Log Hijakc

chap -  
Bonjour,

Pourrais-je obtenir un avis interessé sur ce log ?
Merci d'avance.

Logfile of HijackThis v1.99.1
Scan saved at 08:21:11, on 01/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
C:\WINDOWS\system32\HotfixQ0306270.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\MSSQL7\binn\sqlservr.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\Winamp.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Emule\emule.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Winamp\Winamp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\imapi.exe
C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yszwvkesuoilaanbdcsfiwj.com/QdWpusPSmZ3PncXRPIJvVE3xwwGvsh9HV4gAs5Oab/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe"
O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
O4 - HKLM\..\Run: [PLFFAP] C:\WINDOWS\system32\HotfixQ0306270.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Microsoft Debugger Software] random.exe
O4 - HKLM\..\Run: [Totocam] C:\PROGRA~1\ALLOCA~1\allocam.exe 1
O4 - HKLM\..\RunServices: [Microsoft Debugger Software] random.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {14325268-79E0-4D2A-89A4-FFFC6E22741E} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/179dff895d41e2ec1216/netzip/RdxIE601_fr.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://www.alloticket.com/MicroPaiement/kit/WebInstall.dll
O16 - DPF: {AA14C86B-DA22-4811-8186-BB496A299C5F} (Be Here TotalView Player ActiveX Control, Version 3.0) - http://www.spincam.com/360video/plugins/iVideoViewer3_0.cab
O16 - DPF: {D7B59209-0ED9-4986-BD4A-527BE836C6B2} - https://www.afternic.com/domains/downloadv3.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\FICHIE~1\Stardock\mcpstub.dll (file missing)
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\WinPoET Broadband Connection\WrOS.EXE

8 réponses

  1. bernie61
    re
    ok alors et n'hésites aps à revenir pour d'autres soucis a+ bon surf
    0
    1. chap
      C Fait,

      A priori + de soucis !!

      Grand Merci !
      0
      1. bernie61
        ok
        relances HT et coche FIX ces lignes
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm

        dis nous où en sont tes soucis, pour moi c'est bon
        a+
        0
        1. chap
          Voici le dernier log hj :

          Logfile of HijackThis v1.99.1
          Scan saved at 12:42:15, on 01/05/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\System32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
          C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
          C:\Program Files\ewido anti-malware\ewidoctrl.exe
          C:\Program Files\ewido anti-malware\ewidoguard.exe
          C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\MSSQL7\binn\sqlservr.exe
          C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
          C:\WINDOWS\system32\IoctlSvc.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\sstray.exe
          C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
          C:\Program Files\Logitech\iTouch\iTouch.exe
          C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\Program Files\Logitech\MouseWare\system\em_exec.exe
          C:\Program Files\Creative\Shared Files\CamTray.exe
          C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
          C:\Program Files\Winamp\winampa.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\FinePixViewer\QuickDCF.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
          C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
          C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
          C:\Program Files\Emule\emule.exe
          C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
          O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
          O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
          O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
          O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
          O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
          O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
          O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
          O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
          O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
          O4 - Global Startup: Exif Launcher.lnk = ?
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
          O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
          O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
          O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
          O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

          Merci !
          0
          2. bernie61
            re
            ok mais effaces les répertoires suivants:
            C:\Program Files\WinPoET Broadband Connection
            C:\Program Files\NavExcel\

            ensuite repasses ccleaner pour nettoyer les fichiers ET les Erreurs de Clefs
            a+
            0
            1. chap
              Voici le rapport Ewido :

              ---------------------------------------------------------
              ewido anti-malware - Rapport de scan
              ---------------------------------------------------------

              + Créé le: 10:42:10, 01/05/2006
              + Somme de contrôle: 233FF686

              + Résultats du scan:

              HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2 -> Dialer.Generic : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2\CLSID -> Dialer.Generic : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2.1 -> Dialer.Generic : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring -> Adware.NaviPromo : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring\CLSID -> Adware.NaviPromo : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring.1 -> Adware.NaviPromo : Nettoyer et sauvegarder
              HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll -> Adware.ISTBar : Nettoyer et sauvegarder
              :mozilla.9:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
              :mozilla.11:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
              :mozilla.12:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
              :mozilla.13:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
              :mozilla.15:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
              :mozilla.17:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.18:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.19:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.21:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
              :mozilla.24:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
              :mozilla.32:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
              :mozilla.37:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.39:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.43:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.44:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.45:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.46:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
              :mozilla.49:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
              :mozilla.50:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
              :mozilla.51:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
              :mozilla.82:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Sitestat : Nettoyer et sauvegarder
              :mozilla.83:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Sitestat : Nettoyer et sauvegarder
              :mozilla.89:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
              :mozilla.90:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
              :mozilla.8:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
              :mozilla.9:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
              :mozilla.13:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.14:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.15:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.17:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
              :mozilla.15:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.16:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.17:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.24:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
              :mozilla.25:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
              :mozilla.11:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\8go0grxd.Utilisateur par défaut\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
              :mozilla.9:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
              :mozilla.34:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
              :mozilla.39:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
              :mozilla.40:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
              :mozilla.45:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.46:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.47:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
              :mozilla.51:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
              :mozilla.52:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
              :mozilla.57:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
              :mozilla.58:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
              :mozilla.59:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
              :mozilla.73:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
              :mozilla.75:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
              :mozilla.76:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
              :mozilla.77:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
              :mozilla.78:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
              :mozilla.79:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
              :mozilla.81:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
              :mozilla.82:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
              :mozilla.85:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
              :mozilla.86:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
              :mozilla.87:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Overture : Nettoyer et sauvegarder
              :mozilla.88:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Overture : Nettoyer et sauvegarder
              :mozilla.94:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Valueclick : Nettoyer et sauvegarder
              :mozilla.102:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder
              :mozilla.107:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
              :mozilla.115:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Onestat : Nettoyer et sauvegarder
              :mozilla.116:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Onestat : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHUpdater.exe -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHUpdater.exe -> Adware.NavExcel : Nettoyer et sauvegarder
              C:\Program Files\WinPoET Broadband Connection\WrDialer.exe -> Heuristic.Win32.Dialer : Nettoyer et sauvegarder
              C:\WINDOWS\system32\EGCOMSERVICE_1042.dll -> Dialer.EGroup.c : Nettoyer et sauvegarder

