florencem

Bonjour, Merci d'avoir répondu. Il est vrai que je n'ai pas donné bcq d'explications. - Ordi très lent - Page de redirection - Enormément de dll de taille 0k sous windows, windows\system J'ai effectué toutes les tâches décrites. Cependant certaines réapparaisent dans le log, c'est le cas des lignes R1 Merci Dernier log : Logfile of HijackThis v1.99.1 Scan saved at 17:10:30, on 20/04/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\SA3DSRV.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\AVSYNMGR.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\USBSTORAGE\USBDETECTOR.EXE C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE C:\PROGRAM FILES\HP DESKJET 610C SERIES\EREG\REMIND32.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\VSSTAT.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\AVCONSOL.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\VSHWIN32.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\WEBSCANX.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWS\BUREAU\HIJACKTHIS.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirec...c=080C&s=search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirec...c=080C&s=search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirec...c=080C&s=search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [systemTray] SysTray.Exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [Aureal A3D Interactive Audio Init] A3dInit.exe O4 - HKLM\..\Run: [Compaq Internet Setup] C:\Compaq\Internet\InetWizard.exe /RUN O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime O4 - HKLM\..\Run: [uSBDetector] C:\USBStorage\USBDetector.exe O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [Aureal A3D Interactive Audio] sa3dsrv.exe O4 - HKLM\..\RunServices: [schedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [McAfeeVirusScanService] c:\Program Files\Network Associates\VirusScan\AVSYNMGR.EXE O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background O4 - HKCU\..\RunServices: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O4 - Startup: PowerReg Scheduler.exe O4 - Startup: Reminder-hpc41003.lnk = C:\Program Files\HP DeskJet 610C Series\ereg\Remind32.exe

Bonjour, Quelqu'un peut-il interpréter ce log et me conseiller pour les supp. Merci. Logfile of HijackThis v1.99.1 Scan saved at 10:22:03, on 20/04/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\SA3DSRV.EXE C:\WINDOWS\CPQDIAG\CPQDFWAG.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\AVSYNMGR.EXE C:\WINDOWS\SYSTEM\MSOB32.EXE C:\WINDOWS\SYSTEM\APPAY32.EXE C:\WINDOWS\NTIR.EXE C:\WINDOWS\SYSTEM\IPGC.EXE C:\WINDOWS\ATLZI32.EXE C:\WINDOWS\SYSTEM\IPQL.EXE C:\WINDOWS\IEUS32.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\D3OE32.EXE C:\WINDOWS\SYSTEM\NTOS32.EXE C:\WINDOWS\IEQW32.EXE C:\WINDOWS\SYSTEM\ATLBA.EXE C:\WINDOWS\SYSTEM\MSQA32.EXE C:\WINDOWS\APPCC32.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\APPDO.EXE C:\WINDOWS\SYSTEM\JAVAWV32.EXE C:\WINDOWS\SYSTEM\IPGC32.EXE C:\WINDOWS\WINVC.EXE C:\WINDOWS\SYSTEM\CRCA.EXE C:\WINDOWS\WINLD32.EXE C:\WINDOWS\MSPN.EXE C:\WINDOWS\SYSTEM\ATLOX.EXE C:\WINDOWS\ATLUM32.EXE C:\WINDOWS\NTFT.EXE C:\WINDOWS\SYSUD32.EXE C:\WINDOWS\ADDYW32.EXE C:\WINDOWS\NTEP32.EXE C:\WINDOWS\SYSTEM\MSTG.EXE C:\WINDOWS\IEHL32.EXE C:\WINDOWS\IPXV.EXE C:\WINDOWS\SYSTEM\D3DA32.EXE C:\WINDOWS\SYSHB32.EXE C:\WINDOWS\WINBP32.EXE C:\WINDOWS\IPHD.EXE C:\WINDOWS\SYSTEM\MSYW32.EXE C:\WINDOWS\SYSTEM\NETET32.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\MOUSE\SYSTEM\EM_EXEC.EXE C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE C:\COMPAQ\INTERNET\CISRVR.EXE C:\WINDOWS\LOADQM.EXE C:\WINDOWS\SYSTEM\QTTASK.EXE C:\WINDOWS\SYSTEM\IGFXTRAY.EXE C:\WINDOWS\SYSTEM\HKCMD.EXE C:\USBSTORAGE\USBDETECTOR.EXE C:\WINDOWS\IPSX32.EXE C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE C:\PROGRAM FILES\HP DESKJET 610C SERIES\EREG\REMIND32.EXE C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\SYSTEM\APPAY32.EXE C:\PROGRAM FILES\COMPAQ\ON-SCREEN DISPLAY\OSD.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\VSSTAT.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\AVCONSOL.EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\VSHWIN32.