Angevil

Après un coup de TFC et une analyse complète de l'antivirus en mode sans échec, je n'ai plus de soucis. Voici cependant les rapports demandés: RKreport[1]: RogueKiller V5.1.6 [21/05/2011] par Tigzy contact sur Forum Sciences / Forum Informatique - Sur la Toile (SLT) mail: tigzyRK<at>gmail<dot>com Remontees: [RogueKiller] Remontées (1/23) Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Josh Five [Droits d'admin] Mode: Recherche -- Date : 25/05/2011 18:37:48 Processus malicieux: 2 [sUSP PATH] SOUNDMAN.EXE -- c:\window\soundman.exe -> KILLED [RESIDUE] GoogleUpdate.exe -- c:\documents and settings\josh five.family-computer\local settings\application data\google\update\googleupdate.exe -> KILLED Entrees de registre: 11 [sUSP PATH] HKCU\[...]\Run : windows_defender (C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe) -> FOUND [sUSP PATH] HKCU\[...]\Run : {68B8DD3D-4578-72EB-F2F5-054BA9A88F31} ("C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Application Data\Xalyu\gyowm.exe") -> FOUND [sUSP PATH] HKLM\[...]\Run : windows_defender (C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe) -> FOUND [bLACKLIST DLL] HKUS\S-1-5-19[...]\Run : zebirurolu (Rundll32.exe "C:\WINDOW\system32\jamijogu.dll",s) -> FOUND [bLACKLIST DLL] HKUS\S-1-5-20[...]\Run : zebirurolu (Rundll32.exe "C:\WINDOW\system32\jamijogu.dll",s) -> FOUND [sUSP PATH] HKUS\S-1-5-21-1844237615-963894560-725345543-1004[...]\Run : windows_defender (C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe) -> FOUND [sUSP PATH] HKUS\S-1-5-21-1844237615-963894560-725345543-1004[...]\Run : {68B8DD3D-4578-72EB-F2F5-054BA9A88F31} ("C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Application Data\Xalyu\gyowm.exe") -> FOUND [sUSP PATH] GoogleUpdateTaskUserS-1-5-21-1844237615-963894560-725345543-1004UA.job : c:\documents and settings\josh five.family-computer\local -> FOUND [sUSP PATH] GoogleUpdateTaskUserS-1-5-21-1844237615-963894560-725345543-1004Core.job : c:\documents and settings\josh five.family-computer\local -> FOUND [DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{261D2EBC-4A57-40CC-9C5D-17F082C8CF8C} : NameServer (8.8.8.8,8.8.4.4) -> FOUND [DNS] HKLM\[...]\ControlSet003\Parameters\Interfaces\{261D2EBC-4A57-40CC-9C5D-17F082C8CF8C} : NameServer (8.8.8.8,8.8.4.4) -> FOUND Fichier HOSTS: 127.0.0.1 localhost 74.208.105.171 gs.apple.com 127.0.0.1 myohrid.com Termine : << RKreport[1].txt >> RKreport[1].txt ------------------------------------------------------------------------------- RKreport[2]: RogueKiller V5.1.6 [21/05/2011] par Tigzy contact sur Forum Sciences / Forum Informatique - Sur la Toile (SLT) mail: tigzyRK<at>gmail<dot>com Remontees: [RogueKiller] Remontées (1/23) Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Josh Five [Droits d'admin] Mode: Suppression -- Date : 25/05/2011 18:38:16 Processus malicieux: 0 Entrees de registre: 9 [sUSP PATH] HKCU\[...]\Run : windows_defender (C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe) -> DELETED [sUSP PATH] HKCU\[...]\Run : {68B8DD3D-4578-72EB-F2F5-054BA9A88F31} ("C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Application Data\Xalyu\gyowm.exe") -> DELETED [sUSP PATH] HKLM\[...]\Run : windows_defender (C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe) -> DELETED [bLACKLIST DLL] HKUS\S-1-5-19[...]\Run : zebirurolu (Rundll32.exe "C:\WINDOW\system32\jamijogu.dll",s) -> DELETED [bLACKLIST DLL] HKUS\S-1-5-20[...]\Run : zebirurolu (Rundll32.exe "C:\WINDOW\system32\jamijogu.dll",s) -> DELETED [sUSP PATH] GoogleUpdateTaskUserS-1-5-21-1844237615-963894560-725345543-1004UA.job : c:\documents and settings\josh five.family-computer\local -> ERROR [sUSP PATH] GoogleUpdateTaskUserS-1-5-21-1844237615-963894560-725345543-1004Core.job : c:\documents and settings\josh five.family-computer\local -> ERROR [DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{261D2EBC-4A57-40CC-9C5D-17F082C8CF8C} : NameServer (8.8.8.8,8.8.4.4) -> NOT REMOVED, USE DNSFIX [DNS] HKLM\[...]\ControlSet003\Parameters\Interfaces\{261D2EBC-4A57-40CC-9C5D-17F082C8CF8C} : NameServer (8.8.8.8,8.8.4.4) -> NOT REMOVED, USE DNSFIX Fichier HOSTS: 127.0.0.1 localhost 74.208.105.171 gs.apple.com 127.0.0.1 myohrid.com Termine : << RKreport[2].txt >> RKreport[1].txt ; RKreport[2].txt Merci pour le coup de main, et la rapidité des réponses

