B-897A986991B7} - C:\WINDOWS\system32\sysmy32.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Class - {5378A270-97C0-9850-0932-5B4BF750E05A} - C:\WINDOWS\system32\appng32.dllO2 - BHO: Class - {54595623-DD6E-DF6D-5647-D57D6B2CFEEB} - C:\WINDOWS\system32\sysur.dllO2 - BHO: Class - {55FD2817-BB02-E38C-F634-F5698484A5E6} - C:\WINDOWS\system32\d3wx.dllO2 - BHO: Class - {59658A25-7B74-EDCF-F455-A75FF0E4C8BE} - C:\WINDOWS\system32\crzd32.dllO2 - BHO: Class - {6259AAB6-979D-83C5-B2DB-ABC95EA1C8B2} - C:\WINDOWS\system32\msny32.dllO2 - BHO: Class - {63386818-1A9E-7A7D-61CD-7B656BEB6F4B} - C:\WINDOWS\ielq32.dllO2 - BHO: Class - {690868EA-08A6-AFDD-6D4E-3F0D7A94CB53} - C:\WINDOWS\iexv32.dllO2 - BHO: Class - {6F75ABBF-6008-EDA7-8453-2ADF8601ADFA} - C:\WINDOWS\msmv32.dllO2 - BHO: Class - {6F9D6D55-CAC3-5935-5958-2D75D127FF8E} - C:\WINDOWS\system32\sdkvc32.dllO2 - BHO: Class - {750FF9F1-9D7A-E337-A964-FD57D4914B02} - C:\WINDOWS\winvm32.dllO2 - BHO: Class - {75DF86D0-50B4-B58E-3F0F-546011A4DCDD} - C:\WINDOWS\ield.dllO2 - BHO: Class - {76271389-5737-F3F1-6A0D-D026C3733A3C} - C:\WINDOWS\mfcyd.dllO2 - BHO: Class - {792A8CA5-55BB-B3E8-EADD-488F2058805F} - C:\WINDOWS\system32\ipdk.dll (file missing)O2 - BHO: Class - {7E10E215-8015-F27A-7FF8-C0C3C681C7D8} - C:\WINDOWS\system32
etjv.dllO2 - BHO: Class - {7E4E0ADA-4189-6454-35CE-5091BC0DCDBA} - C:\WINDOWS\atlkl.dllO2 - BHO: Class - {80127E37-4EFD-E63C-C706-18F6F66CDC8D} - C:\WINDOWS\d3hj32.dllO2 - BHO: Class - {80F9AF81-3EAC-2434-C117-26B9A88BCE7F} - C:\WINDOWS\msce.dll (file missing)O2 - BHO: Class - {83EF55DB-6787-8204-BD91-03202E65FD32} - C:\WINDOWS\addnf32.dllO2 - BHO: Class - {853A1B1F-537E-D540-D6C6-ED90C207B848} - C:\WINDOWS\system32\winen32.dllO2 - BHO: Class - {86A6E2E0-A3BB-429F-4259-DEDA727BB219} - C:\WINDOWS\iejz32.dllO2 - BHO: Class - {86CC8D04-6990-3461-CA24-AF770BA94E40} - C:\WINDOWS\mfcmv32.dllO2 - BHO: Class - {88C6205F-2630-39C2-A423-8DF6C5DBE0B8} - C:\WINDOWS\system32\mfcrd32.dllO2 - BHO: Class - {8B9B4C67-045B-2559-03A4-FD879036D7DA} - C:\WINDOWS\system32\atlzo.dllO2 - BHO: Class - {8D4CF4DC-B05B-899F-99D4-09E2C70DA0DF} - C:\WINDOWS\system32\winab.dllO2 - BHO: Class - {8DD0E093-F203-A226-34B6-803644787EFF} - C:\WINDOWS\addzj32.dllO2 - BHO: Class - {9131706F-D034-5F4E-62F6-C060F737064C} - C:\WINDOWS\ipye32.dllO2 - BHO: Class - {9283B90B-6824-9F8C-CDEE-A26195750B35} - C:\WINDOWS\system32\wings.dllO2 - BHO: Class - {983C1758-DCAA-83B6-A461-FBD6D56D852E} - C:\WINDOWS\atlph.dllO2 - BHO: Class - {9AF6A182-27A8-DF20-ED12-C90589BF74CB} - C:\WINDOWS\system32\apphe.dllO2 - BHO: Class - {9B52DB7D-8D7B-4564-958F-49D99A6430FB} - C:\WINDOWS\appwh32.dllO2 - BHO: Class - {9D3007CE-B2C2-20A0-77AB-340FC4EDB2B3} - C:\WINDOWS\addsq.dllO2 - BHO: Class - {9D820633-435E-D9B8-9FD4-3C50B83EB541} - C:\WINDOWS\system32\winvx.dllO2 - BHO: Class - {A012ED6C-3ADD-6CAA-B9D6-A652CB9CDECF} - C:\WINDOWS\system32\msvw32.dllO2 - BHO: Class - {A3A1D3DD-CE5C-50A8-BB1C-D6D51301175C} - C:\WINDOWS\apioz32.dllO2 - BHO: Class - {A3AE7E28-5A26-913E-3E28-ABCC687B6BC9} - C:\WINDOWS\system32\apilu.dllO2 - BHO: Class - {A3C660FF-DEAB-ECF0-02FE-C8DC9874C708} - C:\WINDOWS\appdi32.dllO2 - BHO: Class - {AE963F47-BC89-BD0D-3AE9-19865D9B1BB7} - C:\WINDOWS\system32
trf.dllO2 - BHO: Class - {AEADE211-1738-D170-94D4-88BB276E7B57} - C:\WINDOWS\d3ti32.dllO2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - C:\WINDOWS
tim.dllO2 - BHO: Class - {B32BF9AC-3C15-58D5-A2CD-D066EB196265} - C:\WINDOWS\iedk.dllO2 - BHO: Class - {B74FC677-1BFA-DEF5-DEB7-DBD24D544D78} - C:\WINDOWS\apisf.dllO2 - BHO: Class - {B75BCD02-ABA7-9B5A-4478-A8AD97904CAC} - C:\WINDOWS\addnh32.dllO2 - BHO: Class - {B81896EA-E0AA-92AA-BF67-14B1C8C5A7E4} - C:\WINDOWS\system32
thl.dllO2 - BHO: Class - {BABB5662-6B08-7DB6-0D07-2CC2D56B1F13} - C:\WINDOWS\apiqx32.dllO2 - BHO: Class - {BB1AF287-6200-1830-5874-562036D6FA6B} - C:\WINDOWS\system32\apipn32.dllO2 - BHO: Class - {BB27E660-AE94-F3AC-F602-A183F392ABD7} - C:\WINDOWS\system32\msrt.dllO2 - BHO: Class - {C09D9D44-16EF-CE8C-6787-CE76B594A733} - C:\WINDOWS\apicg32.dllO2 - BHO: Class - {C518F322-8AF1-F0EE-3F82-E57C1BF73146} - C:\WINDOWS\atlgg.dllO2 - BHO: Class - {CA14850C-FA9C-DE0D-27DA-8BD9DA485F0B} - C:\WINDOWS
tvf32.dllO2 - BHO: Class - {CB798A46-957D-1AE4-8F9E-F766D6E85F00} - C:\WINDOWS\addkt32.dll (file missing)O2 - BHO: Class - {CC22FEF2-3F13-D4D7-35C2-C66D30943149} - C:\WINDOWS\appoi32.dllO2 - BHO: Class - {CE40FC76-6F48-E648-5F16-33EAEF4DA9CF} - C:\WINDOWS\system32\javagq.dllO2 - BHO: Class - {CFFA8321-97AC-D558-B2CD-D278699292B1} - C:\WINDOWS\system32\appiq32.dllO2 - BHO: Class - {D23166CF-6072-71EA-2EDB-6FE0AE95942D} - C:\WINDOWS\javapo.dllO2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file)O2 - BHO: Class - {DB29A986-131A-F212-4C89-18F9E42C205A} - C:\WINDOWS\msjz.dll (file missing)O2 - BHO: Class - {DB58988A-7E72-E50C-B2C0-29E44B377388} - C:\WINDOWS\sdkob.dll (file missing)O2 - BHO: Class - {DF77D786-7899-DE17-AC07-FBA8FA5E3372} - C:\WINDOWS
etbz.dllO2 - BHO: Class - {E4630875-2D99-D343-395A-FB070852B36D} - C:\WINDOWS\system32\mfcpv.dllO2 - BHO: Class - {E86D22B7-C656-24F6-633A-03A13BAB127D} - C:\WINDOWS\system32
