Log Hijakc

chap -  
Bonjour,

Pourrais-je obtenir un avis interessé sur ce log ?
Merci d'avance.

Logfile of HijackThis v1.99.1
Scan saved at 08:21:11, on 01/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
C:\WINDOWS\system32\HotfixQ0306270.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\MSSQL7\binn\sqlservr.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\Winamp.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Emule\emule.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Winamp\Winamp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\imapi.exe
C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yszwvkesuoilaanbdcsfiwj.com/QdWpusPSmZ3PncXRPIJvVE3xwwGvsh9HV4gAs5Oab/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe"
O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
O4 - HKLM\..\Run: [PLFFAP] C:\WINDOWS\system32\HotfixQ0306270.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Microsoft Debugger Software] random.exe
O4 - HKLM\..\Run: [Totocam] C:\PROGRA~1\ALLOCA~1\allocam.exe 1
O4 - HKLM\..\RunServices: [Microsoft Debugger Software] random.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {14325268-79E0-4D2A-89A4-FFFC6E22741E} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/179dff895d41e2ec1216/netzip/RdxIE601_fr.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://www.alloticket.com/MicroPaiement/kit/WebInstall.dll
O16 - DPF: {AA14C86B-DA22-4811-8186-BB496A299C5F} (Be Here TotalView Player ActiveX Control, Version 3.0) - http://www.spincam.com/360video/plugins/iVideoViewer3_0.cab
O16 - DPF: {D7B59209-0ED9-4986-BD4A-527BE836C6B2} - https://www.afternic.com/domains/downloadv3.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\FICHIE~1\Stardock\mcpstub.dll (file missing)
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\WinPoET Broadband Connection\WrOS.EXE

8 réponses

  • Votes
  • Date
  • Date décroissante
  1. bernie61
    re
    ok alors et n'hésites aps à revenir pour d'autres soucis a+ bon surf
    2. bernie61
      ok
      relances HT et coche FIX ces lignes
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm

      dis nous où en sont tes soucis, pour moi c'est bon
      a+
      1. chap
        Voici le dernier log hj :

        Logfile of HijackThis v1.99.1
        Scan saved at 12:42:15, on 01/05/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\System32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
        C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
        C:\Program Files\ewido anti-malware\ewidoctrl.exe
        C:\Program Files\ewido anti-malware\ewidoguard.exe
        C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
        C:\MSSQL7\binn\sqlservr.exe
        C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
        C:\WINDOWS\system32\IoctlSvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\sstray.exe
        C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
        C:\Program Files\Logitech\iTouch\iTouch.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\WINDOWS\system32\dla\tfswctrl.exe
        C:\Program Files\Logitech\MouseWare\system\em_exec.exe
        C:\Program Files\Creative\Shared Files\CamTray.exe
        C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
        C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
        C:\Program Files\Winamp\winampa.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\FinePixViewer\QuickDCF.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
        C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
        C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
        C:\Program Files\Emule\emule.exe
        C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
        O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
        O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
        O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
        O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
        O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
        O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
        O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
        O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
        O4 - Global Startup: Exif Launcher.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
        O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
        O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
        O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
        O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
        O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

        Merci !
        2. bernie61
          re
          ok mais effaces les répertoires suivants:
          C:\Program Files\WinPoET Broadband Connection
          C:\Program Files\NavExcel\

          ensuite repasses ccleaner pour nettoyer les fichiers ET les Erreurs de Clefs
          a+
          1. chap
            Voici le rapport Ewido :

            ---------------------------------------------------------
            ewido anti-malware - Rapport de scan
            ---------------------------------------------------------

            + Créé le: 10:42:10, 01/05/2006
            + Somme de contrôle: 233FF686

            + Résultats du scan:

            HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2 -> Dialer.Generic : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2\CLSID -> Dialer.Generic : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2.1 -> Dialer.Generic : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring -> Adware.NaviPromo : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring\CLSID -> Adware.NaviPromo : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Classes\NaviPromo.EGNaviScoring.1 -> Adware.NaviPromo : Nettoyer et sauvegarder
            HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll -> Adware.ISTBar : Nettoyer et sauvegarder
            :mozilla.9:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
            :mozilla.11:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
            :mozilla.12:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
            :mozilla.13:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
            :mozilla.15:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
            :mozilla.17:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.18:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.19:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.21:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
            :mozilla.24:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
            :mozilla.32:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
            :mozilla.37:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.39:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.43:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.44:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.45:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.46:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Hitbox : Nettoyer et sauvegarder
            :mozilla.49:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
            :mozilla.50:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
            :mozilla.51:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
            :mozilla.82:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Sitestat : Nettoyer et sauvegarder
            :mozilla.83:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Sitestat : Nettoyer et sauvegarder
            :mozilla.89:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
            :mozilla.90:C:\Documents and Settings\Enfants\Application Data\Mozilla\Firefox\Profiles\default.xnl\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
            :mozilla.8:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
            :mozilla.9:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
            :mozilla.13:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.14:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.15:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.17:C:\Documents and Settings\Guillaume\Application Data\Mozilla\Firefox\Profiles\default.a65\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
            :mozilla.15:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.16:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.17:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.24:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
            :mozilla.25:C:\Documents and Settings\Guillaume\Application Data\Thunderbird\Profiles\default\n4nqk1xq.slt\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
            :mozilla.11:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\8go0grxd.Utilisateur par défaut\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
            :mozilla.9:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
            :mozilla.34:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
            :mozilla.39:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
            :mozilla.40:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
            :mozilla.45:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.46:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.47:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
            :mozilla.51:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
            :mozilla.52:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyer et sauvegarder
            :mozilla.57:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
            :mozilla.58:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
            :mozilla.59:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Comclick : Nettoyer et sauvegarder
            :mozilla.73:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
            :mozilla.75:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
            :mozilla.76:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
            :mozilla.77:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
            :mozilla.78:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
            :mozilla.79:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
            :mozilla.81:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
            :mozilla.82:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Serving-sys : Nettoyer et sauvegarder
            :mozilla.85:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
            :mozilla.86:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
            :mozilla.87:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Overture : Nettoyer et sauvegarder
            :mozilla.88:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Overture : Nettoyer et sauvegarder
            :mozilla.94:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Valueclick : Nettoyer et sauvegarder
            :mozilla.102:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder
            :mozilla.107:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
            :mozilla.115:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Onestat : Nettoyer et sauvegarder
            :mozilla.116:C:\Documents and Settings\Sophie\Application Data\Mozilla\Firefox\Profiles\default.dqz\cookies.txt -> TrackingCookie.Onestat : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHUpdater.exe -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab/NHUpdater.exe -> Adware.NavExcel : Nettoyer et sauvegarder
            C:\Program Files\WinPoET Broadband Connection\WrDialer.exe -> Heuristic.Win32.Dialer : Nettoyer et sauvegarder
            C:\WINDOWS\system32\EGCOMSERVICE_1042.dll -> Dialer.EGroup.c : Nettoyer et sauvegarder

            ::Fin du rapport

            A priori tt fonctionne !
            Encore Merci ;-)
            2. bernie61
              hello
              0. Installe ce nettoyeur CCLEANER https://www.ccleaner.com/ ou lien direct là http://www.filehippo.com/download_ccleaner.html (la flèche)
              Tutorial là https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
              ensuite
              *Configure ton ordi pour tous scan à exécuter complétement, il faut pouvoir scanner tous les dossiers caché et système donc faire :
              Démarrer/PanneauConfiguration/OptionsDossiers /ongletAffichage et là cocher les lignes
              - afficher les fichiers et dossier cachés
              - afficher contenu dossier système
              décocher
              - masquer fichiers protégés du dossier système
              Puis cliquer APPLIQUER à TOUS les Dossiers