Bonjour, après avoir reçu un mail douteux, j'ai (par grande mégarde)ouvert le contenu de la pièce jointe. Il s'agissait d'un fichier vbs qui a téléchargé le fichier "thasc.exe" du site myohrid. Les symptômes ne se sont pas fait attendre: toutes les dix secondes mon lecteur disquette grince. Par contre, nod32 n'a pas du tout réagi face à l'infection et j'ai déjà effectué un nettoyage avec Ccleaner en mode sans echec. De plus, je ne vois pas grand chose de suspect dans mon log Hijackthis: Logfile of HijackThis v1.99.1 Scan saved at 16:57:44, on 25/05/2011 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Running processes: C:\WINDOW\System32\smss.exe C:\WINDOW\system32\winlogon.exe C:\WINDOW\system32\services.exe C:\WINDOW\system32\lsass.exe C:\WINDOW\system32\svchost.exe C:\WINDOW\System32\svchost.exe C:\WINDOW\system32\spoolsv.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Steganos Internet Anonym VPN\AVPNStarter.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOW\system32\cisvc.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\WINDOW\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOW\System32\svchost.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOW\System32\nvsvc32.exe C:\WINDOW\System32\svchost.exe C:\WINDOW\system32\PnkBstrA.exe C:\WINDOW\System32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\WINDOW\Explorer.EXE C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOW\SOUNDMAN.EXE C:\WINDOW\system32\RUNDLL32.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\WINDOW\System32\svchost.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOW\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\MagicDisc\MagicDisc.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOW\system32\wuauclt.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\25078.EXE C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\29815.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOW\system32\wuauclt.exe C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Bureau\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: 74.208.105.171 gs.apple.com O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Iminent.SearchTheWeb.HelperObject - {0E896FCA-D07E-45FE-901F-6A26FCF59C02} - mscoree.dll (file missing) O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOW\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOW\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [windows_defender] C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOW\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [windows_defender] C:\DOCUME~1\JOSHFI~1.FAM\LOCALS~1\Temp\svchost.exe O4 - HKCU\..\Run: [{68B8DD3D-4578-72EB-F2F5-054BA9A88F31}] "C:\Documents and Settings\Josh Five.FAMILY-COMPUTER\Application Data\Xalyu\gyowm.exe" O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\WINDOW\System32\shdocvw.dll O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\WINDOW\System32\shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} (RIM AxLoader) - http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{261D2EBC-4A57-40CC-9C5D-17F082C8CF8C}: NameServer = 8.8.8.8,8.8.4.4 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: ??????P O20 - Winlogon Notify: pmnmnOfG - C:\WINDOW\ O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOW\system32\WPDShServiceObj.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Kaspersky Internet Security (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" -r (file missing) O23 - Service: Steganos Anonym VPN Starter Service (AVPNStarter) - Unknown owner - C:\Program Files\Steganos Internet Anonym VPN\AVPNStarter.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing) O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOW\System32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOW\system32\PnkBstrA.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe Merci d'avance pour votre aide. Cordialement.