etpd.dllO2 - BHO: Class - {EB79404D-AE0E-86BB-F3E5-F15C2D55C061} - C:\WINDOWS\atlkx.dllO2 - BHO: Class - {EC52F9A9-BFCA-611C-0CF2-D33A007A66FA} - C:\WINDOWS\system32\ieis.dllO2 - BHO: Class - {EF56697C-5109-5395-6FE2-E92AAFF48176} - C:\WINDOWS\mfcwk32.dllO2 - BHO: Class - {F3E402C1-7CDD-A508-5E40-1F3CA6FC89B1} - C:\WINDOWS\ieeo.dll (file missing)O2 - BHO: Class - {F5FE0B4F-6539-4884-A16A-13AF58029AB1} - C:\WINDOWS\system32\sdkkl32.dllO2 - BHO: Class - {F7BDA65D-1EEA-FBCD-9F9B-79556234850C} - C:\WINDOWS\system32\apiou.dllO2 - BHO: Class - {F820586B-B64E-CA18-010C-8EE429E06F22} - C:\WINDOWS\mseu.dllO2 - BHO: Class - {FA0C2FA2-9533-02AC-2257-2C0FBDC0D6F5} - C:\WINDOWS\system32\winzk32.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O2 - BHO: Class - {FE91B9D4-3653-458A-EDE1-263E7454EF29} - C:\WINDOWS
etqf32.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dllO3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program Files\Accoona\atoolbar.dll (file missing)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [atlmv32.exe] C:\WINDOWS\system32\atlmv32.exeO4 - HKLM\..\Run: [msma32.exe] C:\WINDOWS\msma32.exeO4 - HKLM\..\Run: [mfcbi.exe] C:\WINDOWS\mfcbi.exeO4 - HKLM\..\Run: [iexo.exe] C:\WINDOWS\system32\iexo.exeO4 - HKLM\..\Run: [mfcui32.exe] C:\WINDOWS\system32\mfcui32.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [winqh32.exe] C:\WINDOWS\system32\winqh32.exeO4 - HKLM\..\Run: [ipay32.exe] C:\WINDOWS\ipay32.exeO4 - HKLM\..\Run: [ntwq32.exe] C:\WINDOWS\system32
twq32.exeO4 - HKLM\..\Run: [appek.exe] C:\WINDOWS\appek.exeO4 - HKLM\..\Run: [sysck32.exe] C:\WINDOWS\system32\sysck32.exeO4 - HKLM\..\Run: [crkd32.exe] C:\WINDOWS\system32\crkd32.exeO4 - HKLM\..\Run: [netas32.exe] C:\WINDOWS
etas32.exeO4 - HKLM\..\Run: [ntfw32.exe] C:\WINDOWS
tfw32.exeO4 - HKLM\..\Run: [addei.exe] C:\WINDOWS\system32\addei.exeO4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"O4 - HKLM\..\Run: [atlal.exe] C:\WINDOWS\system32\atlal.exeO4 - HKLM\..\Run: [crzg32.exe] C:\WINDOWS\system32\crzg32.exeO4 - HKLM\..\Run: [netyl32.exe] C:\WINDOWS\system32
etyl32.exeO4 - HKLM\..\Run: [crgg32.exe] C:\WINDOWS\system32\crgg32.exeO4 - HKLM\..\Run: [apidm32.exe] C:\WINDOWS\apidm32.exeO4 - HKLM\..\Run: [javamx32.exe] C:\WINDOWS\javamx32.exeO4 - HKLM\..\Run: [iewi.exe] C:\WINDOWS\system32\iewi.exeO4 - HKLM\..\Run: [apidc.exe] C:\WINDOWS\system32\apidc.exeO4 - HKLM\..\Run: [d3wi.exe] C:\WINDOWS\system32\d3wi.exeO4 - HKLM\..\Run: [winjh.exe] C:\WINDOWS\winjh.exeO4 - HKLM\..\Run: [netam32.exe] C:\WINDOWS\system32
etam32.exeO4 - HKLM\..\Run: [sdkyi.exe] C:\WINDOWS\system32\sdkyi.exeO4 - HKLM\..\Run: [sysbn32.exe] C:\WINDOWS\sysbn32.exeO4 - HKLM\..\Run: [crno.exe] C:\WINDOWS\system32\crno.exeO4 - HKLM\..\Run: [HyperappelPL2003] C:\Program Files\Larousse\Petit Larousse 2004\bin\HiPL2002popup.exeO4 - HKLM\..\Run: [iplu32.exe] C:\WINDOWS\iplu32.exeO4 - HKLM\..\Run: [d3ge.exe] C:\WINDOWS\system32\d3ge.exeO4 - HKLM\..\Run: [sdksy.exe] C:\WINDOWS\sdksy.exeO4 - HKLM\..\Run: [sysft32.exe] C:\WINDOWS\system32\sysft32.exeO4 - HKLM\..\Run: [d3rf.exe] C:\WINDOWS\d3rf.exeO4 - HKLM\..\Run: [addqo.exe] C:\WINDOWS\system32\addqo.exeO4 - HKLM\..\Run: [wincg.exe] C:\WINDOWS\wincg.exeO4 - HKLM\..\Run: [ieil.exe] C:\WINDOWS\ieil.exeO4 - HKLM\..\Run: [crpe32.exe] C:\WINDOWS\system32\crpe32.exeO4 - HKLM\..\Run: [mfcbx32.exe] C:\WINDOWS\system32\mfcbx32.exeO4 - HKLM\..\Run: [atlmg32.exe] C:\WINDOWS\system32\atlmg32.exeO4 - HKLM\..\Run: [iega32.exe] C:\WINDOWS\iega32.exeO4 - HKLM\..\Run: [javaky32.exe] C:\WINDOWS\javaky32.exeO4 - HKLM\..\Run: [ieip32.exe] C:\WINDOWS\system32\ieip32.exeO4 - HKLM\..\Run: [javaqy32.exe] C:\WINDOWS\javaqy32.exeO4 - HKLM\..\Run: [ntci32.exe] C:\WINDOWS
tci32.exeO4 - HKLM\..\Run: [sysrp.exe] C:\WINDOWS\system32\sysrp.exeO4 - HKLM\..\Run: [crwq32.exe] C:\WINDOWS\system32\crwq32.exeO4 - HKLM\..\Run: [ntlx.exe] C:\WINDOWS\system32
tlx.exeO4 - HKLM\..\Run: [ipqw32.exe] C:\WINDOWS\ipqw32.exeO4 - HKLM\..\Run: [sdkhj.exe] C:\WINDOWS\sdkhj.exeO4 - HKLM\..\Run: [addqq.exe] C:\WINDOWS\system32\addqq.exeO4 - HKLM\..\Run: [crkf32.exe] C:\WINDOWS\system32\crkf32.exeO4 - HKLM\..\Run: [d3yo.exe] C:\WINDOWS\system32\d3yo.exeO4 - HKLM\..\Run: [apipt32.exe] C:\WINDOWS\system32\apipt32.exeO4 - HKLM\..\Run: [netke32.exe] C:\WINDOWS
etke32.exeO4 - HKLM\..\Run: [d3ut.exe] C:\WINDOWS\d3ut.exeO4 - HKLM\..\Run: [winqs32.exe] C:\WINDOWS\system32\winqs32.exeO4 - HKLM\..\Run: [netfw32.exe] C:\WINDOWS\system32
etfw32.exeO4 - HKLM\..\Run: [ipcs32.exe] C:\WINDOWS\system32\ipcs32.exeO4 - HKLM\..\Run: [sdkto32.exe] C:\WINDOWS\system32\sdkto32.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [d3ht.exe] C:\WINDOWS\system32\d3ht.exeO4 - HKLM\..\Run: [crip32.exe] C:\WINDOWS\system32\crip32.exeO4 - HKLM\..\Run: [sysgt.exe] C:\WINDOWS\sysgt.exeO4 - HKLM\..\Run: [addht32.exe] C:\WINDOWS\addht32.exeO4 - HKLM\..\Run: [sysgz.exe] C:\WINDOWS\sysgz.exeO4 - HKLM\..\Run: [iebr32.exe] C:\WINDOWS\system32\iebr32.exeO4 - HKLM\..\Run: [d3gr.exe] C:\WINDOWS\d3gr.exeO4 - HKLM\..\Run: [ntro.exe] C:\WINDOWS\system32
tro.exeO4 - HKLM\..\Run: [msjg.exe] C:\WINDOWS\system32\msjg.exeO4 - HKLM\..\Run: [nthl.exe] C:\WINDOWS
thl.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [addyu.exe] C:\WINDOWS\system32\addyu.exeO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: RFScheduler.lnk = C:\Program Files\Radio Fr Solo\RFScheduler.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{D25A4B13-12B1-4B98-8BDA-2C4DD1E84827}: NameServer = 80.118.196.42 80.118.192.112O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: rlyanhzzcngn (ijncsaps6) - Unknown owner - C:\WINDOWS\System32\kqbljfyx6.exe (file missing)O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

