Fenêtres windoctor

Résolu
José -  
Bonjour à tous,
je me rends compte que je ne suis pas la seule à avoir ce problème mais comme chaque cas est différent je me tourne vers vous pour m'aider à le résoudre : j'ai depuis quelques jours des fenêtres de winantivirus2006, winantispyware, windoctor2006 etc qui s'ouvrent intempestivement!
que dois-je faire? j'ai évidemment passé avast, ccleaner, spybot, adaware, asquared free. j'ai comme parefeu ZoneAlarm.
Merci d'avance
Configuration: Windows XP
Firefox 2.0.0.2
avast
zone alarm

7 réponses

  1.  philae83 Contributeur sécurité
    re

    si tu n'as plus de soucis de ton côté, le dernier rapport hijackthis lui est ok.
    1. philae83 Contributeur sécurité
      bonjour,

      * Relance Vundofix
      * Ne clique pas sur "Scan for a vundo"
      * Clique droit au milieu de la fenêtre
      * Clique sur Add more files ?
      * Copie/colle le fichier ci-dessous :

      C:\WINDOWS\system32\sxmsgugq.dll

      * Clique sur Add files
      * Ensuite clique sur Close Windows
      * Enfin, clique sur Remove Vundo ( les fichiers précédents doivent apparaitre dans la fenêtre principale)
      * Si l'outils demande un redémarrage, accepte
      * Poste le rapport Vundofix,

      puis

      lance hijackthis pour un "scan seulement" et coche ces lignes :

      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
      O2 - BHO: (no name) - {C6A4F54A-7422-441E-BE69-FFEF7F5820E5} - C:\WINDOWS\system32\pmkji.dll (file missing)
      O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite.net/
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
      O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
      O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)

      * ferme toutes les applications ouvertes y compris Internet Explorer et clique sur "fixer objet"

      * poste le rapport de vundo ainsi qu'un nouveau rapport hijackthis stp

      1. José
        Je viens de faire ce que tu m'as dis et je t'envoie le rapport de hijackthis.
        je viens de relancer vundofix, il ne m'a rien trouvé. J'ai surfé une bonne partie de l'après-midi et je n'ai pas eu de nouvelles fenêtres, est-ce solutionné? si c'est le cas, je te remercie beaucoup, car c'est tellement dur de se débarrasser de ces m....s !
        Logfile of HijackThis v1.99.1
        Scan saved at 17:46:57, on 19/03/2007
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16414)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Windows Defender\MsMpEng.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\ZoneLabs\vsmon.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\netdde.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
        C:\WINDOWS\system32\CTsvcCDA.EXE
        C:\WINDOWS\system32\DVDRAMSV.exe
        C:\Program Files\Mozy\mozybackup.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wdfmgr.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\WINDOWS\System32\alg.exe
        C:\Program Files\Apoint2K\Apoint.exe
        C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
        C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
        C:\WINDOWS\system32\TCtrlIOHook.exe
        C:\WINDOWS\system32\TPSMain.exe
        C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
        C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
        C:\WINDOWS\system32\TPSBattM.exe
        C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
        C:\Program Files\Apoint2K\Apntex.exe
        C:\WINDOWS\AGRSMMSG.exe
        C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\eSnips\ClientGW.exe
        C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
        C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
        C:\Program Files\a-squared Anti-Malware\a2guard.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
        C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
        C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
        C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.10
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} - C:\WINDOWS\system32\ZiepodOneClicker.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
        O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program Files\CoreStreet\SpoofStick\SpoofStick.dll
        O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program Files\eSnips\SnipBar.dll
        O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
        O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
        O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
        O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
        O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
        O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
        O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
        O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
        O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
        O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
        O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
        O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
        O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
        O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
        O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
        O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
        O8 - Extra context menu item: Snip to my eSnips account - C:\Program Files\eSnips\res\SnipIt.htm
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O11 - Options group: [INTERNATIONAL] International*
        O15 - Trusted Zone: *.hotmail.com
        O15 - Trusted Zone: login.live.com
        O15 - Trusted Zone: rad.msn.com
        O15 - Trusted Zone: *.msn.com
        O15 - Trusted Zone: *.passport.com
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer = 192.168.2.1,212.151.136.242
        O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
        O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
        O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
        O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
        O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    2. philae83 Contributeur sécurité
      re

      * Télécharge VundoFix.exe (par Atribune) sur ton Bureau

      http://www.atribune.org/ccount/click.php?id=4

      * Double-clique VundoFix.exe afin de le lancer

      * Clique sur le bouton Scan for Vundo

      * Lorsque le scan est complété, clique sur le bouton Remove Vundo

      * Une invite te demandera si tu veux supprimer les fichiers, clique YES

      * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

      * Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

      * Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

      Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".
      1. José
        Je n'ai pu faire les scan que ce matin, voila les résultats :
        VundoFix V6.3.16

        Checking Java version...