lol, t'inquiettes pas home64, tu m'as bien aidé, et j'ai apris pas mal de chose mais il reste encore quelque chose qui me tracasse; j'ai foutu deux barettes de 256 pc133 avec une barette de 256 pc100 et je n'ai que 320Mo de RAM à quoi est-ce dut? :s

lol, mais dis moi, tant que j'y pense, on est en quelle année là? xD

desolé de repondre aussi tardivement, mais en fin de compte, c'est le DD qui etait mort :/ merci enormement de m'avoir aidé et guidé home64 et JANGO-FEET. vraiment la poisse à chaque fois que j'ouvre un pc; cette fois ci, c'est le DD qui a mouru et avec un autre pc, c'etait la carte mere qui a grillé

Donc mon lecteur de disquette est bien installé, mon lecteur cd aussi aparemment mais je ne sais pas si mon disque dur est detecté; peux tu me guider stp pour verifier ca? http://img519.imageshack.us/img519/1603/bios1qu5.jpg mon bios s'aparente à celui ci

Et sans vouloir faire le noob, comment puis-je savoir ca?

Excuse moi, mais t'entends quoi par encoché?

oui, j'ai le bip qui se fait entendre...

Slt les zebulonniens, Je me tourne vers vous aujourd'hui pour votre efficacité et surtout parceque j'ai fait une grosse gaffe en voulant faire Mr. Le Bricoleur ^^" J'ai ouvert mon vieux pc pour nettoyer la poussiere et là, en debranchant/rebranchant certaines choses pour pouvoir bien tout enlever à cause du bordel que faisaient les fils, en le ralumant, je vois qu'il ne continu pas son boot et qu'il s'arrete sur l'ecran noir avec le curseur clignotant en haut à gauche Juste avant que ne s'affiche l'ecran noir, j'ai quand meme l'ecran suivant pour acceder aux options du bios J'ai dejà essayé de faire un boot avec cd et meme disquette mais ca me fait toujours la meme chose... Si quelqu'un sait d'ou ca peu bien venir, celà me serait d'une grande aide merci encore PS: desolé pour la qualité de la photo