ok essay avec cette version 6.0 d'aboutbuster

http://www.besttechie.net/tools/AboutBuster.zip

redemare en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume)

dezipe aboutbuster double clike sur l'aplication aboutbuster et choisi "begin removal"

apres la fin du scan un rapport va etre crée copie le contenu du rapport et cole le tout ici suivi d'un rapport hijack

@++++++++

Utilisateur anonyme · Answer

salut jessfixe les les 02 et 04

Utilisateur anonyme · Answer

salut regis . oui mais y'en a bcp je prefere que aboutbuster les supprime pour lui facilité la tache :) sinon il va galéré a les supprimer manuelement@++++++++++

vybz kartel · Answer

me revoila après le mode sans echec.

Dans le mode sans echec, lorsque je lance aboutebouster, il commence le test et peu de temps après, il me dit: "erreur d'execution 6, depacement de capacite" et il arrete tous

Utilisateur anonyme · Answer

resalut telecharge the killbox tu l'utilisera apres http://pageperso.aol.fr/Balltrap34/KillBox.exe ferme tout les fenetre internet explorer et programe/lance hijack/ coche ces lignes ensuite clike sur fixed checkedR3 - Default URLSearchHook is missing O2 - BHO: Class - {03A25C5E-2285-A73A-47BC-3F31BD618A3B} - C:\WINDOWS
tjn32.dll O2 - BHO: Class - {0402ED77-6A3E-935E-AC06-95ADD3F1EC13} - C:\WINDOWS\appuf32.dll O2 - BHO: Class - {05F3C50C-D53F-D6BC-9065-2ABB3092A8D0} - C:\WINDOWS\ipqt.dll O2 - BHO: Class - {083BB3F1-97E9-86D9-D6D7-D82343AADC7D} - C:\WINDOWS\system32\sdksi32.dll O2 - BHO: Class - {09A44D23-36D4-1C12-AD2A-E655F1C400AD} - C:\WINDOWS\javako32.dll O2 - BHO: Class - {0B4CB86F-D21A-B1C2-381D-61FA9B55F603} - C:\WINDOWS\d3lu.dll O2 - BHO: Class - {0E8BFA5B-11A5-4B4E-7596-7118D059ECE8} - C:\WINDOWS\system32
tyu.dll O2 - BHO: Class - {1960401C-1EDC-C453-499B-B9D8506F210E} - C:\WINDOWS\system32\iecc.dll O2 - BHO: Class - {1C366C9F-DCEA-5233-2D82-F45056550ACB} - C:\WINDOWS\apptu32.dll O2 - BHO: Class - {1E0A9905-147C-8EE6-A30E-79339560CB79} - C:\WINDOWS\system32\ipla.dll O2 - BHO: Class - {1F49B46E-A0DA-CDF6-D913-1FAB1FF1A5FC} - C:\WINDOWS\system32\appop32.dll O2 - BHO: Class - {22FC434A-3E8C-40D7-EB9E-4324CBFEC077} - C:\WINDOWS\system32\mfckj.dll O2 - BHO: Class - {2566FCEB-BCBE-B30A-35B9-518DEE38C367} - C:\WINDOWS\system32\winaw.dll O2 - BHO: Class - {27B5521F-00B6-1C06-5D69-90882615E7D8} - C:\WINDOWS\sysxl.dll O2 - BHO: Class - {27D7BC22-F101-E351-8F6E-1B9CE9ECDD9C} - C:\WINDOWS\cryb32.dll O2 - BHO: Class - {28FF0DAA-6EDD-259A-83C4-EADDF15D72AD} - C:\WINDOWS\system32\mfcbl32.dll O2 - BHO: Class - {30880E43-5DFC-86A8-0E33-7D8211669941} - C:\WINDOWS\system32\appzo32.dll O2 - BHO: Class - {32A6CEC2-152D-9C47-1D16-97AAFF45661E} - C:\WINDOWS\msej32.dll O2 - BHO: Class - {36C7DCF1-3D4C-D77C-04EE-55F46BFD30E0} - C:\WINDOWS\system32\crxq.dll O2 - BHO: Class - {3741D035-47CF-B4A5-B941-489B37424B4D} - C:\WINDOWS\system32\javacq.dll O2 - BHO: Class - {3F90B85D-C6A6-81CA-37D8-E42540D53A0B} - C:\WINDOWS\system32\ieuw32.dll O2 - BHO: Class - {408A38D3-8F90-3682-07E0-801204F76847} - C:\WINDOWS\ieui32.dll O2 - BHO: Class - {41D261AF-74ED-449F-EEC7-1D4FC649FA14} - C:\WINDOWS\appmu32.dll O2 - BHO: Class - {434697B1-B0A0-8A25-A2B0-15519E338038} - C:\WINDOWS\system32\sdkvc.dll O2 - BHO: Class - {4543DD78-8742-3F79-661D-E8EB58800867} - C:\WINDOWS\system32\iems.dll O2 - BHO: Class - {4B1D6F47-484B-7F32-116B-897A986991B7} - C:\WINDOWS\system32\sysmy32.dll O2 - BHO: Class - {5378A270-97C0-9850-0932-5B4BF750E05A} - C:\WINDOWS\system32\appng32.dll O2 - BHO: Class - {54595623-DD6E-DF6D-5647-D57D6B2CFEEB} - C:\WINDOWS\system32\sysur.dll O2 - BHO: Class - {55FD2817-BB02-E38C-F634-F5698484A5E6} - C:\WINDOWS\system32\d3wx.dll O2 - BHO: Class - {59658A25-7B74-EDCF-F455-A75FF0E4C8BE} - C:\WINDOWS\system32\crzd32.dll O2 - BHO: Class - {6259AAB6-979D-83C5-B2DB-ABC95EA1C8B2} - C:\WINDOWS\system32\msny32.dll O2 - BHO: Class - {63386818-1A9E-7A7D-61CD-7B656BEB6F4B} - C:\WINDOWS\ielq32.dll O2 - BHO: Class - {690868EA-08A6-AFDD-6D4E-3F0D7A94CB53} - C:\WINDOWS\iexv32.dll O2 - BHO: Class - {6F75ABBF-6008-EDA7-8453-2ADF8601ADFA} - C:\WINDOWS\msmv32.dll O2 - BHO: Class - {6F9D6D55-CAC3-5935-5958-2D75D127FF8E} - C:\WINDOWS\system32\sdkvc32.dll O2 - BHO: Class - {750FF9F1-9D7A-E337-A964-FD57D4914B02} - C:\WINDOWS\winvm32.dll O2 - BHO: Class - {75DF86D0-50B4-B58E-3F0F-546011A4DCDD} - C:\WINDOWS\ield.dll O2 - BHO: Class - {76271389-5737-F3F1-6A0D-D026C3733A3C} - C:\WINDOWS\mfcyd.dll O2 - BHO: Class - {792A8CA5-55BB-B3E8-EADD-488F2058805F} - C:\WINDOWS\system32\ipdk.dll O2 - BHO: Class - {7E10E215-8015-F27A-7FF8-C0C3C681C7D8} - C:\WINDOWS\system32