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWS\BUREAU\HIJACKTHIS.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\vywpk.dll/sp.html#12345 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - Default URLSearchHook is missing F1 - win.ini: run=hpfsched O2 - BHO: Class - {11BFA2A5-3764-8F18-ABD7-E340FEE4F763} - C:\WINDOWS\ATLBT32.DLL O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [systemTray] SysTray.Exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [EM_EXEC] c:\mouse\system\em_exec.exe O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe O4 - HKLM\..\Run: [Aureal A3D Interactive Audio Init] A3dInit.exe O4 - HKLM\..\Run: [Compaq Internet Setup] C:\Compaq\Internet\InetWizard.exe /RUN O4 - HKLM\..\Run: [CISrvr Program] C:\COMPAQ\INTERNET\CISRVR.EXE O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\SYSTEM\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\SYSTEM\hkcmd.exe O4 - HKLM\..\Run: [uSBDetector] C:\USBStorage\USBDetector.exe O4 - HKLM\..\Run: [iPSX32.EXE] C:\WINDOWS\IPSX32.EXE O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [HC Reminder] hc.exe O4 - HKLM\..\RunServices: [Aureal A3D Interactive Audio] sa3dsrv.exe O4 - HKLM\..\RunServices: [CPQDFWAG] C:\WINDOWS\cpqdiag\CpqDfwAg.exe O4 - HKLM\..\RunServices: [schedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [McAfeeVirusScanService] c:\Program Files\Network Associates\VirusScan\AVSYNMGR.EXE O4 - HKLM\..\RunServices: [MSOB32.EXE] C:\WINDOWS\SYSTEM\MSOB32.EXE /s O4 - HKLM\..\RunServices: [APPAY32.EXE] C:\WINDOWS\SYSTEM\APPAY32.EXE /s O4 - HKLM\..\RunServices: [NTIR.EXE] C:\WINDOWS\NTIR.EXE /s O4 - HKLM\..\RunServices: [iPGC.EXE] C:\WINDOWS\SYSTEM\IPGC.EXE /s O4 - HKLM\..\RunServices: [ATLZI32.EXE] C:\WINDOWS\ATLZI32.EXE /s O4 - HKLM\..\RunServices: [iPQL.EXE] C:\WINDOWS\SYSTEM\IPQL.EXE /s O4 - HKLM\..\RunServices: [iEUS32.EXE] C:\WINDOWS\IEUS32.EXE /s O4 - HKLM\..\RunServices: [D3OE32.EXE] C:\WINDOWS\D3OE32.EXE /s O4 - HKLM\..\RunServices: [NTOS32.EXE] C:\WINDOWS\SYSTEM\NTOS32.EXE /s O4 - HKLM\..\RunServices: [iEQW32.EXE] C:\WINDOWS\IEQW32.EXE /s O4 - HKLM\..\RunServices: [ATLBA.EXE] C:\WINDOWS\SYSTEM\ATLBA.EXE /s O4 - HKLM\..\RunServices: [MSQA32.EXE] C:\WINDOWS\SYSTEM\MSQA32.EXE /s O4 - HKLM\..\RunServices: [APPCC32.EXE] C:\WINDOWS\APPCC32.EXE /s O4 - HKLM\..\RunServices: [APPDO.EXE] C:\WINDOWS\SYSTEM\APPDO.EXE /s O4 - HKLM\..\RunServices: [JAVAWV32.EXE] C:\WINDOWS\SYSTEM\JAVAWV32.EXE /s O4 - HKLM\..\RunServices: [iPGC32.EXE] C:\WINDOWS\SYSTEM\IPGC32.EXE /s O4 - HKLM\..\RunServices: [WINVC.EXE] C:\WINDOWS\WINVC.EXE /s O4 - HKLM\..\RunServices: [CRCA.EXE] C:\WINDOWS\SYSTEM\CRCA.EXE /s O4 - HKLM\..\RunServices: [WINLD32.EXE] C:\WINDOWS\WINLD32.EXE /s O4 - HKLM\..\RunServices: [MSPN.EXE] C:\WINDOWS\MSPN.EXE /s O4 - HKLM\..\RunServices: [ATLOX.EXE] C:\WINDOWS\SYSTEM\ATLOX.EXE /s O4 - HKLM\..\RunServices: [ATLUM32.EXE] C:\WINDOWS\ATLUM32.EXE /s O4 - HKLM\..\RunServices: [NTFT.EXE] C:\WINDOWS\NTFT.EXE /s O4 - HKLM\..\RunServices: [sYSUD32.EXE] C:\WINDOWS\SYSUD32.EXE /s O4 - HKLM\..\RunServices: [ADDYW32.EXE] C:\WINDOWS\ADDYW32.EXE /s O4 - HKLM\..\RunServices: [NTEP32.EXE] C:\WINDOWS\NTEP32.EXE /s O4 - HKLM\..\RunServices: [MSTG.EXE] C:\WINDOWS\SYSTEM\MSTG.EXE /s O4 - HKLM\..\RunServices: [iEHL32.EXE] C:\WINDOWS\IEHL32.EXE /s O4 - HKLM\..\RunServices: [iPXV.EXE] C:\WINDOWS\IPXV.EXE /s O4 - HKLM\..\RunServices: [D3DA32.EXE] C:\WINDOWS\SYSTEM\D3DA32.EXE /s O4 - HKLM\..\RunServices: [sYSHB32.EXE] C:\WINDOWS\SYSHB32.EXE /s O4 - HKLM\..\RunServices: [WINBP32.EXE] C:\WINDOWS\WINBP32.EXE /s O4 - HKLM\..\RunServices: [iPHD.EXE] C:\WINDOWS\IPHD.EXE /s O4 - HKLM\..\RunServices: [MSYW32.EXE] C:\WINDOWS\SYSTEM\MSYW32.EXE /s O4 - HKLM\..\RunServices: [NETET32.EXE] C:\WINDOWS\SYSTEM\NETET32.EXE /s O4 - HKLM\..\RunOnce: [winay.exe] C:\WINDOWS\winay.exe O4 - HKLM\..\RunOnce: [winrk32.exe] C:\WINDOWS\system\winrk32.exe O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background O4 - HKCU\..\RunServices: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O4 - Startup: PowerReg Scheduler.exe O4 - Startup: Reminder-hpc41003.lnk = C:\Program Files\HP DeskJet 610C Series\ereg\Remind32.exe