Merci d'avoir repondu à mon post. Donc voici les rapports demandés: VundoFix V6.3.15 Checking Java version... Java version is 1.4.2.3 Old versions of java are exploitable and should be removed. Java version is 1.5.0.6 Old versions of java are exploitable and should be removed. Java version is 1.5.0.9 Old versions of java are exploitable and should be removed. Java version is 1.5.0.10 Scan started at 16:11:04 07/03/2007 Listing files found while scanning.... C:\WINDOWS2\system32\aunbjrhi.dll C:\WINDOWS2\system32\cgvrylbh.exe C:\WINDOWS2\system32\ddmeiihl.exe C:\WINDOWS2\system32\diqkundf.ini C:\WINDOWS2\system32\fdnukqid.dll C:\WINDOWS2\system32\gldesrla.exe C:\WINDOWS2\system32\gsdmqvfx.exe C:\WINDOWS2\system32\htowhoaq.exe C:\WINDOWS2\system32\irqmjoua.exe C:\WINDOWS2\system32\jweipcif.exe C:\WINDOWS2\system32\mfaihhis.exe C:\WINDOWS2\system32\mqapnxeg.exe C:\WINDOWS2\system32\pmnlmkl.dll C:\WINDOWS2\system32\qhxfpnbf.exe C:\WINDOWS2\system32\scnnrgsc.exe C:\WINDOWS2\system32\ssqqrrq.dll C:\WINDOWS2\system32\ssqrr.dll C:\WINDOWS2\system32\uxlloxuh.exe C:\WINDOWS2\system32\xoyvmuvo.exe C:\WINDOWS2\system32\xxyyvuu.dll Beginning removal... Attempting to delete C:\WINDOWS2\system32\cgvrylbh.exe C:\WINDOWS2\system32\cgvrylbh.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\ddmeiihl.exe C:\WINDOWS2\system32\ddmeiihl.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\diqkundf.ini C:\WINDOWS2\system32\diqkundf.ini Has been deleted! Attempting to delete C:\WINDOWS2\system32\fdnukqid.dll C:\WINDOWS2\system32\fdnukqid.dll Has been deleted! Attempting to delete C:\WINDOWS2\system32\gldesrla.exe C:\WINDOWS2\system32\gldesrla.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\gsdmqvfx.exe C:\WINDOWS2\system32\gsdmqvfx.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\htowhoaq.exe C:\WINDOWS2\system32\htowhoaq.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\irqmjoua.exe C:\WINDOWS2\system32\irqmjoua.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\jweipcif.exe C:\WINDOWS2\system32\jweipcif.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\mfaihhis.exe C:\WINDOWS2\system32\mfaihhis.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\mqapnxeg.exe C:\WINDOWS2\system32\mqapnxeg.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\pmnlmkl.dll C:\WINDOWS2\system32\pmnlmkl.dll Has been deleted! Attempting to delete C:\WINDOWS2\system32\qhxfpnbf.exe C:\WINDOWS2\system32\qhxfpnbf.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\scnnrgsc.exe C:\WINDOWS2\system32\scnnrgsc.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\ssqqrrq.dll C:\WINDOWS2\system32\ssqqrrq.dll Has been deleted! Attempting to delete C:\WINDOWS2\system32\ssqrr.dll C:\WINDOWS2\system32\ssqrr.dll Has been deleted! Attempting to delete C:\WINDOWS2\system32\uxlloxuh.exe C:\WINDOWS2\system32\uxlloxuh.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\xoyvmuvo.exe C:\WINDOWS2\system32\xoyvmuvo.exe Has been deleted! Attempting to delete C:\WINDOWS2\system32\xxyyvuu.dll C:\WINDOWS2\system32\xxyyvuu.dll Has been deleted! Performing Repairs to the registry. Done! Logfile of HijackThis v1.99.1 Scan saved at 16:42:32, on 07/03/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS2\System32\smss.exe C:\WINDOWS2\system32\winlogon.exe C:\WINDOWS2\system32\services.exe C:\WINDOWS2\system32\lsass.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\ZoneLabs\vsmon.exe C:\WINDOWS2\system32\spoolsv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS2\system32\cisvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS2\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\Explorer.EXE C:\WINDOWS2\system32\ctfmon.exe C:\WINDOWS2\SOUNDMAN.EXE C:\WINDOWS2\System32\svchost.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS2\system32\RUNDLL32.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS2\system32\cidaemon.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {915CBBED-BCE1-4B0C-9457-CF1045DDCCBF} - C:\WINDOWS2\system32\ssqrr.dll (file missing) O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS2\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS2\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1036 O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS2\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS2\system32\euvmoikj.dll",setvm O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS2\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS2\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS2\system32\ZoneLabs\vsmon.exe

Donc voilà, je suis de retour avec de nouvelles saletés sur mon pc. Certaines de ces saletés m'ouvrent des fenetres pour telecharger des sois disant antivirus et d'autres, me font rebooter mon pc avec une erreur winlogon suivit d'un ecran bleu disant que le systeme doit etre arreté. Voici donc mon log HiJackThis: Logfile of HijackThis v1.99.1 Scan saved at 16:42:07, on 06/03/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS2\System32\smss.exe C:\WINDOWS2\system32\winlogon.exe C:\WINDOWS2\system32\services.exe C:\WINDOWS2\system32\lsass.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\ZoneLabs\vsmon.exe C:\WINDOWS2\system32\spoolsv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS2\system32\cisvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS2\system32\nvsvc32.exe C:\WINDOWS2\system32\ctfmon.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\Explorer.EXE C:\WINDOWS2\SOUNDMAN.EXE C:\WINDOWS2\System32\svchost.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS2\system32\RUNDLL32.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\WINDOWS2\system32\cidaemon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS2\system32\wuauclt.exe C:\Program Files\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS2\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS2\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1036 O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS2\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS2\system32\fdnukqid.dll",setvm O4 - HKLM\..\Run: [2chkdsk] rundll32.exe "C:\WINDOWS2\system32\euvmoikj.dll",setvm O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS2\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS2\system32\ZoneLabs\vsmon.exe Merci encore une fois pour l'aide que vous apportez à de petits desesperés comme nous ayant envi que d'une chose: eclater son pc pour en eradiquer les saloperies... PS: voici le message d'erreur winlogon

Donc effectivement, hormis deux cookies, le scan antispyware a rien trouvé. J'attends par contre toujours la fin de l'analyse housecall 6.5

Oui, il a nettoyé pas mal de truc, mais pour le scan housecall 6.5, il est en cours depuis 10h du matin et est toujours pas fini; c'est normal?