etjv.dll O2 - BHO: Class - {7E4E0ADA-4189-6454-35CE-5091BC0DCDBA} - C:\WINDOWS\atlkl.dll O2 - BHO: Class - {80127E37-4EFD-E63C-C706-18F6F66CDC8D} - C:\WINDOWS\d3hj32.dll O2 - BHO: Class - {80F9AF81-3EAC-2434-C117-26B9A88BCE7F} - C:\WINDOWS\msce.dll O2 - BHO: Class - {83EF55DB-6787-8204-BD91-03202E65FD32} - C:\WINDOWS\addnf32.dll O2 - BHO: Class - {853A1B1F-537E-D540-D6C6-ED90C207B848} - C:\WINDOWS\system32\winen32.dll O2 - BHO: Class - {86A6E2E0-A3BB-429F-4259-DEDA727BB219} - C:\WINDOWS\iejz32.dll O2 - BHO: Class - {86CC8D04-6990-3461-CA24-AF770BA94E40} - C:\WINDOWS\mfcmv32.dll O2 - BHO: Class - {88C6205F-2630-39C2-A423-8DF6C5DBE0B8} - C:\WINDOWS\system32\mfcrd32.dll O2 - BHO: Class - {8B9B4C67-045B-2559-03A4-FD879036D7DA} - C:\WINDOWS\system32\atlzo.dll O2 - BHO: Class - {8D4CF4DC-B05B-899F-99D4-09E2C70DA0DF} - C:\WINDOWS\system32\winab.dll O2 - BHO: Class - {8DD0E093-F203-A226-34B6-803644787EFF} - C:\WINDOWS\addzj32.dll O2 - BHO: Class - {9131706F-D034-5F4E-62F6-C060F737064C} - C:\WINDOWS\ipye32.dll O2 - BHO: Class - {9283B90B-6824-9F8C-CDEE-A26195750B35} - C:\WINDOWS\system32\wings.dll O2 - BHO: Class - {983C1758-DCAA-83B6-A461-FBD6D56D852E} - C:\WINDOWS\atlph.dll O2 - BHO: Class - {9AF6A182-27A8-DF20-ED12-C90589BF74CB} - C:\WINDOWS\system32\apphe.dll O2 - BHO: Class - {9B52DB7D-8D7B-4564-958F-49D99A6430FB} - C:\WINDOWS\appwh32.dll O2 - BHO: Class - {9D3007CE-B2C2-20A0-77AB-340FC4EDB2B3} - C:\WINDOWS\addsq.dll O2 - BHO: Class - {9D820633-435E-D9B8-9FD4-3C50B83EB541} - C:\WINDOWS\system32\winvx.dll O2 - BHO: Class - {A012ED6C-3ADD-6CAA-B9D6-A652CB9CDECF} - C:\WINDOWS\system32\msvw32.dll O2 - BHO: Class - {A3A1D3DD-CE5C-50A8-BB1C-D6D51301175C} - C:\WINDOWS\apioz32.dll O2 - BHO: Class - {A3AE7E28-5A26-913E-3E28-ABCC687B6BC9} - C:\WINDOWS\system32\apilu.dll O2 - BHO: Class - {A3C660FF-DEAB-ECF0-02FE-C8DC9874C708} - C:\WINDOWS\appdi32.dll O2 - BHO: Class - {AE963F47-BC89-BD0D-3AE9-19865D9B1BB7} - C:\WINDOWS\system32
trf.dll O2 - BHO: Class - {AEADE211-1738-D170-94D4-88BB276E7B57} - C:\WINDOWS\d3ti32.dll O2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - C:\WINDOWS
tim.dll O2 - BHO: Class - {B32BF9AC-3C15-58D5-A2CD-D066EB196265} - C:\WINDOWS\iedk.dll O2 - BHO: Class - {B74FC677-1BFA-DEF5-DEB7-DBD24D544D78} - C:\WINDOWS\apisf.dll O2 - BHO: Class - {B75BCD02-ABA7-9B5A-4478-A8AD97904CAC} - C:\WINDOWS\addnh32.dll O2 - BHO: Class - {B81896EA-E0AA-92AA-BF67-14B1C8C5A7E4} - C:\WINDOWS\system32
thl.dll O2 - BHO: Class - {BABB5662-6B08-7DB6-0D07-2CC2D56B1F13} - C:\WINDOWS\apiqx32.dll O2 - BHO: Class - {BB1AF287-6200-1830-5874-562036D6FA6B} - C:\WINDOWS\system32\apipn32.dll O2 - BHO: Class - {BB27E660-AE94-F3AC-F602-A183F392ABD7} - C:\WINDOWS\system32\msrt.dll O2 - BHO: Class - {C09D9D44-16EF-CE8C-6787-CE76B594A733} - C:\WINDOWS\apicg32.dll O2 - BHO: Class - {C518F322-8AF1-F0EE-3F82-E57C1BF73146} - C:\WINDOWS\atlgg.dll O2 - BHO: Class - {CA14850C-FA9C-DE0D-27DA-8BD9DA485F0B} - C:\WINDOWS
tvf32.dll O2 - BHO: Class - {CB798A46-957D-1AE4-8F9E-F766D6E85F00} - C:\WINDOWS\addkt32.dll O2 - BHO: Class - {CC22FEF2-3F13-D4D7-35C2-C66D30943149} - C:\WINDOWS\appoi32.dll O2 - BHO: Class - {CE40FC76-6F48-E648-5F16-33EAEF4DA9CF} - C:\WINDOWS\system32\javagq.dll O2 - BHO: Class - {CFFA8321-97AC-D558-B2CD-D278699292B1} - C:\WINDOWS\system32\appiq32.dll O2 - BHO: Class - {D23166CF-6072-71EA-2EDB-6FE0AE95942D} - C:\WINDOWS\javapo.dll O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - (no file) O2 - BHO: Class - {DB29A986-131A-F212-4C89-18F9E42C205A} - C:\WINDOWS\msjz.dll O2 - BHO: Class - {DB58988A-7E72-E50C-B2C0-29E44B377388} - C:\WINDOWS\sdkob.dll O2 - BHO: Class - {DF77D786-7899-DE17-AC07-FBA8FA5E3372} - C:\WINDOWS
etbz.dll O2 - BHO: Class - {E4630875-2D99-D343-395A-FB070852B36D} - C:\WINDOWS\system32\mfcpv.dll O2 - BHO: Class - {E86D22B7-C656-24F6-633A-03A13BAB127D} - C:\WINDOWS\system32
etpd.dll O2 - BHO: Class - {EB79404D-AE0E-86BB-F3E5-F15C2D55C061} - C:\WINDOWS\atlkx.dll O2 - BHO: Class - {EC52F9A9-BFCA-611C-0CF2-D33A007A66FA} - C:\WINDOWS\system32\ieis.dll O2 - BHO: Class - {EF56697C-5109-5395-6FE2-E92AAFF48176} - C:\WINDOWS\mfcwk32.dll O2 - BHO: Class - {F3E402C1-7CDD-A508-5E40-1F3CA6FC89B1} - C:\WINDOWS\ieeo.dll O2 - BHO: Class - {F5FE0B4F-6539-4884-A16A-13AF58029AB1} - C:\WINDOWS\system32\sdkkl32.dll O2 - BHO: Class - {F7BDA65D-1EEA-FBCD-9F9B-79556234850C} - C:\WINDOWS\system32\apiou.dll O2 - BHO: Class - {F820586B-B64E-CA18-010C-8EE429E06F22} - C:\WINDOWS\mseu.dll O2 - BHO: Class - {FA0C2FA2-9533-02AC-2257-2C0FBDC0D6F5} - C:\WINDOWS\system32\winzk32.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O2 - BHO: Class - {FE91B9D4-3653-458A-EDE1-263E7454EF29} - C:\WINDOWS