              2. Relances Hijackthis et coche (puis FIX)
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yszwvkesuoilaanbdcsfiwj.com/QdWpusPSmZ3PncXRPIJvVE3xwwGvsh9HV4gAs5Oab /...
              O4 - HKLM\..\Run: [PLFFAP] C:\WINDOWS\system32\HotfixQ0306270.exe
              O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 –u
              O4 - HKLM\..\Run: [Microsoft Debugger Software] random.exe
              O4 - HKLM\..\RunServices: [Microsoft Debugger Software] random.exe
              O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
              O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
              O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
              O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm >> pas utile
              O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
              >> TOUTES les lignes O16 … TOUTES
              O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\FICHIE~1\Stardock\mcpstub.dll (file missing)

              3. Effacer ces programmes .EXE et .DLL( et à la fin vider la corbeille)
              C:\WINDOWS\system32\HotfixQ0306270.exe
              C:… random.exe
              C:\Program Files\EmpirePoker\ > efface répertoire si tu joues plus avec
              C:\PROGRA~1\FICHIE~1\Stardock >> le répertoire si tu souhaites être avec un windows normal

              5. vider les répertoires temps et la corbeille, en lançant Ccleaner
              Refais un hijackthis de contrôle et dis nous où en sont les problèmes

              passes ensuite Ewido
              http://users.skynet.be/BernieClub/index.html#antitrojan
              a+
              1. chap
                Bjer et merxi pour ta réponse. Ci-dessous le nouveau HJ après avoir tenté de faire tt ce que tu m'as demandé :

                Logfile of HijackThis v1.99.1
                Scan saved at 09:55:55, on 01/05/2006
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\System32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\sstray.exe
                C:\Program Files\Logitech\iTouch\iTouch.exe
                C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                C:\WINDOWS\system32\dla\tfswctrl.exe
                C:\Program Files\Creative\Shared Files\CamTray.exe
                C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
                C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
                C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
                C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
                C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                C:\Program Files\Winamp\winampa.exe
                C:\Program Files\iTunes\iTunesHelper.exe
                C:\Program Files\QuickTime\qttask.exe
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
                C:\Program Files\FinePixViewer\QuickDCF.exe
                C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                C:\Program Files\Logitech\MouseWare\system\em_exec.exe
                C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
                C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
                C:\MSSQL7\binn\sqlservr.exe
                C:\WINDOWS\system32\IoctlSvc.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
                C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
                C:\Program Files\iPod\bin\iPodService.exe
                C:\Program Files\Messenger\msmsgs.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                C:\Program Files\Winamp\Winamp.exe
                C:\WINDOWS\system32\drwtsn32.exe
                C:\WINDOWS\system32\drwtsn32.exe
                C:\Program Files\Emule\emule.exe
                C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
                C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                C:\Program Files\Winamp\Winamp.exe
                C:\WINDOWS\explorer.exe
                C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
                C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
                C:\Documents and Settings\Guillaume\Bureau\HijackThis.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
                O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
                O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
                O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
                O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
                O4 - HKLM\..\Run: [Grenouille] C:\Program Files\Grenouille.com\Grenouille\Grenouille.exe /NOSPLASH
                O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
                O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
                O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
                O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe"
                O4 - HKLM\..\Run: [TSE_PLUtil] C:\Program Files\USB 2.0 Flash Drive Utility\PLBkMon.exe
                O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
                O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
                O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
                O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                O4 - Global Startup: Exif Launcher.lnk = ?
                O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
                O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
                O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\WinPoET Broadband Connection\WrOS.EXE

                A te lire,

            Discussions similaires

            comment taper log10 sur une TI83plus.fr ?
            FFFred

            2 réponses
            comment utiliser la fonction log
            CG

            1 réponse
            problème suite mise à jour 2004
            eriamel0

            11 réponses
            Avez-vous un VPN no logs à me conseiller ?
            Utilisateur anonyme

            4 réponses
            Fichier bootex
            Raoul

            1 réponse