Ok, mais pour le scan anti-spyware trendmicro, j'ai pas capté comment avoir le rapport :s

Lut regis, Donc j'ai essayé de faire une analyse via ie7 en desactivant tous firewall antivirus et fait un netoyage de cookies etc... et ca foire :/ au moment de choisir le périphérique à analyser, ca me met "Erreur sur la page"...

Donc voici les logs demandé (en esperant que cette fois, j'ai bien utilisé avg ^^") --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 13:26:54 14/02/2007 + Résultat de l'analyse: Fin du rapport

Ok ok ^^ , merci encore regis56, j'admire vraiment le boulot que tu fournis sur ce forum. Je fais l'analyse demain et je posterai tout ca le meme jour Sur ce, bonne soirée et merci encore

Excuse moi, mais j'ai pas vraiment compris, j'ai bien ou mal utilisé AVG? (aparemment, mal, mais je prefere avoir une certification ^^ Sinon, j'ai telecharger LspFix mais je fais quoi avec? je l'execute? Et pour finir, je n'ai pas de NewDoNet dans C:/Program Files et je ne l'ai egalement pas dans ajout/suppression de programme...

Donc voici ce que tu m'as demandé --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 17:21:06 13/02/2007 + Résultat de l'analyse: C:\Program Files\Screensavers.com\Installer\bin\ScreensaversInst.dll -> Adware.Comet : Aucune action entreprise. C:\Program Files\themexp\Themexp.org File\NNWDAB638.EXE -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0085704.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0086442.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0086546.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0088945.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0096640.EXE -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0097036.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0097037.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0100095.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0104666.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0104678.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0107120.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0107509.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0109616.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0111152.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0112333.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0113209.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0114587.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0115551.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0115637.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0115734.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0115798.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0117217.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0117573.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0120245.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0122509.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP11\A0122750.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053804.EXE -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0054085.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0055834.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0061188.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0061604.EXE -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0068234.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0070907.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0071677.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0073292.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0073401.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0078068.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0078383.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0079507.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0081563.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0081795.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0083931.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0084990.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0085148.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0085185.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0085258.dll -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP9\A0085404.exe -> Adware.NewDotNet : Aucune action entreprise. C:\System Volume Information\_restore{A39C6859-0F78-49E4-8E9B-740187DAB6B7}\RP289\A0612470.exe -> Adware.NewDotNet : Aucune action entreprise. C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Aucune action entreprise. C:\WINDOWS\NDNuninstall7_22.exe -> Adware.NewDotNet : Aucune action entreprise. C:\Program Files\Ezthemes_WhenUSaveNow_Installer\Ezthemes_WhenUSaveNow_Installer.exe -> Adware.SaveNow : Aucune action entreprise. C:\Program Files\Save -> Adware.SaveNow : Aucune action entreprise. C:\Program Files\Save\SaveUninst.exe -> Adware.SaveNow : Aucune action entreprise. C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNowCrunch_InstallerInst.exe -> Adware.SaveNow : Aucune action entreprise. C:\Program Files\themexp\Themexp.org File\Ezthemes_WhenUSaveNow_InstallerInst.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0096636.