etqf32.dll O3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program Files\Accoona\atoolbar.dll (file missing) O4 - HKLM\..\Run: [atlmv32.exe] C:\WINDOWS\system32\atlmv32.exe O4 - HKLM\..\Run: [msma32.exe] C:\WINDOWS\msma32.exe O4 - HKLM\..\Run: [mfcbi.exe] C:\WINDOWS\mfcbi.exe O4 - HKLM\..\Run: [iexo.exe] C:\WINDOWS\system32\iexo.exe O4 - HKLM\..\Run: [mfcui32.exe] C:\WINDOWS\system32\mfcui32.exe O4 - HKLM\..\Run: [winqh32.exe] C:\WINDOWS\system32\winqh32.exe O4 - HKLM\..\Run: [ipay32.exe] C:\WINDOWS\ipay32.exe O4 - HKLM\..\Run: [ntwq32.exe] C:\WINDOWS\system32
twq32.exe O4 - HKLM\..\Run: [appek.exe] C:\WINDOWS\appek.exe O4 - HKLM\..\Run: [sysck32.exe] C:\WINDOWS\system32\sysck32.exe O4 - HKLM\..\Run: [crkd32.exe] C:\WINDOWS\system32\crkd32.exe O4 - HKLM\..\Run: [netas32.exe] C:\WINDOWS
etas32.exe O4 - HKLM\..\Run: [ntfw32.exe] C:\WINDOWS
tfw32.exe O4 - HKLM\..\Run: [addei.exe] C:\WINDOWS\system32\addei.exe O4 - HKLM\..\Run: [atlal.exe] C:\WINDOWS\system32\atlal.exe O4 - HKLM\..\Run: [crzg32.exe] C:\WINDOWS\system32\crzg32.exe O4 - HKLM\..\Run: [netyl32.exe] C:\WINDOWS\system32
etyl32.exe O4 - HKLM\..\Run: [crgg32.exe] C:\WINDOWS\system32\crgg32.exe O4 - HKLM\..\Run: [apidm32.exe] C:\WINDOWS\apidm32.exe O4 - HKLM\..\Run: [javamx32.exe] C:\WINDOWS\javamx32.exe O4 - HKLM\..\Run: [iewi.exe] C:\WINDOWS\system32\iewi.exe O4 - HKLM\..\Run: [apidc.exe] C:\WINDOWS\system32\apidc.exe O4 - HKLM\..\Run: [d3wi.exe] C:\WINDOWS\system32\d3wi.exe O4 - HKLM\..\Run: [winjh.exe] C:\WINDOWS\winjh.exe O4 - HKLM\..\Run: [netam32.exe] C:\WINDOWS\system32
etam32.exe O4 - HKLM\..\Run: [sdkyi.exe] C:\WINDOWS\system32\sdkyi.exe O4 - HKLM\..\Run: [sysbn32.exe] C:\WINDOWS\sysbn32.exe O4 - HKLM\..\Run: [crno.exe] C:\WINDOWS\system32\crno.exe O4 - HKLM\..\Run: [iplu32.exe] C:\WINDOWS\iplu32.exe O4 - HKLM\..\Run: [d3ge.exe] C:\WINDOWS\system32\d3ge.exe O4 - HKLM\..\Run: [sdksy.exe] C:\WINDOWS\sdksy.exe O4 - HKLM\..\Run: [sysft32.exe] C:\WINDOWS\system32\sysft32.exe O4 - HKLM\..\Run: [d3rf.exe] C:\WINDOWS\d3rf.exe O4 - HKLM\..\Run: [addqo.exe] C:\WINDOWS\system32\addqo.exe O4 - HKLM\..\Run: [wincg.exe] C:\WINDOWS\wincg.exe O4 - HKLM\..\Run: [ieil.exe] C:\WINDOWS\ieil.exe O4 - HKLM\..\Run: [crpe32.exe] C:\WINDOWS\system32\crpe32.exe O4 - HKLM\..\Run: [mfcbx32.exe] C:\WINDOWS\system32\mfcbx32.exe O4 - HKLM\..\Run: [atlmg32.exe] C:\WINDOWS\system32\atlmg32.exe O4 - HKLM\..\Run: [iega32.exe] C:\WINDOWS\iega32.exe O4 - HKLM\..\Run: [javaky32.exe] C:\WINDOWS\javaky32.exe O4 - HKLM\..\Run: [ieip32.exe] C:\WINDOWS\system32\ieip32.exe O4 - HKLM\..\Run: [javaqy32.exe] C:\WINDOWS\javaqy32.exe O4 - HKLM\..\Run: [ntci32.exe] C:\WINDOWS
tci32.exe O4 - HKLM\..\Run: [sysrp.exe] C:\WINDOWS\system32\sysrp.exe O4 - HKLM\..\Run: [crwq32.exe] C:\WINDOWS\system32\crwq32.exe O4 - HKLM\..\Run: [ntlx.exe] C:\WINDOWS\system32
tlx.exe O4 - HKLM\..\Run: [ipqw32.exe] C:\WINDOWS\ipqw32.exe O4 - HKLM\..\Run: [sdkhj.exe] C:\WINDOWS\sdkhj.exe O4 - HKLM\..\Run: [addqq.exe] C:\WINDOWS\system32\addqq.exe O4 - HKLM\..\Run: [crkf32.exe] C:\WINDOWS\system32\crkf32.exe O4 - HKLM\..\Run: [d3yo.exe] C:\WINDOWS\system32\d3yo.exe O4 - HKLM\..\Run: [apipt32.exe] C:\WINDOWS\system32\apipt32.exe O4 - HKLM\..\Run: [netke32.exe] C:\WINDOWS
etke32.exe O4 - HKLM\..\Run: [d3ut.exe] C:\WINDOWS\d3ut.exe O4 - HKLM\..\Run: [winqs32.exe] C:\WINDOWS\system32\winqs32.exe O4 - HKLM\..\Run: [netfw32.exe] C:\WINDOWS\system32
etfw32.exe O4 - HKLM\..\Run: [ipcs32.exe] C:\WINDOWS\system32\ipcs32.exe O4 - HKLM\..\Run: [sdkto32.exe] C:\WINDOWS\system32\sdkto32.exe O4 - HKLM\..\Run: [d3ht.exe] C:\WINDOWS\system32\d3ht.exe O4 - HKLM\..\Run: [crip32.exe] C:\WINDOWS\system32\crip32.exe O4 - HKLM\..\Run: [sysgt.exe] C:\WINDOWS\sysgt.exe O4 - HKLM\..\Run: [addht32.exe] C:\WINDOWS\addht32.exe O4 - HKLM\..\Run: [sysgz.exe] C:\WINDOWS\sysgz.exe O4 - HKLM\..\Run: [iebr32.exe] C:\WINDOWS\system32\iebr32.exe O4 - HKLM\..\Run: [d3gr.exe] C:\WINDOWS\d3gr.exe O4 - HKLM\..\Run: [ntro.exe] C:\WINDOWS\system32
tro.exe O4 - HKLM\..\Run: [msjg.exe] C:\WINDOWS\system32\msjg.exe O4 - HKLM\..\Run: [nthl.exe] C:\WINDOWS
thl.exe 1.redemarre en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume) 2.  affiche les fichier cacher comme ceci : clicker sur demarrer/panneau de configuration/option des dossiers/affichage Cocher afficher les dossiers cacher Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)" Puis fais «Ok» pour valider les changements. Decocher masquer les extentions dont le type est connues 3.ensuite Double clic sur killbox.exe (Pocket Killbox) - Dans "Full Path of File to Delete" copie et colle un par un C:\WINDOWS
