Rapport de HijackThis

tancrede -  
Bonjour,on m'a dit de poster ce rapport ici pour la desinfection de virus de mon PC
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:25:03 PM, on 2/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Ahead\InCD\InCDsrv.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
D:\Program Files\AskBarDis\bar\bin\AskService.exe
D:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
D:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
D:\PROGRA~1\AVG\AVG8\avgrsx.exe
D:\Program Files\rnamfler\naofsvc.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Java\jre6\bin\jusched.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Program Files\Messenger\msmsgs.exe
H:\Skype\Phone\Skype.exe
D:\WINDOWS\system32\devldr32.exe
D:\Program Files\MSN Messenger\usnsvc.exe
D:\Program Files\Microsoft Office\Office10\EXCEL.EXE
D:\Program Files\AVG\AVG8\avgcsrvx.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - D:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9527D42F-D666-11D3-B8DD-00600838CD5F} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - D:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "H:\Skype\Phone\Skype.exe" /nosplash /minimized
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - D:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O20 - Winlogon Notify: avgrsstarter - D:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASKService - Unknown owner - D:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - D:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Microsoft ASPI Manager (aspimgr) - Unknown owner - D:\WINDOWS\system32\aspimgr.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - D:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - D:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: RdnaoFlSvc - Unknown owner - D:\Program Files\rnamfler\naofsvc.exe
O23 - Service: ThreatFire - Unknown owner - D:\Program Files\ThreatFire\TFService.exe (file missing)

--
End of file - 8536 bytes
Configuration: Windows XP 
Internet Explorer 7.0

7 réponses

  1.  toptitbal Contributeur sécurité
    Bonjour

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)

    1. tancrede
      merci je fait quoi aprés ?
      voila le rapport:

      -----------\\ ToolBar S&D 1.2.8 XP/Vista

      Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.53GHz )
      BIOS : Award Modular BIOS v6.00PG
      USER : yveline ( Administrator )
      BOOT : Normal boot
      Antivirus : AVG Anti-Virus Free 8.0 (Activated)
      A:\ (USB)
      C:\ (Local Disk) - NTFS - Total:2 Go (Free:1 Go)
      D:\ (Local Disk) - NTFS - Total:78 Go (Free:55 Go)
      E:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
      F:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
      G:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
      H:\ (Local Disk) - FAT32 - Total:18 Go (Free:0 Go)
      J:\ (Local Disk) - NTFS - Total:70 Go (Free:70 Go)
      K:\ (CD or DVD)
      L:\ (CD or DVD)
      N:\ (USB)

      "D:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
      Option : [1] ( Sun 02/15/2009|15:39 )

      -----------\\ Recherche de Fichiers / Dossiers ...

      [Service] ASKService
      [Service] ASKUpgrade
      D:\Program Files\AskBarDis
      D:\Program Files\AskBarDis\bar
      D:\Program Files\AskBarDis\unins000.dat
      D:\Program Files\AskBarDis\unins000.exe
      D:\Program Files\AskBarDis\bar\bin
      D:\Program Files\AskBarDis\bar\Cache
      D:\Program Files\AskBarDis\bar\History
      D:\Program Files\AskBarDis\bar\Settings
      D:\Program Files\AskBarDis\bar\bin\askBar.dll
      D:\Program Files\AskBarDis\bar\bin\askPopStp.dll
      D:\Program Files\AskBarDis\bar\bin\AskService.exe
      D:\Program Files\AskBarDis\bar\bin\AskSplash.exe
      D:\Program Files\AskBarDis\bar\bin\AskTBApp.exe
      D:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
      D:\Program Files\AskBarDis\bar\bin\psvince.dll
      D:\Program Files\AskBarDis\bar\Cache\00051043
      D:\Program Files\AskBarDis\bar\Cache\00887EDF.bin
      D:\Program Files\AskBarDis\bar\Cache\008884BB.bin
      D:\Program Files\AskBarDis\bar\Cache\008888F1.bin
      D:\Program Files\AskBarDis\bar\Cache\00888ECD.bin
      D:\Program Files\AskBarDis\bar\Cache\008893FD.bin
      D:\Program Files\AskBarDis\bar\Cache\0088994C.bin
      D:\Program Files\AskBarDis\bar\Cache\00889F19.bin
      D:\Program Files\AskBarDis\bar\Cache\files.ini
      D:\Program Files\AskBarDis\bar\History\search
      D:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
      D:\Program Files\AskBarDis\bar\Settings\config.dat
      D:\Program Files\AskBarDis\bar\Settings\config.dat.bak
      D:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
      D:\Program Files\AskBarDis\bar\Settings\prevCfg2.htm

