Fenêtres windoctor

Résolu
José -  
Bonjour à tous,
je me rends compte que je ne suis pas la seule à avoir ce problème mais comme chaque cas est différent je me tourne vers vous pour m'aider à le résoudre : j'ai depuis quelques jours des fenêtres de winantivirus2006, winantispyware, windoctor2006 etc qui s'ouvrent intempestivement!
que dois-je faire? j'ai évidemment passé avast, ccleaner, spybot, adaware, asquared free. j'ai comme parefeu ZoneAlarm.
Merci d'avance
Configuration: Windows XP
Firefox 2.0.0.2
avast
zone alarm

7 réponses

  1.  philae83 Contributeur sécurité
    Bonjour,

    * Télécharge Blacklight
    https://europe.f-secure.com/exclude/blacklight/index.shtml
    (de F-Secure)
    (le premier de la page)

    Enregistre le sur ton Bureau.
    Double-clique blbeta.exe
    Clique sur "I ACCEPT" .
    clique Scan puis Next<*gras>

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
    sur ton Bureau, nommé <gras>fsbl.xxxxxxx.log     (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse.
    NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
    car des fichiers légitimes peuvent être présents, tel wbemtest.exe

    1. philae83 Contributeur sécurité
      re
      tant mieux,

      * Télécharge HijackThis et poste le rapport stp

      http://pchelpbordeaux.free.fr/logiciels.html
      Tutorial
      http://pchelpbordeaux.free.fr/tuto.html
      Démo en image
      http://pageperso.aol.fr/balltrap34/demohijack.htm
      1. José
        Apparement, il n'a rien trouvé !

        03/18/07 17:42:37 [Info]: BlackLight Engine 1.0.55 initialized
        03/18/07 17:42:37 [Info]: OS: 5.1 build 2600 (Service Pack 2)
        03/18/07 17:42:37 [Note]: 7019 4
        03/18/07 17:42:37 [Note]: 7005 0
        03/18/07 17:42:43 [Note]: 7006 0
        03/18/07 17:42:44 [Note]: 7011 3932
        03/18/07 17:42:44 [Note]: 7026 0
        03/18/07 17:42:44 [Note]: 7026 0
        03/18/07 17:43:06 [Note]: FSRAW library version 1.7.1021
        03/18/07 17:57:53 [Note]: 7007 0
        1. José
          Logfile of HijackThis v1.99.1
          Scan saved at 18:11:31, on 18/03/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16414)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\csrss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Windows Defender\MsMpEng.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\netdde.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          C:\WINDOWS\system32\DVDRAMSV.exe
          C:\Program Files\Mozy\mozybackup.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\wdfmgr.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\system32\wbem\wmiapsrv.exe
          C:\WINDOWS\System32\alg.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Apoint2K\Apoint.exe
          C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
          C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
          C:\WINDOWS\system32\TCtrlIOHook.exe
          C:\WINDOWS\system32\TPSMain.exe
          C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
          C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
          C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
          C:\WINDOWS\AGRSMMSG.exe
          C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
          C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          C:\Program Files\eSnips\ClientGW.exe
          C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
          C:\WINDOWS\system32\TPSBattM.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\Apoint2K\Apntex.exe
          C:\Program Files\a-squared Anti-Malware\a2guard.exe
          C:\Program Files\Windows Defender\MSASCui.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
          C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
          C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
          C:\Program Files\Mozilla Sunbird\sunbird.exe
          C:\Program Files\Mozilla Thunderbird\thunderbird.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\WINDOWS\system32\ntvdm.exe
          C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
          C:\Program Files\Microsoft Works\WkDStore.exe
          C:\WINDOWS\msagent\AgentSvr.exe
          C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =

          192.168.2.10
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

          localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

          Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot -

          Search & Destroy\SDHelper.dll
          O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} -

          C:\WINDOWS\system32\ZiepodOneClicker.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

          Files\Java\jre1.5.0_11\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program

          Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: (no name) - {A78D2715-5870-4CC7-BAAB-C9AA84529F1D} - C:\WINDOWS\system32\pmkji.dll
          O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
          O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program

          Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
          O2 - BHO: (no name) - {D38439EC-4A7F-42b4-90C2-D810D7778FDD} - (no file)
          O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program

          Files\CoreStreet\SpoofStick\SpoofStick.dll
          O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program

          Files\eSnips\SnipBar.dll
          O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
          O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
          O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
          O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
          O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
          O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
          O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
          O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
          O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
          O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
          O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program

          Files\TOSHIBA\Accessibility\FnKeyHook.exe
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
          O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
          O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
          O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
          O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program

          Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
          O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
          O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
          O8 - Extra context menu item: Snip to my eSnips account - C:\Program

          Files\eSnips\res\SnipIt.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

          Files\Java\jre1.5.0_11\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

          C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%

          \bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-

          9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2

          \OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program

          Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
          O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -

          http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

          Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

          %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

          Files\Messenger\MSMSGS.EXE
          O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

          Files\Messenger\MSMSGS.EXE
          O11 - Options group: [INTERNATIONAL] International*
          O15 - Trusted Zone: *.hotmail.com
          O15 - Trusted Zone: login.live.com
          O15 - Trusted Zone: rad.msn.com
          O15 - Trusted Zone: *.msn.com
          O15 - Trusted Zone: *.passport.com
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool)

          - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
          O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) -

          http://dlmanager.akamaitools.com.edgesuite.net/dlmanager/versions/activex/dlm-activex-

          2.0.5.1.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -

          http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -

          https://www.trendmicro.com/en_us/forHome/products/housecall.html
          O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) -

          http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

          192.168.2.1,212.151.136.242,212.151.136.246
          O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer =

          192.168.2.1,212.151.136.242,212.151.136.246
          O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer =

          192.168.2.1,212.151.136.242
          O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

          192.168.2.1,212.151.136.242,212.151.136.246
          O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer =

          192.168.2.1,212.151.136.242,212.151.136.246
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1

          \MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1

          \MSGRAP~1.DLL
          O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)
          O20 - Winlogon Notify: pmkji - C:\WINDOWS\system32\pmkji.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program

          Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4

          \ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4

          \ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4

          \ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program

          Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program

          Files\TOSHIBA\ConfigFree\CFSvcs.exe
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd -

          C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. -

          C:\WINDOWS\system32\DVDRAMSV.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program

          Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program

          Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file

          missing)
          O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32

          \ZoneLabs\vsmon.exe
          2. philae83 Contributeur sécurité
            re

            * Télécharge VundoFix.exe (par Atribune) sur ton Bureau

            http://www.atribune.org/ccount/click.php?id=4

            * Double-clique VundoFix.exe afin de le lancer

            * Clique sur le bouton Scan for Vundo

            * Lorsque le scan est complété, clique sur le bouton Remove Vundo

            * Une invite te demandera si tu veux supprimer les fichiers, clique YES

            * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

            * Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

            * Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

            Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".
            1. José
              Je n'ai pu faire les scan que ce matin, voila les résultats :
              VundoFix V6.3.16

              Checking Java version...

              Java version is 1.5.0.9
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.11

              Scan started at 09:49:11 19/03/2007

              Listing files found while scanning....

              C:\WINDOWS\system32\ijkmp.bak1
              C:\WINDOWS\system32\ijkmp.bak2
              C:\WINDOWS\system32\ijkmp.ini
              C:\WINDOWS\system32\pmkji.dll
              C:\WINDOWS\system32\pujaxuqy.dll
              C:\WINDOWS\system32\sthtldwn.exe

              Beginning removal...

              Attempting to delete C:\WINDOWS\system32\ijkmp.bak1
              C:\WINDOWS\system32\ijkmp.bak1 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\ijkmp.bak2
              C:\WINDOWS\system32\ijkmp.bak2 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\ijkmp.ini
              C:\WINDOWS\system32\ijkmp.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\pmkji.dll
              C:\WINDOWS\system32\pmkji.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\pujaxuqy.dll
              C:\WINDOWS\system32\pujaxuqy.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\sthtldwn.exe
              C:\WINDOWS\system32\sthtldwn.exe Has been deleted!