        Java version is 1.5.0.9
        Old versions of java are exploitable and should be removed.

        Java version is 1.5.0.11

        Scan started at 09:49:11 19/03/2007

        Listing files found while scanning....

        C:\WINDOWS\system32\ijkmp.bak1
        C:\WINDOWS\system32\ijkmp.bak2
        C:\WINDOWS\system32\ijkmp.ini
        C:\WINDOWS\system32\pmkji.dll
        C:\WINDOWS\system32\pujaxuqy.dll
        C:\WINDOWS\system32\sthtldwn.exe

        Beginning removal...

        Attempting to delete C:\WINDOWS\system32\ijkmp.bak1
        C:\WINDOWS\system32\ijkmp.bak1 Has been deleted!

        Attempting to delete C:\WINDOWS\system32\ijkmp.bak2
        C:\WINDOWS\system32\ijkmp.bak2 Has been deleted!

        Attempting to delete C:\WINDOWS\system32\ijkmp.ini
        C:\WINDOWS\system32\ijkmp.ini Has been deleted!

        Attempting to delete C:\WINDOWS\system32\pmkji.dll
        C:\WINDOWS\system32\pmkji.dll Has been deleted!

        Attempting to delete C:\WINDOWS\system32\pujaxuqy.dll
        C:\WINDOWS\system32\pujaxuqy.dll Has been deleted!

        Attempting to delete C:\WINDOWS\system32\sthtldwn.exe
        C:\WINDOWS\system32\sthtldwn.exe Has been deleted!

        Performing Repairs to the registry.
        Done!

        puis :
        Logfile of HijackThis v1.99.1
        Scan saved at 10:07:30, on 19/03/2007
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16414)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Windows Defender\MsMpEng.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\ZoneLabs\vsmon.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\netdde.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
        C:\WINDOWS\system32\CTsvcCDA.EXE
        C:\WINDOWS\system32\DVDRAMSV.exe
        C:\Program Files\Mozy\mozybackup.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wdfmgr.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\WINDOWS\System32\alg.exe
        C:\Program Files\Apoint2K\Apoint.exe
        C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
        C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
        C:\WINDOWS\system32\TCtrlIOHook.exe
        C:\WINDOWS\system32\TPSMain.exe
        C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
        C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
        C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
        C:\WINDOWS\AGRSMMSG.exe
        C:\WINDOWS\system32\TPSBattM.exe
        C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\eSnips\ClientGW.exe
        C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
        C:\Program Files\Apoint2K\Apntex.exe
        C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
        C:\Program Files\a-squared Anti-Malware\a2guard.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
        C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
        C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
        C:\Program Files\Mozilla Sunbird\sunbird.exe
        C:\WINDOWS\system32\NOTEPAD.EXE
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.10
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} - C:\WINDOWS\system32\ZiepodOneClicker.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
        O2 - BHO: (no name) - {C6A4F54A-7422-441E-BE69-FFEF7F5820E5} - C:\WINDOWS\system32\pmkji.dll (file missing)
        O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
        O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program Files\CoreStreet\SpoofStick\SpoofStick.dll
        O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program Files\eSnips\SnipBar.dll
        O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
        O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
        O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
        O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
        O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
        O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
        O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
        O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
        O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
        O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
        O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
        O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
        O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
        O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
        O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
        O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
        O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
        O8 - Extra context menu item: Snip to my eSnips account - C:\Program Files\eSnips\res\SnipIt.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O11 - Options group: [INTERNATIONAL] International*
        O15 - Trusted Zone: *.hotmail.com
        O15 - Trusted Zone: login.live.com
        O15 - Trusted Zone: rad.msn.com
        O15 - Trusted Zone: *.msn.com
        O15 - Trusted Zone: *.passport.com
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
        O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite.net/dlmanager/versions/activex/dlm-activex-2.0.5.1.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
        O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer = 192.168.2.1,212.151.136.242
        O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)
        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
        O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
        O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
        O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
        O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    3. José
      Logfile of HijackThis v1.99.1
      Scan saved at 18:11:31, on 18/03/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16414)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Defender\MsMpEng.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\netdde.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\WINDOWS\system32\DVDRAMSV.exe
      C:\Program Files\Mozy\mozybackup.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Apoint2K\Apoint.exe
      C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
      C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
      C:\WINDOWS\system32\TCtrlIOHook.exe
      C:\WINDOWS\system32\TPSMain.exe
      C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
      C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
      C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\eSnips\ClientGW.exe
      C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
      C:\WINDOWS\system32\TPSBattM.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\Apoint2K\Apntex.exe
      C:\Program Files\a-squared Anti-Malware\a2guard.exe
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
      C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
      C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
      C:\Program Files\Mozilla Sunbird\sunbird.exe
      C:\Program Files\Mozilla Thunderbird\thunderbird.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\ntvdm.exe
      C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
      C:\Program Files\Microsoft Works\WkDStore.exe
      C:\WINDOWS\msagent\AgentSvr.exe
      C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =

      192.168.2.10
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

      localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

      Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot -

      Search & Destroy\SDHelper.dll
      O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} -

      C:\WINDOWS\system32\ZiepodOneClicker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

      Files\Java\jre1.5.0_11\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program

      Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {A78D2715-5870-4CC7-BAAB-C9AA84529F1D} - C:\WINDOWS\system32\pmkji.dll
      O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
      O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program

      Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
      O2 - BHO: (no name) - {D38439EC-4A7F-42b4-90C2-D810D7778FDD} - (no file)
      O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program

      Files\CoreStreet\SpoofStick\SpoofStick.dll
      O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program

      Files\eSnips\SnipBar.dll
      O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
      O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
      O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
      O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
      O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
      O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
      O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
      O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
      O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program

      Files\TOSHIBA\Accessibility\FnKeyHook.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
      O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
      O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
      O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program

      Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
      O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
      O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
      O8 - Extra context menu item: Snip to my eSnips account - C:\Program

      Files\eSnips\res\SnipIt.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

      Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

      C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%

      \bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-

      9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2

      \OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program

      Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -

      http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

      Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

      %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

      Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

      Files\Messenger\MSMSGS.EXE
      O11 - Options group: [INTERNATIONAL] International*
      O15 - Trusted Zone: *.hotmail.com
      O15 - Trusted Zone: login.live.com
      O15 - Trusted Zone: rad.msn.com
      O15 - Trusted Zone: *.msn.com
      O15 - Trusted Zone: *.passport.com
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool)

      - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) -

      http://dlmanager.akamaitools.com.edgesuite.net/dlmanager/versions/activex/dlm-activex-

      2.0.5.1.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -

      http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -

      https://www.trendmicro.com/en_us/forHome/products/housecall.html
      O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) -

      http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

      192.168.2.1,212.151.136.242,212.151.136.246
      O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer =

      192.168.2.1,212.151.136.242,212.151.136.246
      O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer =

      192.168.2.1,212.151.136.242
      O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

      192.168.2.1,212.151.136.242,212.151.136.246
      O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

      192.168.2.1,212.151.136.242,212.151.136.246
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1

      \MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1

      \MSGRAP~1.DLL
      O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)
      O20 - Winlogon Notify: pmkji - C:\WINDOWS\system32\pmkji.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program

      Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4

      \ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4

      \ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4

      \ashWebSv.exe" /service (file missing)
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program

      Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program

      Files\TOSHIBA\ConfigFree\CFSvcs.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd -

      C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. -

      C:\WINDOWS\system32\DVDRAMSV.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program

      Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program

      Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file

      missing)
      O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32

      \ZoneLabs\vsmon.exe
      2. José
        Apparement, il n'a rien trouvé !

        03/18/07 17:42:37 [Info]: BlackLight Engine 1.0.55 initialized
        03/18/07 17:42:37 [Info]: OS: 5.1 build 2600 (Service Pack 2)
        03/18/07 17:42:37 [Note]: 7019 4
        03/18/07 17:42:37 [Note]: 7005 0
        03/18/07 17:42:43 [Note]: 7006 0
        03/18/07 17:42:44 [Note]: 7011 3932
        03/18/07 17:42:44 [Note]: 7026 0
        03/18/07 17:42:44 [Note]: 7026 0
        03/18/07 17:43:06 [Note]: FSRAW library version 1.7.1021
        03/18/07 17:57:53 [Note]: 7007 0
        1. philae83 Contributeur sécurité
          re
          tant mieux,

          * Télécharge HijackThis et poste le rapport stp

          http://pchelpbordeaux.free.fr/logiciels.html
          Tutorial
          http://pchelpbordeaux.free.fr/tuto.html
          Démo en image
          http://pageperso.aol.fr/balltrap34/demohijack.htm
          1. philae83 Contributeur sécurité
            Bonjour,

            * Télécharge Blacklight
            https://europe.f-secure.com/exclude/blacklight/index.shtml
            (de F-Secure)
            (le premier de la page)

            Enregistre le sur ton Bureau.
            Double-clique blbeta.exe
            Clique sur "I ACCEPT" .
            clique Scan puis Next<*gras>

            Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
            sur ton Bureau, nommé <gras>fsbl.xxxxxxx.log             (les xxxxxxx sont des chiffres).

            Copie et colle le contenu de ce rapport dans ta prochaine réponse.
            NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
            car des fichiers légitimes peuvent être présents, tel wbemtest.exe

            Discussions similaires

            Problème de clavier, des fenêtre s'ouvrent !!
            Lyon691D

            5 réponses
            Clavier ouvre raccourcis
            angellee

            11 réponses
            Mon pc ouvre des fenêtres et le clavier écrit
            Louise19

            3 réponses
            Comment fermer les onglets facilement sur iPad 11
            icecream1949-1944

            8 réponses
            Afficher deux fenêtres côte à côte
            ptitchinoise

            11 réponses