tjn32.dll C:\WINDOWS\appuf32.dll C:\WINDOWS\ipqt.dll C:\WINDOWS\system32\sdksi32.dll C:\WINDOWS\javako32.dll C:\WINDOWS\d3lu.dll C:\WINDOWS\system32
tyu.dll C:\WINDOWS\system32\iecc.dll C:\WINDOWS\apptu32.dll C:\WINDOWS\system32\ipla.dll C:\WINDOWS\system32\appop32.dll C:\WINDOWS\system32\mfckj.dll C:\WINDOWS\system32\winaw.dll C:\WINDOWS\sysxl.dll C:\WINDOWS\cryb32.dll C:\WINDOWS\system32\mfcbl32.dll C:\WINDOWS\system32\appzo32.dll C:\WINDOWS\msej32.dll C:\WINDOWS\system32\crxq.dll C:\WINDOWS\system32\javacq.dll C:\WINDOWS\system32\ieuw32.dll C:\WINDOWS\ieui32.dll C:\WINDOWS\appmu32.dll C:\WINDOWS\system32\sdkvc.dll C:\WINDOWS\system32\iems.dll C:\WINDOWS\system32\sysmy32.dll C:\WINDOWS\system32\appng32.dll C:\WINDOWS\system32\sysur.dll C:\WINDOWS\system32\d3wx.dll C:\WINDOWS\system32\crzd32.dll C:\WINDOWS\system32\msny32.dll C:\WINDOWS\ielq32.dll C:\WINDOWS\iexv32.dll C:\WINDOWS\msmv32.dll C:\WINDOWS\system32\sdkvc32.dll C:\WINDOWS\winvm32.dll C:\WINDOWS\ield.dll C:\WINDOWS\mfcyd.dll C:\WINDOWS\system32\ipdk.dll C:\WINDOWS\system32
etjv.dll C:\WINDOWS\atlkl.dll C:\WINDOWS\d3hj32.dll C:\WINDOWS\msce.dll C:\WINDOWS\addnf32.dll C:\WINDOWS\system32\winen32.dll C:\WINDOWS\iejz32.dll C:\WINDOWS\mfcmv32.dll C:\WINDOWS\system32\mfcrd32.dll C:\WINDOWS\system32\atlzo.dll C:\WINDOWS\system32\winab.dll C:\WINDOWS\addzj32.dll C:\WINDOWS\ipye32.dll C:\WINDOWS\system32\wings.dll C:\WINDOWS\atlph.dll C:\WINDOWS\system32\apphe.dll C:\WINDOWS\appwh32.dll C:\WINDOWS\addsq.dll C:\WINDOWS\system32\winvx.dll C:\WINDOWS\system32\msvw32.dll C:\WINDOWS\apioz32.dll C:\WINDOWS\system32\apilu.dll C:\WINDOWS\appdi32.dll C:\WINDOWS\system32
trf.dll C:\WINDOWS\d3ti32.dll C:\WINDOWS
tim.dll C:\WINDOWS\iedk.dll C:\WINDOWS\apisf.dll C:\WINDOWS\addnh32.dll C:\WINDOWS\system32
thl.dll C:\WINDOWS\apiqx32.dll C:\WINDOWS\system32\apipn32.dll C:\WINDOWS\system32\msrt.dll C:\WINDOWS\apicg32.dll C:\WINDOWS\atlgg.dll C:\WINDOWS
tvf32.dll C:\WINDOWS\addkt32.dll C:\WINDOWS\appoi32.dll C:\WINDOWS\system32\javagq.dll C:\WINDOWS\system32\appiq32.dll C:\WINDOWS\javapo.dll C:\WINDOWS\msjz.dll C:\WINDOWS\sdkob.dll C:\WINDOWS
etbz.dll C:\WINDOWS\system32\mfcpv.dll C:\WINDOWS\system32
etpd.dll C:\WINDOWS\atlkx.dll C:\WINDOWS\system32\ieis.dll C:\WINDOWS\mfcwk32.dll C:\WINDOWS\ieeo.dll C:\WINDOWS\system32\sdkkl32.dll C:\WINDOWS\system32\apiou.dll C:\WINDOWS\mseu.dll C:\WINDOWS\system32\winzk32.dll C:\WINDOWS
etqf32.dll C:\WINDOWS\system32\atlmv32.exe C:\WINDOWS\msma32.exe C:\WINDOWS\mfcbi.exe C:\WINDOWS\system32\iexo.exe C:\WINDOWS\system32\mfcui32.exe C:\WINDOWS\system32\winqh32.exe C:\WINDOWS\ipay32.exe C:\WINDOWS\system32
twq32.exe C:\WINDOWS\appek.exe C:\WINDOWS\system32\sysck32.exe C:\WINDOWS\system32\crkd32.exe C:\WINDOWS
etas32.exe C:\WINDOWS
tfw32.exe C:\WINDOWS\system32\addei.exe C:\WINDOWS\system32\atlal.exe C:\WINDOWS\system32\crzg32.exe C:\WINDOWS\system32
etyl32.exe C:\WINDOWS\system32\crgg32.exe C:\WINDOWS\apidm32.exe C:\WINDOWS\javamx32.exe C:\WINDOWS\system32\iewi.exe C:\WINDOWS\system32\apidc.exe C:\WINDOWS\system32\d3wi.exe C:\WINDOWS\winjh.exe C:\WINDOWS\system32
etam32.exe C:\WINDOWS\system32\sdkyi.exe C:\WINDOWS\sysbn32.exe C:\WINDOWS\system32\crno.exe C:\WINDOWS\iplu32.exe C:\WINDOWS\system32\d3ge.exe C:\WINDOWS\sdksy.exe C:\WINDOWS\system32\sysft32.exe C:\WINDOWS\d3rf.exe C:\WINDOWS\system32\addqo.exe C:\WINDOWS\wincg.exe C:\WINDOWS\ieil.exe C:\WINDOWS\system32\crpe32.exe C:\WINDOWS\system32\mfcbx32.exe C:\WINDOWS\system32\atlmg32.exe C:\WINDOWS\iega32.exe C:\WINDOWS\javaky32.exe C:\WINDOWS\system32\ieip32.exe C:\WINDOWS\javaqy32.exe C:\WINDOWS
tci32.exe C:\WINDOWS\system32\sysrp.exe C:\WINDOWS\system32\crwq32.exe C:\WINDOWS\system32
tlx.exe C:\WINDOWS\ipqw32.exe C:\WINDOWS\sdkhj.exe C:\WINDOWS\system32\addqq.exe C:\WINDOWS\system32\crkf32.exe C:\WINDOWS\system32\d3yo.exe C:\WINDOWS\system32\apipt32.exe C:\WINDOWS
etke32.exe C:\WINDOWS\d3ut.exe C:\WINDOWS\system32\winqs32.exe C:\WINDOWS\system32
etfw32.exe C:\WINDOWS\system32\ipcs32.exe C:\WINDOWS\system32\sdkto32.exe C:\WINDOWS\system32\d3ht.exe C:\WINDOWS\system32\crip32.exe C:\WINDOWS\sysgt.exe C:\WINDOWS\addht32.exe C:\WINDOWS\sysgz.exe C:\WINDOWS\system32\iebr32.exe C:\WINDOWS\d3gr.exe C:\WINDOWS\system32
tro.exe C:\WINDOWS\system32\msjg.exe C:\WINDOWS
thl.exe - clique sur la croix rouge - une fenêtre va apparaître pour confirmation clique sur YES  masque les fichiers caché en suivant le meme chemin redemare en mode normal refait un hijack et colle le resultat ici@++++++++++