              Performing Repairs to the registry.
              Done!

              puis :
              Logfile of HijackThis v1.99.1
              Scan saved at 10:07:30, on 19/03/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16414)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Windows Defender\MsMpEng.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\netdde.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              C:\WINDOWS\system32\CTsvcCDA.EXE
              C:\WINDOWS\system32\DVDRAMSV.exe
              C:\Program Files\Mozy\mozybackup.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\wdfmgr.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\wbem\wmiprvse.exe
              C:\WINDOWS\system32\wbem\wmiapsrv.exe
              C:\WINDOWS\System32\alg.exe
              C:\Program Files\Apoint2K\Apoint.exe
              C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              C:\WINDOWS\system32\TCtrlIOHook.exe
              C:\WINDOWS\system32\TPSMain.exe
              C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
              C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              C:\WINDOWS\AGRSMMSG.exe
              C:\WINDOWS\system32\TPSBattM.exe
              C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
              C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              C:\Program Files\eSnips\ClientGW.exe
              C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
              C:\Program Files\Apoint2K\Apntex.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              C:\Program Files\a-squared Anti-Malware\a2guard.exe
              C:\Program Files\Windows Defender\MSASCui.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
              C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
              C:\Program Files\Mozilla Sunbird\sunbird.exe
              C:\WINDOWS\system32\NOTEPAD.EXE
              C:\Program Files\Mozilla Firefox\firefox.exe
              C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.10
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
              O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} - C:\WINDOWS\system32\ZiepodOneClicker.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
              O2 - BHO: (no name) - {C6A4F54A-7422-441E-BE69-FFEF7F5820E5} - C:\WINDOWS\system32\pmkji.dll (file missing)
              O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
              O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program Files\CoreStreet\SpoofStick\SpoofStick.dll
              O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program Files\eSnips\SnipBar.dll
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
              O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
              O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
              O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
              O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
              O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
              O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
              O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
              O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
              O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
              O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
              O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
              O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
              O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
              O8 - Extra context menu item: Snip to my eSnips account - C:\Program Files\eSnips\res\SnipIt.htm
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
              O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
              O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
              O11 - Options group: [INTERNATIONAL] International*
              O15 - Trusted Zone: *.hotmail.com
              O15 - Trusted Zone: login.live.com
              O15 - Trusted Zone: rad.msn.com
              O15 - Trusted Zone: *.msn.com
              O15 - Trusted Zone: *.passport.com
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite.net/dlmanager/versions/activex/dlm-activex-2.0.5.1.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
              O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
              O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer = 192.168.2.1,212.151.136.242
              O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
              O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
              O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
              O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
              O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          3. philae83 Contributeur sécurité
            bonjour,

            * Relance Vundofix
            * Ne clique pas sur "Scan for a vundo"
            * Clique droit au milieu de la fenêtre
            * Clique sur Add more files ?
            * Copie/colle le fichier ci-dessous :

            C:\WINDOWS\system32\sxmsgugq.dll

            * Clique sur Add files
            * Ensuite clique sur Close Windows
            * Enfin, clique sur Remove Vundo ( les fichiers précédents doivent apparaitre dans la fenêtre principale)
            * Si l'outils demande un redémarrage, accepte
            * Poste le rapport Vundofix,

            puis

            lance hijackthis pour un "scan seulement" et coche ces lignes :

            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: (no name) - {B07CB267-5E6F-441F-9B3C-324EFE70F897} - (no file)
            O2 - BHO: (no name) - {C6A4F54A-7422-441E-BE69-FFEF7F5820E5} - C:\WINDOWS\system32\pmkji.dll (file missing)
            O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS\system32\sxmsgugq.dll",setvm
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
            O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (Contrôleur de DownloadManager) - http://dlmanager.akamaitools.com.edgesuite.net/
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
            O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
            O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
            O20 - Winlogon Notify: iifgday - iifgday.dll (file missing)

            * ferme toutes les applications ouvertes y compris Internet Explorer et clique sur "fixer objet"