      -----------\\ Extensions

      (yveline) - {9815d32d-08c2-42ca-a8c6-43e501a4512f} => torproxy_toolbar
      (yveline) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
      (yveline) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
      (yveline) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="D:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
      "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}"
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "Url"="http://www.microsoft.com/athome/community/rss.xml"
      "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
      "Url"="http://www.microsoft.com/atwork/community/rss.xml"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

      --------------------\\ Recherche d'autres infections

      --------------------\\ ROGUES ..

      D:\PROGRA~1\AV9
      1. toptitbal Contributeur sécurité
        Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".

        ! Ne ferme pas la fenêtre lors de la suppression !

        Un rapport sera généré, poste son contenu ici.

        NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
        Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
        Tape explorer puis valide.
        1. tancrede
          voila le rapport
          mais a quoi vont servir les rapports?
          -----------\\ ToolBar S&D 1.2.8 XP/Vista

          Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.53GHz )
          BIOS : Award Modular BIOS v6.00PG
          USER : yveline ( Administrator )
          BOOT : Normal boot
          Antivirus : AVG Anti-Virus Free 8.0 (Activated)
          A:\ (USB)
          C:\ (Local Disk) - NTFS - Total:2 Go (Free:1 Go)
          D:\ (Local Disk) - NTFS - Total:78 Go (Free:55 Go)
          E:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
          F:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
          G:\ (Local Disk) - FAT - Total:1 Go (Free:0 Go)
          H:\ (Local Disk) - FAT32 - Total:18 Go (Free:0 Go)
          I:\ (USB) - FAT - Total:968 Mo (Free:0 Go)
          J:\ (Local Disk) - NTFS - Total:70 Go (Free:70 Go)
          K:\ (CD or DVD)
          L:\ (CD or DVD)
          N:\ (USB)

          "D:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
          Option : [2] ( Sun 02/15/2009|16:28 )

          -----------\\ SUPPRESSION

          Supprime! - [Service] ASKService
          Supprime! - [Service] ASKUpgrade
          Supprime! - D:\Program Files\AskBarDis\bar
          Supprime! - D:\Program Files\AskBarDis\unins000.dat
          Supprime! - D:\Program Files\AskBarDis\unins000.exe
          Supprime! - D:\Program Files\AskBarDis

          -----------\\ Recherche de Fichiers / Dossiers ...

          -----------\\ Extensions

          (yveline) - {9815d32d-08c2-42ca-a8c6-43e501a4512f} => torproxy_toolbar
          (yveline) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
          (yveline) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
          (yveline) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

          -----------\\ [..\Internet Explorer\Main]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
          "Local Page"="D:\\WINDOWS\\system32\\blank.htm"
          "Search Page"="https://www.google.com/?gws_rd=ssl"
          "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
          "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}"
          "Start Page"="https://www.google.fr/?gws_rd=ssl"
          "Url"="http://www.microsoft.com/athome/community/rss.xml"
          "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
          "Url"="http://www.microsoft.com/atwork/community/rss.xml"

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
          "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
          "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Start Page"="https://www.msn.com/fr-fr/"

          --------------------\\ Recherche d'autres infections

          --------------------\\ ROGUES ..

          D:\PROGRA~1\AV9

          1 - "D:\ToolBar SD\TB_1.txt" - Sun 02/15/2009|15:40 - Option : [1]
          2 - "D:\ToolBar SD\TB_2.txt" - Sun 02/15/2009|16:31 - Option : [2]

          -----------\\ Fin du rapport a 16:31:12.39
          3. tancrede
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 4:37:59 PM, on 2/15/2009
            Platform: Windows XP SP3 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16791)
            Boot mode: Normal