vybz kartel · Answer

resalut.je vous envois la suite.par contre lorsque je copie/coller, les elements dans "Full Path of File to Delete", je clic sur la croix rouge, ensuite sur yes et là il y a un message qui dit: "ths file does not seem to exist"Logfile of HijackThis v1.99.1Scan saved at 20:28:23, on 16/01/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\windows\system\hpsysdrv.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\HP\KBD\KBD.EXEC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Documents and Settings\Propriétaire\Bureau\HijackThis(2).exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://fr.search.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [iexo.exe] C:\WINDOWS\system32\iexo.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"O4 - HKLM\..\Run: [HyperappelPL2003] C:\Program Files\Larousse\Petit Larousse 2004\bin\HiPL2002popup.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [addyu.exe] C:\WINDOWS\system32\addyu.exeO4 - HKLM\..\Run: [javaep32.exe] C:\WINDOWS\javaep32.exeO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: RFScheduler.lnk = C:\Program Files\Radio Fr Solo\RFScheduler.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: rlyanhzzcngn (ijncsaps6) - Unknown owner - C:\WINDOWS\System32\kqbljfyx6.exe (file missing)O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

salut il faut copié les element un par un pas tous a la fois donc recommence

fix ceci avec hijack

O4 - HKLM\..\Run: [iexo.exe] C:\WINDOWS\system32\iexo.exe
O4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"
O4 - HKLM\..\Run: [addyu.exe] C:\WINDOWS\system32\addyu.exe
O4 - HKLM\..\Run: [javaep32.exe] C:\WINDOWS\javaep32.exe
O23 - Service: rlyanhzzcngn (ijncsaps6) - Unknown owner - C:\WINDOWS\System32\kqbljfyx6.exe (file missing)

ensuite en mode sans echec+ fichier caché affiché

lance the killbox

Dans "Full Path of File to Delete"

copie colle cs lignes une par une

C:\WINDOWS\system32\iexo.exe
C:\Program Files\webHancer\Programs\whSurvey.exe"
C:\WINDOWS\system32\addyu.exe
C:\WINDOWS\javaep32.exe

clique sur la croix rouge
- une fenêtre va apparaître pour confirmation clique sur YES