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0096637.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0096675.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP10\A0101291.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053805.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053819.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053820.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053821.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053827.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053828.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0053829.dll -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0061563.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0061600.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{5EDE8202-E84C-48D1-91CA-EDC4AEFF22EA}\RP8\A0061601.exe -> Adware.SaveNow : Aucune action entreprise. C:\System Volume Information\_restore{A39C6859-0F78-49E4-8E9B-740187DAB6B7}\RP289\A0612465.exe -> Adware.SaveNow : Aucune action entreprise. C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Mes documents\Downloads\R6VEGAS NO-CD.rar/Veags patch.EXE/server.exe -> Backdoor.Bifrose.acs : Aucune action entreprise. C:\Program Files\Gamenext\Cash Cow\CashCow.exe -> Downloader.Small : Aucune action entreprise. :mozilla.19:C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data\Mozilla\Firefox\Profiles\ghhyl4yv.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise. :mozilla.20:C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data\Mozilla\Firefox\Profiles\ghhyl4yv.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise. :mozilla.21:C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data\Mozilla\Firefox\Profiles\ghhyl4yv.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise. :mozilla.18:C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data\Mozilla\Firefox\Profiles\ghhyl4yv.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise. C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Cookies\angevil@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise. :mozilla.6:C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data\Mozilla\Firefox\Profiles\ghhyl4yv.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise. C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Cookies\angevil@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise. C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Bureau\Warez\Appz\Alcohol_120__v1.9.5.3823__cracked_.rar/Alcohol_120__v1.9.5.3823 (cracked)\activator\activator.exe -> Trojan.Agent.sk : Aucune action entreprise. C:\System Volume Information\_restore{A39C6859-0F78-49E4-8E9B-740187DAB6B7}\RP289\A0612464.exe -> Trojan.Agent.sk : Aucune action entreprise. C:\WINDOWS\hosts -> Trojan.Qhosts.HE : Aucune action entreprise. Fin du rapport Logfile of HijackThis v1.99.1 Scan saved at 20:04:55, on 13/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS2\System32\smss.exe C:\WINDOWS2\system32\winlogon.exe C:\WINDOWS2\system32\services.exe C:\WINDOWS2\system32\lsass.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\spoolsv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS2\system32\cisvc.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe C:\WINDOWS2\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS2\System32\svchost.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe C:\WINDOWS2\system32\cidaemon.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS2\Explorer.EXE C:\WINDOWS2\system32\ctfmon.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe C:\WINDOWS2\SOUNDMAN.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS2\system32\RUNDLL32.EXE C:\Program Files\TomTom HOME\TomTomHOME.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Bureau\blbeta.exe C:\Program Files\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS2\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS2\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS2\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1036 O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\ctfmon.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS2\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS2\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: app_filter - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe O23 - Service: WinFast® Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe Rapport BlackLight 02/13/07 20:04:19 [info]: BlackLight Engine 1.0.55 initialized 02/13/07 20:04:19 [info]: OS: 5.1 build 2600 (Service Pack 2) 02/13/07 20:04:19 [Note]: 7019 4 02/13/07 20:04:19 [Note]: 7005 0 02/13/07 20:04:23 [Note]: 7006 0 02/13/07 20:04:23 [Note]: 7011 3528 02/13/07 20:04:23 [Note]: 7026 0 02/13/07 20:04:24 [Note]: 7026 0 02/13/07 20:04:24 [Note]: 7015 412 02/13/07 20:04:24 [Note]: 7015 5 02/13/07 20:04:24 [Note]: 7015 556 02/13/07 20:04:24 [Note]: 7015 5 02/13/07 20:04:24 [Note]: 7015 5972 02/13/07 20:04:24 [Note]: 7015 5 02/13/07 20:04:31 [Note]: FSRAW library version 1.7.1021 02/13/07 20:11:51 [Note]: 7007 0 Voili voulou, en tout cas, je voudrai vraiment te remercier pour tout ce que tu fais benevolement pour tous les membres de ce forum