            Running processes:
            D:\WINDOWS\System32\smss.exe
            D:\WINDOWS\system32\winlogon.exe
            D:\WINDOWS\system32\services.exe
            D:\WINDOWS\system32\lsass.exe
            D:\WINDOWS\system32\svchost.exe
            D:\WINDOWS\System32\svchost.exe
            D:\Program Files\Ahead\InCD\InCDsrv.exe
            D:\WINDOWS\system32\spoolsv.exe
            D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
            D:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
            D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            D:\Program Files\Java\jre6\bin\jqs.exe
            D:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
            D:\PROGRA~1\AVG\AVG8\avgrsx.exe
            D:\Program Files\rnamfler\naofsvc.exe
            D:\WINDOWS\system32\svchost.exe
            D:\WINDOWS\Explorer.EXE
            D:\Program Files\Common Files\Real\Update_OB\realsched.exe
            D:\Program Files\Java\jre6\bin\jusched.exe
            D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
            D:\WINDOWS\system32\ctfmon.exe
            D:\Program Files\MSN Messenger\msnmsgr.exe
            D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            D:\Program Files\Messenger\msmsgs.exe
            H:\Skype\Phone\Skype.exe
            D:\WINDOWS\system32\devldr32.exe
            D:\Program Files\MSN Messenger\usnsvc.exe
            D:\Program Files\Microsoft Office\Office10\EXCEL.EXE
            D:\Program Files\AVG\AVG8\avgcsrvx.exe
            D:\Program Files\Internet Explorer\iexplore.exe
            D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
            O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
            O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
            O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
            O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Program Files\AVG\AVG8\avgssie.dll
            O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: (no name) - {9527D42F-D666-11D3-B8DD-00600838CD5F} - (no file)
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
            O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
            O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
            O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe"
            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
            O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
            O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
            O4 - HKCU\..\Run: [Skype] "H:\Skype\Phone\Skype.exe" /nosplash /minimized
            O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - D:\Program Files\Yahoo!\Common\yinsthelper.dll
            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
            O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
            O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Program Files\AVG\AVG8\avgpp.dll
            O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
            O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
            O20 - Winlogon Notify: avgrsstarter - D:\WINDOWS\SYSTEM32\avgrsstx.dll
            O23 - Service: Apple Mobile Device - Apple, Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            O23 - Service: Microsoft ASPI Manager (aspimgr) - Unknown owner - D:\WINDOWS\system32\aspimgr.exe (file missing)
            O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
            O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
            O23 - Service: C-DillaSrv - C-Dilla Ltd - D:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
            O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - D:\Program Files\Ahead\InCD\InCDsrv.exe
            O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
            O23 - Service: RdnaoFlSvc - Unknown owner - D:\Program Files\rnamfler\naofsvc.exe
            O23 - Service: ThreatFire - Unknown owner - D:\Program Files\ThreatFire\TFService.exe (file missing)
            1. toptitbal Contributeur sécurité
              Télécharge SDFix sur ton bureau :
              http://downloads.andymanchesta.com/RemovalTools/SDFix.exe.

              --->Double-clique sur SDFix.exe et choisis "Install" .

              ( tuto ici : https://www.malekal.com/slenfbot-still-an-other-irc-bot/ )

              Puis une fois l'installe faite, redémarre en mode sans échec .

              Comment aller en Mode sans échec :
              1) Redémarre ton ordi
              2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
              3) Tu verras un écran avec options de démarrage apparaître
              4) Choisis la première option : Sans Échec, et valide avec "Entrée"
              5) Choisis ton compte habituel, et non Administrateur (si besoin ... )

              /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

              Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
              --->Tapes Y pour lancer le script ...
              Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
              presse une touche pour redémarrer quand il te le sera demandé .

              Le PC va mettre du temps avant de démarrer ( c'est normal), après le chargement du Bureau presse une touche lorsque "Finished" s'affiche .

              Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier C:\SDFix sous le nom "Report.txt".
              Poste ce dernier dans ta prochaine réponse.

              Discussions similaires

              Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
              Utilisateur anonyme

              13 réponses
              rapport de visite commercial
              antcho

              3 réponses
              impossible d'afficher le tableau dynamique sur un rapport existant
              Pierre

              3 réponses
              Theme de rapport de stage option comptabilité
              sana saydou

              2 réponses
              Rapport audit parc informatique
              It administrateur

              9 réponses