@++++++++++

vybz kartel · Answer

j'ai un autre problemme, je n'arrive plus a lire les musics ni les videos qu'il y a sur mon ordi.
Losrque je demarre window, il y a ce message qui apparait:

"le point d'entree de procedure makecriticalsectionglobal est introuvable dans la bibliotheque de liaisondynamique kernel32.dll"

je clic sur ok est il y a un autre message qui vient d suite et qui dit:
"le point d'entree de procedure openvxdhandle est introuvable dans la bibliotheque de liaisondynamique kernel32.dll"

et je n'arrive pas à installer directx.

y a aucun logiciel qui veut s'installer, ils me demandent tous directx mais je n'arrive pas a installer directx.

Il faut que je reinstalle tous mon ordi, mais j'ai pas le Cd de reinstallation.

Utilisateur anonyme · Answer

salut tu n'as pas installé recement un nouveau materiel ou logiciel ou  jeu video sur ton ordi??? @+++++++++

vybz kartel · Answer

si, j'ai desinstaller le jeu "need for speed underground2" pour installer "need for speed most wanted", mais loesque je veux installer ce dernier, il me demande d'installer Directx, mais je n'arrive pas à installer ce directx: à chaque fois que je commence l'installation de directx il me dit:
"une archive CAB requise pour l'installation ne peut pas etre approuvée"
et il stop tout.

vybz kartel · Answer

j'envois quand meme le scan hijackthis:Logfile of HijackThis v1.99.1Scan saved at 19:38:27, on 17/01/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\windows\system\hpsysdrv.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\HP\KBD\KBD.EXEC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Documents and Settings\Propriétaire\Mes documents\Mes téléchargements\HijackThis(2).exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://fr.search.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [HyperappelPL2003] C:\Program Files\Larousse\Petit Larousse 2004\bin\HiPL2002popup.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: RFScheduler.lnk = C:\Program Files\Radio Fr Solo\RFScheduler.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: rlyanhzzcngn (ijncsaps6) - Unknown owner - C:\WINDOWS\System32\kqbljfyx6.exe (file missing)O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

salut ton log est propre je ne vois rien de mechant. y'a just un truc je ne vois pas ton firewall active pourquoi? l'as tu desactivé?

pour ton autre probleme essay ceci :

redemarre tappotte sans arret sur F8 desque l'ordi s'allume et choisi "revenir a la derniere bonne configuration" valide par entrée et dit moi ce que ca donne

@+++++

vybz kartel · Answer

Non j'ai pas desactiver quoi que se soit.
J'utilise kerio personal firewal, je l'ai installer et il ne m'a jamais demander de l'activer ou le desactiver.
J'utilise aussi avast antivirus.

Kerio se lance tout seul au demarrage de l'ordinateur.

Par contre pour directx j'ai fait ce que tu m'as dit mais ca ne marche pas.
Je n'arrive toujours pas à l'installer.

Je pense que je vais faire une reinstallation de mon ordinateur.

Utilisateur anonyme · Answer

salut si tu as le cd de windows xp tu peu essayé une simple reparation comme ceci :

http://bvrve.club.fr/Astuces_Michel/34xp.html
http://bvrve.club.fr/Astuces_Michel/116xp.html

pour kerio c'est bizzare qu'il a laissé autant de trojans rentré dans le pc je pense qu'il doit etre mal configurer voici un lien pour apprendre a configuré

(tutorial kerio) :
http://www.pcentraide.com/index.php?showtopic=110

j'avais oublié un truc concernant the killbox
enfait les fichier que t'as supprime avec the killbox sont repertorier dans le dossier "submit" donc tu doit vidé ce dossier comme ceci

va dans post de travaill puis lecteur C: ouvre le dossier nommée "submit" supprime tout ce qu'il y'a a l'interieur et vide la corbeille

@++++

vybz kartel · Answer

salutFinalement J'ai reinstaller mon ordi.J'ai perdu quelque documents , mais pas important.Mon ordi marche très bien.J'vous remerci tous pour votre aide.a++n'oubliez pas que je suis le recordman avec 2076 fihier infectesJe vous envois quand meme un dernier hijack this.Parce que je suis pas sur pour le firewall qui est:  kerio personall firewall Logfile of HijackThis v1.99.1Scan saved at 20:57:08, on 18/01/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\windows\system\hpsysdrv.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\HP\KBD\KBD.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Multimedia Card Reader\shwicon2k.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Grisoft\AVG Free\avgcc.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Propriétaire\Mes documents\Telechargement\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr9.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr9.hpwis.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: RFScheduler.lnk = C:\Program Files\Radio Fr Solo\RFScheduler.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dllO17 - HKLM\System\CCS\Services\Tcpip\..\{62FB43A3-9056-4F2B-8C6C-AB7CCCAD6D09}: NameServer = 80.118.196.42 80.118.192.112O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

aranjuez31 · Answer

bsrtjrs infecté.....

aranjuez31 · Answer

re

.redemarre en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume)
-------
2. desactive ta restauration (pour win xp ) comme ceci :
clike droit sur post de travaille/proprietes/restauration system et la tu coche desactiver la restauration du systeme tu applique
-----
3. affiche les fichier cacher comme ceci :
clicker sur demarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher
Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"
Puis fais «Ok» pour valider les changements.
Decocher masquer les extentions dont le type est connues
------
4 - ouvre hijack et fixe ces lignes
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
-------
5 - va dans
c:\Program Files\Microsoft Money\System\mnyside.dll
et supprime : mnyside.dll
C:\WINDOWS\System32\msdxm.ocx
et supprime : msdxm.ocx

au besoin faire "rechercher" de
msdxm.ocx
mnyside.dll
Remind_XP.exe
ALCXMNTR.EXE
et supprime
-------
6 - scan avec spybot+ad-aware+ewido que tu auras au préalable téléchargé et mis à jour
vide quarantaines et sauvegardes
--------
7 - vide corbeille
-------
8 - redémarre en mode normal
------
9 - reactive la restauration et masque les fichiers caché en suivant le meme chemin que paragraphes 2 & 3
-----
10 - colle nouvel hijac

Utilisateur anonyme · Answer

salut aranjuez31  merci de prendre de relait :)  je pense que ALCXMNTR.EXE  est lié a sa carte son @+++bonne nuit :)

aranjuez31 · Answer

hello jessai lu ça sur zebulon"""ALCXMNTR.EXE c'est un spyware que realtek utilise pour espionner ses clients ..."""

Scan hijackthis

33 réponses

Discussions similaires

Newsletters