            * poste le rapport de vundo ainsi qu'un nouveau rapport hijackthis stp

            1. José
              Je viens de faire ce que tu m'as dis et je t'envoie le rapport de hijackthis.
              je viens de relancer vundofix, il ne m'a rien trouvé. J'ai surfé une bonne partie de l'après-midi et je n'ai pas eu de nouvelles fenêtres, est-ce solutionné? si c'est le cas, je te remercie beaucoup, car c'est tellement dur de se débarrasser de ces m....s !
              Logfile of HijackThis v1.99.1
              Scan saved at 17:46:57, on 19/03/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16414)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Windows Defender\MsMpEng.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\netdde.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              C:\WINDOWS\system32\CTsvcCDA.EXE
              C:\WINDOWS\system32\DVDRAMSV.exe
              C:\Program Files\Mozy\mozybackup.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\wdfmgr.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\wbem\wmiapsrv.exe
              C:\WINDOWS\System32\alg.exe
              C:\Program Files\Apoint2K\Apoint.exe
              C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              C:\WINDOWS\system32\TCtrlIOHook.exe
              C:\WINDOWS\system32\TPSMain.exe
              C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
              C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              C:\WINDOWS\system32\TPSBattM.exe
              C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              C:\Program Files\Apoint2K\Apntex.exe
              C:\WINDOWS\AGRSMMSG.exe
              C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
              C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              C:\Program Files\eSnips\ClientGW.exe
              C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              C:\Program Files\a-squared Anti-Malware\a2guard.exe
              C:\Program Files\Windows Defender\MSASCui.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
              C:\Documents and Settings\Marie-José\Mes documents\Telechargement\Scheduler\Scheduler.exe
              C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.10
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
              O2 - BHO: Ziepod One-Click IE Helper - {57A30D1E-08B9-4EF4-B273-AAEA1C234A5B} - C:\WINDOWS\system32\ZiepodOneClicker.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program Files\CoreStreet\SpoofStick\SpoofStickBHO.dll
              O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program Files\CoreStreet\SpoofStick\SpoofStick.dll
              O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\Program Files\eSnips\SnipBar.dll
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
              O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
              O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
              O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
              O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
              O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
              O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
              O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              O4 - HKLM\..\Run: [eSnips] "C:\Program Files\eSnips\ClientGW.exe"
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
              O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
              O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
              O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
              O4 - Startup: Raccourci vers Scheduler.lnk = Telechargement\Scheduler\Scheduler.exe
              O4 - Startup: Raccourci vers sunbird.lnk = C:\Program Files\Mozilla Sunbird\sunbird.exe
              O8 - Extra context menu item: Snip to my eSnips account - C:\Program Files\eSnips\res\SnipIt.htm
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
              O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
              O11 - Options group: [INTERNATIONAL] International*
              O15 - Trusted Zone: *.hotmail.com
              O15 - Trusted Zone: login.live.com
              O15 - Trusted Zone: rad.msn.com
              O15 - Trusted Zone: *.msn.com
              O15 - Trusted Zone: *.passport.com
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CCS\Services\Tcpip\..\{6EA88302-A52D-4049-9513-4375519C81A4}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB24AC5-0D8C-429F-A69A-A602BA66AA93}: NameServer = 192.168.2.1,212.151.136.242
              O17 - HKLM\System\CS1\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O17 - HKLM\System\CS2\Services\Tcpip\..\{13C68F9D-9EF0-4A22-A39C-D49971CDEE73}: NameServer = 192.168.2.1,212.151.136.242,212.151.136.246
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
              O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
              O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
              O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
              O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          4. philae83 Contributeur sécurité
            re

            si tu n'as plus de soucis de ton côté, le dernier rapport hijackthis lui est ok.

            Discussions similaires

            Problème de clavier, des fenêtre s'ouvrent !!
            Lyon691D

            5 réponses
            Clavier ouvre raccourcis
            angellee

            11 réponses
            Mon pc ouvre des fenêtres et le clavier écrit
            Louise19

            3 réponses
            Comment fermer les onglets facilement sur iPad 11
            icecream1949-1944

            8 réponses
            Afficher deux fenêtres côte à côte
            ptitchinoise

            11 réponses