Rapport SmitFraudFix SmitFraudFix v2.141 Rapport fait à 19:07:42.12, 12/02/2007 Executé à partir de C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Bureau\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Le type du système de fichiers est NTFS Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS2 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS2\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS2\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS2\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS2\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Angevil.HAJRI-Y7EFEDYV6\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ANGEVI~1.HAJ\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="wbsys.dll" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32 »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin Rapport BlackLight 02/12/07 19:11:07 [info]: BlackLight Engine 1.0.55 initialized 02/12/07 19:11:07 [info]: OS: 5.1 build 2600 (Service Pack 2) 02/12/07 19:11:07 [Note]: 7019 4 02/12/07 19:11:07 [Note]: 7005 0 02/12/07 19:11:10 [Note]: 7006 0 02/12/07 19:11:11 [Note]: 7011 4888 02/12/07 19:11:11 [Note]: 7026 0 02/12/07 19:11:11 [Note]: 7026 0 02/12/07 19:11:11 [Note]: 7015 416 02/12/07 19:11:11 [Note]: 7015 5 02/12/07 19:11:11 [Note]: 7015 560 02/12/07 19:11:11 [Note]: 7015 5 02/12/07 19:11:11 [Note]: 7015 1532 02/12/07 19:11:11 [Note]: 7015 5 02/12/07 19:11:11 [Note]: 7024 3 02/12/07 19:11:11 [info]: Hidden process: C:\windows2\system32\yrcwizewpa.exe 02/12/07 19:11:11 [Note]: 7015 4068 02/12/07 19:11:11 [Note]: 7015 5 02/12/07 19:11:11 [Note]: 7024 3 02/12/07 19:11:11 [info]: Hidden process: C:\windows2\system32\yrcwizewpa.exe 02/12/07 19:11:16 [Note]: FSRAW library version 1.7.1021 02/12/07 19:20:54 [info]: Hidden file: c:\WINDOWS2\system32\yrcwizewpa.dat 02/12/07 19:20:54 [Note]: 10002 1 02/12/07 19:20:55 [info]: Hidden file: C:\windows2\system32\yrcwizewpa.exe 02/12/07 19:20:55 [Note]: 10002 1 02/12/07 19:20:55 [info]: Hidden file: c:\WINDOWS2\system32\yrcwizewpa_nav.dat 02/12/07 19:20:55 [Note]: 10002 1 02/12/07 19:20:55 [info]: Hidden file: c:\WINDOWS2\system32\yrcwizewpa_navps.dat 02/12/07 19:20:55 [Note]: 10002 1 02/12/07 19:42:07 [Note]: 7007 0 Voilà, par contre, j'aurai voulu savoir quel est le probleme avec flashget; j'utilise ce logiciel depuis pas mal de temps et j'ai jamais eu de soucis avec...

oui, j'ai fait tout ca, mais ca ne resout en rien mon probleme

Bien, au temps pour moi; voici donc mon log HiJackThis ^^ Logfile of HijackThis v1.99.1 Scan saved at 11:54:18, on 12/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS2\System32\smss.exe C:\WINDOWS2\system32\winlogon.exe C:\WINDOWS2\system32\services.exe C:\WINDOWS2\system32\lsass.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\spoolsv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS2\system32\cisvc.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe C:\WINDOWS2\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS2\System32\svchost.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe C:\WINDOWS2\Explorer.EXE C:\WINDOWS2\system32\ctfmon.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe C:\WINDOWS2\SOUNDMAN.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS2\system32\RUNDLL32.EXE C:\Program Files\TomTom HOME\TomTomHOME.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe C:\WINDOWS2\system32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\PROGRA~1\FlashGet\getflash.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [nTrayFw] C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nTrayFw.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS2\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS2\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS2\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS2\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS2\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1036 O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\ctfmon.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O10 - Unknown file in Winsock LSP: c:\windows2\system32\nvappfilter.dll O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS2\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS2\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: app_filter - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcAppFlt.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Kaspersky Anti-Virus Service (kavsvc) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe O23 - Service: WinFast® Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS2\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

bonjours chers zebulonien(ne)s, je suis confronté un soucis assez genant qui s'est presenté du jour au lendemain: mon pc "bug" comme qui dirait mais sans raison particuliere; lors de lancer une application, j'ai beau cliquer sur l'icone de l'application en question mais rien ne se produit; il me faut cliquer intempestivement sur l'icone sans relache pour qu'ensuite l'application choisi se lance :s De plus, au demarage du pc, certaines applications, sencés se lancer ne se lancent pas (tel que msn etc...) mais celà depend aparemment des jours. J'ai dejà liberé pas mal d'espace sur mon disque dur et fait des analyses avec kaspersky antivirus et avg anti-spyware mais rien... Si ces "symptomes" sont familiers à quelqu'un, qu'il n'esite pas à se manifester ^^ Sinon, si besoin d'un log HiJackThis, il suffit de le demander Merci d'avance en tous les cas de me repondre et de m'avoir lu

Merci Kimberly ^o^ Le truc c'est que ça ne me dit pas ou dezipper les mises à jours