              ::Fin du rapport

              A priori tt fonctionne !
              Encore Merci ;-)
              0
              2. bernie61
                hello
                0. Installe ce nettoyeur CCLEANER https://www.ccleaner.com/ ou lien direct là http://www.filehippo.com/download_ccleaner.html (la flèche)
                Tutorial là https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
                ensuite
                *Configure ton ordi pour tous scan à exécuter complétement, il faut pouvoir scanner tous les dossiers caché et système donc faire :
                Démarrer/PanneauConfiguration/OptionsDossiers /ongletAffichage et là cocher les lignes
                - afficher les fichiers et dossier cachés
                - afficher contenu dossier système
                décocher
                - masquer fichiers protégés du dossier système
                Puis cliquer APPLIQUER à TOUS les Dossiers

                2. Relances Hijackthis et coche (puis FIX)
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yszwvkesuoilaanbdcsfiwj.com/QdWpusPSmZ3PncXRPIJvVE3xwwGvsh9HV4gAs5Oab /...
                O4 - HKLM\..\Run: [PLFFAP] C:\WINDOWS\system32\HotfixQ0306270.exe
                O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 –u
                O4 - HKLM\..\Run: [Microsoft Debugger Software] random.exe
                O4 - HKLM\..\RunServices: [Microsoft Debugger Software] random.exe
                O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
                O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
                O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
                O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
                O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm >> pas utile
                O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
                >> TOUTES les lignes O16 … TOUTES
                O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\FICHIE~1\Stardock\mcpstub.dll (file missing)

                3. Effacer ces programmes .EXE et .DLL( et à la fin vider la corbeille)
                C:\WINDOWS\system32\HotfixQ0306270.exe
                C:… random.exe
                C:\Program Files\EmpirePoker\ > efface répertoire si tu joues plus avec
                C:\PROGRA~1\FICHIE~1\Stardock >> le répertoire si tu souhaites être avec un windows normal

                5. vider les répertoires temps et la corbeille, en lançant Ccleaner
                Refais un hijackthis de contrôle et dis nous où en sont les problèmes

                passes ensuite Ewido
                http://users.skynet.be/BernieClub/index.html#antitrojan
                a+
                0
                1. chap
                  Bjer et merxi pour ta réponse. Ci-dessous le nouveau HJ après avoir tenté de faire tt ce que tu m'as demandé :

                  Logfile of HijackThis v1.99.1
                  Scan saved at 09:55:55, on 01/05/2006
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\System32\Ati2evxx.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\sstray.exe
                  C:\Program Files\Logitech\iTouch\iTouch.exe
                  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  C:\WINDOWS\system32\dla\tfswctrl.exe
                  C:\Program Files\Creative\Shared Files\CamTray.exe
                  C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
                  C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
                  C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
                  C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  C:\Program Files\Winamp\winampa.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\QuickTime\qttask.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
                  C:\Program Files\FinePixViewer\QuickDCF.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\Program Files\Logitech\MouseWare\system\em_exec.exe
                  C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
                  C:\MSSQL7\binn\sqlservr.exe
                  C:\WINDOWS\system32\IoctlSvc.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
                  C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
                  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                  C:\Program Files\Winamp\Winamp.exe
                  C:\WINDOWS\system32\drwtsn32.exe
                  C:\WINDOWS\system32\drwtsn32.exe
                  C:\Program Files\Emule\emule.exe
                  C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                  C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
                  C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                  C:\Program Files\Winamp\Winamp.exe
                  C:\WINDOWS\explorer.exe
                  C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
                  C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
                  C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                  O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
                  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
                  O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                  O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
                  O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
                  O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
                  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                  O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
                  O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
                  O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
                  O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe"
                  O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
                  O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
                  O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                  O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                  O4 - Global Startup: Exif Launcher.lnk = ?
                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                  O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                  O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                  O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                  O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
                  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                  O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\WinPoET Broadband Connection\WrOS.EXE

                  A te lire,
                  0

              Discussions similaires

              comment taper log10 sur une TI83plus.fr ?
              FFFred

              2 réponses
              comment utiliser la fonction log
              CG

              1 réponse
              Avez-vous un VPN no logs à me conseiller ?
              Utilisateur anonyme

              4 réponses
              problème suite mise à jour 2004
              eriamel0

              11 réponses
              Fichier bootex
              Raoul

              1 réponse